CVE-2026-55387

The InvoiceShelf web and mobile application (version 2.3.3 and earlier ) is vulnerable to an improper access control flaw during bulk-delete operations. The issue stems from the fact that validators for several request types—including DeleteCustomersRequest , DeleteEstimatesRequest , DeleteExpens...