we-promise

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

we-promise records in CISA KEV

No we-promise vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-74431 CVE-2026-110772

Missing authorization in Sure lets members edit others' transactions

MEDIUM 57

Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesController#create that allows family members to bypass account sharing permissions.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00266 Published 2026-10-14 Fix deferred CWE-862

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0