CVE-2026-27776 Details
Description
IM-LogicDesigner module of intra-mart Accel Platform contains insecure deserialization issue. This can be exploited only when IM-LogicDesigner is deployed on the system. Arbitrary code may be executed when some crafted file is imported by a user with the administrative privilege.
A vulnerability exists in the IM-LogicDesigner module of the intra-mart Accel Platform, specifically in versions 2017 Spring through 2025 Autumn. This vulnerability involves the insecure deserialization of untrusted data, which can be exploited to execute arbitrary code. The issue arises when a crafted file is imported by a user with administrative privileges.
Patches have been released for all affected versions. Instructions for applying the patch can be found in the intra-mart Accel Platform Set up guide. For environments using Accel-Mart Quick or DPS for Sales Cloud, the patch has already been applied. For intra-mart Accel Platform for LGWAN, the patch will be applied during the maintenance on February 27, 2026.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 27, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://global.intra-mart.support/hc/en-us/articles/55266898383641 | [email protected] | Vendor Advisory |
| https://jvn.jp/en/jp/JVN80500630/ | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| intra-mart accel platform | 8.0.4 - 8.0.5 - 8.0.6 - 8.0.7 - 8.0.8 - 8.0.9 - 8.0.10 - 8.0.11 - 8.0.12 - 8.0.13 - 8.0.14 - 8.0.15 - 8.0.16 - 8.0.17 - 8.0.19 - 8.0.20 - 8.0.21 - 8.0.22 - 8.0.23 - 8.0.24 - 8.0.25 - 8.0.26 - 8.0.27 - |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 23, 2026 | Initial Analysis | [email protected] |
| Feb 27, 2026 | New CVE Received | [email protected] |