SFM Software Technologies Inc. vulnerabilities

Products

• Costifier 2

Latest SFM Software Technologies Inc. CVEs

Newest publication first

1. CVE-2026-15575 Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier

   Published 2026-10-16

   Medium·CVSS 5.3 EPSS 0.20%

   Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

2. CVE-2026-15219 IDOR in SFM Software's Costifier

   Published 2026-10-16

   Medium·CVSS 6.5 EPSS 0.19%

   Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.