CVE-2026-57870

Publié : 7 juillet 2026

Modifié : 7 juillet 2026

Description détaillée

Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other organizations without authorization. This issue affects MicroRealEstate: through 1.0.0-alpha3.

Références et Patchs

https://github.com/microrealestate/microrealestate https://www.themissinglink.com.au/security-advisories/cve-2026-57870

Dernières Vulnérabilités

CVE-2026-8377

Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows Collect Data from Common Resource Locations. This issue affects Access Control System (GKS): before Version 2.

VOIR DÉTAILS

CVE-2026-8309

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows Reflected XSS. This issue affects Access Control System (GKS): before Version 2.

VOIR DÉTAILS

CVE-2026-8306

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows Stored XSS. This issue affects Access Control System (GKS): before Version 2.

VOIR DÉTAILS