CVEvulnerability

CVE-2026-115998

4.3 MEDIUM Published 2026-10-24 Modified 2026-10-26 Official page ↗
Status
Deferred
Published
2026-10-24
Last modified
2026-10-26
Assigner
772f0079-75c2-41ca-913e-d9072716578b
CVSS 3.1 (772f0079-75c2-41ca-913e-d9072716578b)
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-639

Description

IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept details, credentials, and client information from projects they do not belong to. Additionally, they can modify finding statuses and transfer findings to their own projects, compromising data confidentiality and integrity.

Related

Weakness · CWE (1)

  • CWE-639 Authorization Bypass Through User-Controlled Key weakness

References