Skip to content

CVE record · 1 source

CVE-2026-119732

CVSS 6.5

Munshi (by Petpooja) before 2026-07-28 contained a broken object level authorization vulnerability that allows authenticated sub-users to delete…

Vendor: Petpooja
Product: Munshi
CVSS v3.1: 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weakness: CWE-639

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

18

CVE NVD 3h ago

Munshi (by Petpooja) before 2026-07-28 contained a broken object level authorization vulnerability that allows authenticated sub-users to delete…

Munshi (by Petpooja) before 2026-07-28 contained a broken object level authorization vulnerability that allows authenticated sub-users to delete invoices belonging to the tenant owner by exploiting the DELETE…

CVSS 6.5 CVE-2026-119732 Petpooja