CVE-2026-115994: CVE-2026-115994: güvenlik açığı

Açıklama (NVD)

BOLA Allows Cross-Project Target Tampering  in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, compromising the integrity of penetration testing scopes, results, and associated security reports.

Özet bilgiler

CVSS v3.1

5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

EPSS

%0,22 (yüzdelik 13)

CWE

CWE-639

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.grayback.es
• www.grayback.es
• CWE-639