MEDIUM 4.3 NVD

CVE-2026-115998

IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept details, credentials, and client inform

IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept details, credentials, and client information from projects they do not belong to. Additionally, they can modify finding statuses and transfer findings to their own projects, compromising data confidentiality and integrity.

References

https://www.grayback.es/advisories
https://www.grayback.es/en/advisories

Published: 2026-10-24 · Source: NVD · Feed updated: 2026-10-24

This medium severity vulnerability with a CVSS score of 4.3 was published on 2026-10-24 via NVD.

vulnfeed aggregates 15909 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.