CVE-2026-66840: Xing Inc Xing Cptrans-Me-X

High severity, CVSS 8.7. EPSS: 0.4% chance of exploitation in the next 30 days.

XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sensitive system information may be leaked.

Affected products

• Xing Inc Xing Cptrans-Me-X: before 1.8.1.17 (fixed in 1.8.1.17)

Published 2026-09-04. Last modified 2026-09-08.