CVE-2026-3263 go2ismail Asp.Net-Core-Inventory-Order-Management-System Security API improper authorization
MediumCVSS 5.3
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability was found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected by this vulnerability is an unknown functionality of the file /api/Security/ of the component Security API. Performing a manipulation results in improper authorization. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| go2ismail Asp.Net-Core-Inventory-Order-Management-System | = 9.20250118 | No fix listed |
| go2ismail Asp.Net-Core-Inventory-Order-Management-System | <= 9.20250118 | No fix listed |
References
- VDB-347986 | go2ismail Asp.Net-Core-Inventory-Order-Management-System Security API improper authorization third-party-advisory vdb-entry
- VDB-347986 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-required signature vdb-entry
- Submit #758335 | Indotalent Asp.Net-Core-Inventory-Order-Management-System v9.20250118 Improper Authorization third-party-advisory vdb-entry
- github.com exploit mitigation related third-party-advisory