CVE-2022-45766

The CVE-2022-45766 entry concerns Key Systems Management’s GFMS software, version 3. It states that hardcoded credentials exist in GFMS v3, which could allow remote attackers to impact the availability, confidentiality, accessibility and dependability of electronic key boxes. The provided referen...

CVE-2026-26723

A Cross-Site Scripting (XSS) vulnerability exists in Key Systems Inc Global Facilities Management Software v. 20230721a . The root cause is a failure to properly sanitize input within a specific function parameter, which could allow a remote attacker to inject malicious scripts and execute arbitr...

CVE-2026-26722

An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privileges via the PIN component of the login functionality. The vulnerability results in high impact for integrity and availability as indicated by the CVSS 3.1 score of 9.4 (CRITIC...

CVE-2026-26721

The Key Systems Inc Global Facilities Management Software (version 20230721a ) is vulnerable to an issue where a remote attacker can obtain sensitive information . The vulnerability is caused by the use of the sid query parameter within an affected API endpoint , specifically through the use of t...

CVE-2026-26724

Key Systems Inc Global Facilities Management Software version 20230721a is vulnerable to a Cross-Site Scripting (XSS) flaw. A remote attacker can execute arbitrary code by manipulating the selectgroup and gn parameters on the /?Function=Groups or /api/v1/Groups endpoints. To mitigate this risk, u...