Vulnerabilities

TI-2026-01284 CVE-2026-1597 · GHSA-4vv9-gf8x-3292

Bdtask SalesERP Administrative Endpoint improper authorization

MEDIUM 57

A vulnerability has been found in Bdtask SalesERP up to 20260116.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00316 Published 2026-01-29 No fix listed CWE-266

TI-2025-12048 CVE-2025-13178 · GHSA-jgpm-4mcp-wmvj

MEDIUM 56

A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00254 Published 2025-11-14 No fix listed CWE-74

TI-2025-12047 CVE-2025-13177 · GHSA-4gw8-mpvg-cxc6

MEDIUM 57

A vulnerability was detected in Bdtask/CodeCanyon SalesERP up to 20250728.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00267 Published 2025-11-14 No fix listed CWE-352