Description

Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the affected product to log in to the management console. As a result, the attacker may perform any operations available from the management console.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "8.6",
  "pubDate": "2026-08-10T08:16:48.733Z",
  "pubdate": "2026-08-10T08:16:48.733Z",
  "executiveSummary": "An authentication bypass vulnerability exists in Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory. The flaw stems from the use of an overly permissive regular expression within the authentication handling mechanism of the application. This security deficiency allows an unauthorized remote or locally adjacent attacker who has access to the affected product to successfully bypass authentication controls and log in to the management console without valid credentials. The primary impact of this vulnerability is a complete compromise of administrative functionality, as successful exploitation grants the attacker the ability to perform any operations and administrative actions normally restricted to authenticated management users. Risk implications are severe, potentially leading to unauthorized data manipulation, configuration tampering, and full administrative control over the affected logging application. Exploitation of this vulnerability requires network or direct access to the target product and relies on exploiting the flawed regular expression pattern matching during the login procedure.",
  "technicalDetails": "The vulnerability resides in the authentication validation logic of Tegalog -Fumy Otegaru Memo Logger-, specifically within the component responsible for processing login credentials or session verification. The root cause is attributed to the implementation of a permissive regular expression that fails to strictly validate input strings against expected authentication parameters. In improperly bounded or loosely defined regular expressions, anchor characters (such as ^ and $) may be missing or wildcard characters may be misused, allowing unintended input patterns to satisfy the conditional evaluation checks required for granting administrative access.\nThe attack flow proceeds as follows: First, the attacker identifies the network endpoint or local interface hosting the management console of the affected Tegalog -Fumy Otegaru Memo Logger- product. Second, the attacker formulates a crafted input designed to exploit the logic flaw inherent in the permissive regular expression utilized by the authentication routine. Third, the attacker submits this crafted input through the login interface. Fourth, due to the inadequate string matching enforced by the vulnerable regular expression, the application evaluates the malformed input as a valid match, resulting in a successful authentication bypass.\nUpon successful exploitation, the attacker obtains an active administrative session or unauthorized access token. Post-exploitation impact encompasses full administrative control over the management console, enabling the execution of any operational capabilities supported by the interface. The attacker requires network accessibility to the vulnerable application, but does not need valid prior credentials. Privilege requirements for the initial request are effectively zero due to the bypass nature of the vulnerability. The vulnerable component directly processes user-supplied authentication data against the flawed regular expression without secondary validation or strict type checking."
}