[ Vendor · 2 CVEs ]
aureuserp
CVEs affecting aureuserp published in the last 30 days, plus any aureuserp CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111632 | 16 Oct 2026 | CVSS 5.4 | aureuserpAureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed… | |
| CVE-2026-110878 | 15 Oct 2026 | CVSS 5.4 | aureuserpAureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts via unescaped… |