CVE-2026-15575

Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-15575 Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier

Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-15575

SFM Software Technologies Inc. Costifier is affected by a sensitive information disclosure vulnerability caused by active debug code (CWE-489) enabled in a production environment. This flaw allows for the exploitation of non-production interfaces. The vulnerability was identified as of October 16...

CVE-2026-15219 IDOR in SFM Software's Costifier

Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-15219

A vulnerability exists in SFM Software Technologies Inc. Costifier involving an Insecure Direct Object Reference (IDOR) . The flaw allows for an authorization bypass through a User-Controlled key vulnerability, specifically enabling the Exploitation of Trusted Identifiers . The issue impacts the ...