CVE-2026-100164: Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis (High, CVSS 7.5)

Remote Attacker
CVE-2026-100164HighRolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis
CVSS
7.5 High (v3.1)
EPSS
0.3% chance of exploitation in the next 30 days (higher than 22.9% of CVEs)
Exploited in the wild
Not on CISA’s KEV list
Public exploit
None reported in public exploit databases
Weakness
CWE-204
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published
Oct 27, 2026

What it is

Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting. This issue affects Agentis: before 4.8.

Description from the National Vulnerability Database.

What to do

Check whether you run Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis, then apply the vendor’s fix or mitigation from the advisories below.

Sources: NVD, FIRST EPSS, CISA KEV, and public exploit databases (availability only). ThreatRoundup reports whether public exploit code exists but never links to it: fake proof-of-concepts that infect security researchers are common. This page updates automatically.