PT-2026-35875

Name of the Vulnerable Software and Affected Versions FacturaScripts affected versions not specified Description Broken Access Control exists in the user update logic. The application fails to validate the nick parameter during a 'POST' request to the '/EditUser' endpoint. Although the user...

CVE-2026-32699

creationtimestamp| type| source ---|---|--- 2026-04-26 03:00:05+00:00| published-proof-of-concept| Telegram/kld9yLBbS6fzFNytGTSDXwsTRi8Qoep-LDw8M-oA9J472Qs...