CVE-2026-4639: Gss Vitalsesp

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges.

Affected products

• Gss Vitalsesp: up to and including 6.3

Published 2026-03-24. Last modified 2026-06-17.