archerysec

...

EUVD-2026-81033

ArcherySec through 2.0.6 fails to validate organization ownership in the WebScanVulnList endpoint, allowing authenticated users to read vulnerability findings from other organizations. Attackers can supply arbitrary scan identifiers to retrieve complete web vulnerability data including titles,...

CVE-2026-92765

ArcherySec through version 2.0.6 contains an information disclosure vulnerability in the WebScanVulnList endpoint. The root cause is a failure to validate organization ownership, allowing any authenticated user to supply arbitrary scan identifiers and retrieve complete web vulnerability data —inc...