TI-2026-34695 CVE-2026-47094 · GHSA-7x6f-hv5j-6c4j
SIMAC MyPHR 1.1 IDOR Account Takeover via /api/employes/put/{id}
Priority HIGH 73
SIMAC MyPHR 1.1 contains an insecure direct object reference (IDOR) vulnerability that allows authenticated attackers to access and modify arbitrary employee records due to missing server-side ownership validation.