CVE-2026-31150

CVE-2026-31150 affects Kaleris YMS v7.2.2.1 and is due to incorrect access control that allows authenticated users with only the shipping/receiving role to view the truck dashboard resources. The issue is documented with a PoC/exploitation flag in the metrics, indicating practical exploitability ...