gamonoid

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

gamonoid records in CISA KEV

No gamonoid vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-61981 CVE-2026-91770 · GHSA-hf65-v49c-m7f4

IceHRM before 36.0.0 Broken Access Control via Employee ID

MEDIUM 64

IceHRM before 36.0.0 fails to validate employee ownership on seven REST sub-resource endpoints, allowing authenticated employees to read any colleague's HR records.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00454 Published 2026-09-15 Fixed in 36.0.0 CWE-639

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0