Live › vulnerability › CVE-2026-100164
Go to dashboardRolantis Agentis, a product from Rolantis Information Technologies, returns responses that differ observably in a way that reveals whether an account exists. An attacker can use this account footprinting to build a list of valid users for later attacks.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 13:31 UTC. All times on this page are UTC.
Organisations running Agentis versions before 4.8 are affected according to the NVD entry. The sources do not describe the data path or configuration that makes an installation exposed, so teams running newer versions or no Agentis deployment can skip it.
No product ranges from the sources yet.
4.8; the sources do not say where the version is shown.4.8 or later, as the advisory affects versions before 4.8.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting.
This issue affects Agentis: before 4.8.
This page as .md · .json · in your agent: get_signal("CVE-2026-100164")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.