CVE-2026-13227 - An Improper Authorization vulnerability exists in ERPNext version <v16.25.0 and <15.115.0 due to insufficient access control in the whitelisted API method erpnext.crm.doctype.prospect.prospect.get_opportunities. This issue affects ERPNext: before 15.115.0, before 16.26.0. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-82279 [高危] CVE-2026-82279 - HyperDX through 1.10.1 fails to enforce role-based ac…
• CVE-2026-82273 [中危] CVE-2026-82273 - Mastra through 1.63.0 contains an authentication bypa…
• CVE-2026-82267 [中危] CVE-2026-82267 - Komodo through 2.3.2 discloses internal resource iden…
• CVE-2026-56100 [高危] CVE-2026-56100 - SpringBlade versions 2.7.3 through 3.5.0 contain a pr…
• CVE-2026-55545 [中危] CVE-2026-55545 - Yamcs is a mission control framework. Prior to 5.12.8…
• CVE-2026-55521 [高危] CVE-2026-55521 - Yamcs is a mission control framework. Prior to 5.12.8…
• CVE-2026-55064 [中危] CVE-2026-55064 - Vikunja is an open-source self-hosted task management…
• CVE-2026-81767 [高危] CVE-2026-81767 - Unauthenticated Broken Access Control in Simple Payme…