TI-2026-41668 CVE-2026-57867 · GHSA-j5cw-4r7c-4vw8
Authentication bypass in MicroRealEstate
Priority MEDIUM 45
MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management.
MicroRealEstate
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
MicroRealEstate records in CISA KEVNo MicroRealEstate vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2026-41672 CVE-2026-57871 · GHSA-56qr-p95w-94vh
Path traversal in MicroRealEstate
Priority LOW 32
Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files.
TI-2026-41670 CVE-2026-57869 · GHSA-2rhx-q7hx-f25r
Authorization bypass in MicroRealEstate
Priority LOW 31
Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization.
TI-2026-41669 CVE-2026-57868 · GHSA-qjq2-685q-j8gv
Authorization bypass in MicroRealEstate
Priority LOW 31
MicroRealEstate is affected by broken object-level access controls in PDF generator functionality.
TI-2026-41671 CVE-2026-57870 · GHSA-jj92-236g-5h8p
Authorization bypass in MicroRealEstate
Priority LOW 24
Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other organizations without authorization.