BDU:2026-05967

This vulnerability is like a “bad auto-code generator” inside your INTEC Universe core module. If someone can reach the vulnerable part over the network, they may be able to make the software run attacker-written code, giving them control of the system. The risk includes theft of business data and service disruption, depending on what the affected server can access.

This matters if you run INTEC Universe and specifically use the Intec.Core module on a system reachable from a network (for example, a server that can receive network requests from other machines). The issue does not require a login or user interaction, so exposure depends on whether the vulnerable functionality is reachable in your setup. The findings do not confirm whether it’s reachable by default; you should treat it as a priority to verify your exposure and upgrade.

Treat this as AMBER priority: the flaw allows remote attackers to run arbitrary code without authentication, which is severe even if exploitation is not confirmed in public records. Because there is no KEV listing and no public exploit code recorded, the immediate real-world exploitation level is not known—but the available fix means you should upgrade promptly to reduce risk.