TI-2025-27427 CVE-2025-41077 · GHSA-xvh8-9h96-57r8Multiple vulnerabilities in Viafirma productsPriority LOW 39IDOR vulnerability has been found in Viafirma Inbox v4.5.13 that allows any authenticated user without privileges in the application to list all users, access and modify their data.CVSS 4.0HIGH 8.6· Network · Low privileges · No interaction · EPSS 0.00238 · Published 2026-01-12 · No fix listed CWE-639