[ CVE-2026-115998 · Published 24 Oct 2026 ]
Vulnerability in CervantesSec cervantes
CVSS 4.3
EPSS <1%No fix listed yet
[ Description ]Official description
IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept details, credentials, and client information from projects they do not belong to. Additionally, they can modify finding statuses and transfer findings to their own projects, compromising data confidentiality and integrity.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.