CVE-2026-121817

The Herowatch Go Server developed by About Time Technologies is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability (CWE-639). This flaw allows authenticated remote attackers to modify specific parameters to gain unauthorized access to or operation of other users' data and fun...