[ Vendor · 3 CVEs ]

elunez

CVEs affecting elunez published in the last 30 days, plus any elunez CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-111604 16 Oct 2026 CVSS 3.8 elunez eladmineladmin through 2.7 contains an authorization bypass vulnerability that allows department-scoped user managers to modify or delete accounts outside…
CVE-2026-108706 11 Oct 2026 CVSS 4.3 elunez eladmineladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to…
CVE-2026-108688 11 Oct 2026 CVSS 4.3 elunez eladminEladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged…