Vulnerabilities in MicroRealEstate

5 results

CVE-2026-57867HIGHMicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targetingEPSS 0.6%CVE-2026-57871HIGHRelative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files. EPSS 0.5%CVE-2026-57870MEDIUMBroken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other orgaEPSS 0.4%CVE-2026-57868HIGHMicroRealEstate is affected by broken object-level access controls in PDF generator functionality. This issue affects MicroRealEstate: throEPSS 0.4%CVE-2026-57869HIGHBroken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers tEPSS 0.4%