CVE-2026-15658

CVE-2026-15658 affects the foreUP customer REST API. The issue is a missing object-level authorization (BOLA/IDOR) that allows any authenticated, low-privilege foreUP customer to request an endpoint that returns another customer’s data without verifying ownership. Documented impact includes acces...