Vulnerabilities in MicroRealEstate

5 results

Vexday analysis

MicroRealEstate apresenta 5 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando exposição recente a riscos. Nenhuma vulnerabilidade está sob exploração ativa conhecida (KEV) e não há classificações críticas, reduzindo a urgência imediata. A fraqueza dominante é CWE-639 (autorização inadequada), sugerindo falhas estruturais em controle de acesso que demandam revisão arquitetural.

CVE-2026-57867HIGHMicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targetingEPSS 0.4%CVE-2026-57871HIGHRelative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files. EPSS 0.4%CVE-2026-57868HIGHMicroRealEstate is affected by broken object-level access controls in PDF generator functionality. This issue affects MicroRealEstate: throEPSS 0.2%CVE-2026-57870MEDIUMBroken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other orgaEPSS 0.2%CVE-2026-57869HIGHBroken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers tEPSS 0.2%