Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: idurar Clear all filters
TI-2026-67386 CVE-2026-104475 · GHSA-q56x-97x3-xhxv

IDURAR ERP CRM through 4.1.1 Stored XSS via SVG Upload

Priority MEDIUM 56

IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading unsanitized SVG files.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0021 Published 2026-10-02 No fix listed CWE-79
TI-2026-50857 CVE-2026-72600 · GHSA-93xg-c6hj-rp82

Idurar IDURAR ERP CRM - Broken Access Control

Priority MEDIUM 40

A broken access control vulnerability in Idurar IDURAR ERP CRM 4.1.0 allows unauthenticated remote attackers to download invoice PDF files containing customer PII via the /download router.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0061 Published 2026-08-11 No fix listed CWE-284