ECHO-8427-6F08-DCFB

Bulletin has no description...

ECHO-74C9-0FDE-A62D

Bulletin has no description...

ECHO-0788-C33C-70F9

Bulletin has no description...

ECHO-E988-416F-4E5D

Bulletin has no description...

ECHO-877D-C967-81EB

Bulletin has no description...

ECHO-8DAE-30ED-D27D

Bulletin has no description...

ECHO-AADE-52E5-F135

Bulletin has no description...

ECHO-03B9-AB17-F82F

Bulletin has no description...

CGA-8375-R356-7X85

Bulletin has no description...

CGA-2R33-FWR4-RW58

Bulletin has no description...

GHSA-MW9F-CFV6-V3RG vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-75P5-W5J4-V8QJ vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-V3Q7-WG94-9978 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-53903

MCO is vulnerable to an Insecure Direct Object Reference IDOR vulnerability in the /customer/servlet/mco/webapi/trading-document/fetchPdfStatement endpoint. The application does not properly validate whether an authenticated user is authorized to access a requested document, allowing direct...

ECHO-8445-3A6C-9043

Bulletin has no description...

ECHO-5A8A-19C3-EAEF

Bulletin has no description...

ECHO-D5F7-CB8C-2A12

Bulletin has no description...

ECHO-DB43-5462-956D

Bulletin has no description...

ECHO-DBFC-D3FF-9463

Bulletin has no description...

CVE-2026-53903

CVE-2026-53903 affects MCO via the insecure endpoint /customer/servlet/mco/webapi/trading-document/fetchPdfStatement. The underlying issue is an IDOR: the app does not properly validate that an authenticated user is authorized to access a requested document, allowing retrieval based on a user-sup...