CVE-2026-35097

Description

KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the use of any alphabetic, special, or extended characters. This issue was fixed in the patch published in June 2026.

References

• https://cert.pl/posts/2026/06/CVE-2026-35095/
• https://ktmsystem.pl/internetowe-biuro-obslugi-klienta/