CVE-2026-82029

A flaw was found in Invoice Ninja. An authenticated vendor portal user can gain unauthorized access to documents belonging to other vendors and clients due to improper authorization checks that only validate company-level scope rather than specific vendor ownership. By supplying or enumerating...