wimoor-erp

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

wimoor-erp records in CISA KEV

No wimoor-erp vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-75477 CVE-2026-111691 · GHSA-h72p-hrwq-pw25

Authentication bypass in WIMOOR via forged X-USERINFO header

MEDIUM 41

WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows attackers to impersonate any tenant and privilege level by sending an unsigned X-USERINFO header.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00409 Published 2026-10-16 No fix listed CWE-290

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0