EUVD-2026-102495

metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organization access checks. Attackers can call the getBoard, getCard, addCard, removeCard and patchCard handlers to read...

CVE-2026-111351

metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organization access checks. Attackers can call the getBoard, getCard, addCard, removeCard and patchCard handlers to read...

CVE-2026-111351

The metasfresh software (versions through 5.175) is vulnerable to a missing record-level authorization flaw in the BoardRestController component. This vulnerability allows authenticated low-privilege users to bypass role and organization access checks by interacting with the /rest/api/board REST ...

CVE-2026-111351 metasfresh through 5.175 Authorization Bypass via /rest/api/board REST API

metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organization access checks. Attackers can call the getBoard, getCard, addCard, removeCard and patchCard handlers to read...

CVE-2026-111351 metasfresh through 5.175 Authorization Bypass via /rest/api/board REST API

metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organization access checks. Attackers can call the getBoard, getCard, addCard, removeCard and patchCard handlers to read...

CVE-2026-111351

metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organization access checks. Attackers can call the getBoard, getCard, addCard, removeCard and patchCard handlers to read...

CVE-2026-111351 metasfresh through 5.175 Authorization Bypass via /rest/api/board REST API

metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organization access checks. Attackers can call the getBoard, getCard, addCard, removeCard and patchCard handlers to read...

CVE-2026-111351: Authorization Bypass Through User-Controlled Key

metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organization access checks. Attackers can call the getBoard, getCard, addCard, removeCard and patchCard handlers to read...

PT-2026-115295

metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organization access checks. Attackers can call the getBoard, getCard, addCard, removeCard and patchCard handlers to read...

Metasfresh authorization issue vulnerability

Versions of Metasfresh 5.175 and earlier have an authorization issue. This vulnerability stems from the absence of record-level authorization in the BoardRestController. Low-privilege users, after being authenticated, can bypass role and organization access checks. They can call the getBoard,...

CVE-2026-92752

metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints check only that callers are logged in without enforcing record-level permissions. Attackers can enumerate sequential document identifiers to read, replace, and delete attachments and comments on records their role...

CVE-2026-92752 metasfresh Unauthorized Access via Document Attachments and Comments Endpoints

metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints check only that callers are logged in without enforcing record-level permissions. Attackers can enumerate sequential document identifiers to read, replace, and delete attachments and comments on records their role...

CVE-2026-92752

CVE-2026-92752 affects metasfresh , an ERP/business-management platform. The DocumentAttachmentsRestController and CommentsRestController endpoints validate only that a caller is authenticated but fail to enforce record-level permissions , allowing any logged-in user to enumerate sequential docum...

CVE-2026-92752 metasfresh Unauthorized Access via Document Attachments and Comments Endpoints

metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints check only that callers are logged in without enforcing record-level permissions. Attackers can enumerate sequential document identifiers to read, replace, and delete attachments and comments on records their role...

CVE-2026-92752 metasfresh Unauthorized Access via Document Attachments and Comments Endpoints

metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints check only that callers are logged in without enforcing record-level permissions. Attackers can enumerate sequential document identifiers to read, replace, and delete attachments and comments on records their role...

EUVD-2026-81024

metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints check only that callers are logged in without enforcing record-level permissions. Attackers can enumerate sequential document identifiers to read, replace, and delete attachments and comments on records their role...

CVE-2026-92752: Authorization Bypass Through User-Controlled Key

metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints check only that callers are logged in without enforcing record-level permissions. Attackers can enumerate sequential document identifiers to read, replace, and delete attachments and comments on records their role...

PT-2026-94038

Name of the Vulnerable Software and Affected Versions metasfresh affected versions not specified Description The 'DocumentAttachmentsRestController' and 'CommentsRestController' endpoints fail to enforce record-level permissions, verifying only that the user is authenticated. This allows...