Missing Authorization in GKS Access Control System

Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows Collect Data from Common Resource Locations. This issue affects Access Control System (GKS): before Version 2.

Casky was already ahead

This CVE exploits attack patterns that Casky's 283matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

CVE-2026-8377 represents a critical missing authorization vulnerability in Armiya Information Technologies' GKS Access Control System (versions before 2.0) that permits unauthorized data collection from common resource locations. This vulnerability is particularly concerning because access control systems are foundational security infrastructure—their compromise directly undermines an organization's ability to protect sensitive assets. Affected organizations using GKS are exposed to unauthorized data exfiltration, where attackers can bypass authorization checks to access shared resources, configuration files, and potentially credentials stored in standard system locations. The high CVSS score of 8.2 reflects the severity of unrestricted data access in a system designed to enforce permissions.

Casky's 283 mapped skills detect the attack patterns underlying this vulnerability by correlating MITRE ATT&CK techniques TA0004 (Privilege Escalation) and TA0006 (Credential Access) with authorization enforcement failures. Practitioners using Claude AI's extended reasoning across Casky's skill set would identify findings such as: unauthenticated or under-privileged users successfully accessing protected resource endpoints without proper token validation, repeated requests to common system paths (/etc, /proc, shared drives) succeeding despite insufficient permissions, and access logs showing authorization header manipulation or complete absence of authorization checks in API responses. The platform would flag patterns where CWE-862 (Missing Authorization) manifests as absent or bypassable access control decisions, enabling practitioners to correlate these technical indicators with the specific GKS version in their environment and prioritize remediation before exploitation occurs.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

283 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-8377.

abusing-dpapi-for-credential-access

red teaming · high

Run

abusing-shadow-credentials-for-privesc

red teaming · high

Run

Access with Stolen Session Cookie

identity access management · low

Run

MITRE ATT&CK Techniques

TA0004 TA0006

Investigate the attack patterns behind CVE-2026-8377

Casky has 283 skills that investigate the attack patterns behind CVE-2026-8377. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn