CVE-2026-4640: Gss Vitalsesp

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to obtain sensitive information.

Affected products

• Gss Vitalsesp: up to and including 6.3

Published 2026-03-24. Last modified 2026-06-17.