[ Vendor · 4 CVEs ]
CervantesSec
CVEs affecting CervantesSec published in the last 30 days, plus any CervantesSec CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-115994 | 24 Oct 2026 | CVSS 5.4 | CervantesSec cervantesBOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other… | |
| CVE-2026-115998 | 24 Oct 2026 | CVSS 4.3 | CervantesSec cervantesIDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept details, credentials, and… | |
| CVE-2026-115993 | 24 Oct 2026 | CVSS 6.8 | CervantesSec cervantesStored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in… | |
| CVE-2026-115975 | 24 Oct 2026 | CVSS 7.1 | CervantesSec cervantesBroken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for… |