CVE-2026-110129

The fuintCatering platform (through commit 122c9e6) is affected by an Insecure Direct Object Reference (IDOR) vulnerability within the ClientRefundController refund detail endpoint. This flaw allows authenticated members to access and read the refund records of other members by enumerating sequen...