Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-19441 EUVD-2026-63828GHSA-88qr-rwq3-229p

Unauthenticated API Allows Analytics Data Manipulation in IKAS Technology's Rush

Published Aug 21, 2026 · Updated Aug 27, 2026 · Assigned by TR-CERT

Description

Missing authentication for critical function vulnerability in IKAS Technology Inc. Rush allows Fake the Source of Data.

This issue affects Rush: through 21082026. 
NOTE: The vendor was contacted and it was learned that the product is not supported.

Affected products

VendorProductAffectedFixed
IKAS Technology Rush ≤ 21082026 —

References