CVE-2026-8406 — openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging module can request sent-message details from — CVE Database · The Intelligence Room