idurar

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

idurar records in CISA KEV

No idurar vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-56041 CVE-2026-81031 · GHSA-xj6j-6jhq-42gg

IDURAR ERP CRM through 4.1.1 Account Takeover via Unverified Identifier on Password Update

HIGH 72

IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00412 Published 2026-08-26 No fix listed CWE-639

TI-2026-67386 CVE-2026-104475 · GHSA-q56x-97x3-xhxv

IDURAR ERP CRM through 4.1.1 Stored XSS via SVG Upload

MEDIUM 56

IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading unsanitized SVG files.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0021 Published 2026-10-02 No fix listed CWE-79

TI-2026-50857 CVE-2026-72600 · GHSA-93xg-c6hj-rp82

Idurar IDURAR ERP CRM - Broken Access Control

MEDIUM 40

A broken access control vulnerability in Idurar IDURAR ERP CRM 4.1.0 allows unauthenticated remote attackers to download invoice PDF files containing customer PII via the /download router.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0061 Published 2026-08-11 No fix listed CWE-284

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0