Read the docs

Viafirma

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Viafirma records in CISA KEV

No Viafirma vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Documents 1 record LOW Documents Compose 1 record LOW Inbox 1 record LOW

Records

2 records

TI-2025-27428 CVE-2025-41078 · GHSA-r7v3-974m-576m

Multiple vulnerabilities in Viafirma products

Priority LOW 39

Weaknesses in the authorization mechanisms of Viafirma Documents v3.7.129 allow an authenticated user without privileges to list and access other user data, use user creation, modification, and deletion features, and esc…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00238 Published 2026-01-12 No fix listed CWE-863
TI-2025-27427 CVE-2025-41077 · GHSA-xvh8-9h96-57r8

Multiple vulnerabilities in Viafirma products

Priority LOW 39

IDOR vulnerability has been found in Viafirma Inbox v4.5.13 that allows any authenticated user without privileges in the application to list all users, access and modify their data.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00238 Published 2026-01-12 No fix listed CWE-639
Open these records in search →