[ Vendor · 1 CVEs ]

WEBCON

CVEs affecting WEBCON published in the last 30 days, plus any WEBCON CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-92419 23 Sep 2026 CVSS 5.3 WEBCON BPSWEBCON BPS is vulnerable to Insecure Direct Object Reference (IDOR) in the /api/vacations/{path} endpoint. The selectedPeople parameter in the Gantt…