EUVD-2026-102502

CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront users to read and claim other users' orders via the gift-order API. Attackers can enumerate sequential order IDs in giftdetail to harvest buyer identities and the giftkey, the...

OroPlatform security vulnerabilities

OroPlatform is a PHP Business Application Platform BAP designed to make the development of custom business applications easier and faster. A security vulnerability exists in OroPlatform that stems from the fact that the navigation history, most viewed and favorite navigation items are returned to...

"Attach a smart card reader and insert your smart card to log on" When no Smart Card Authentication Present

When using Citrix Receiver to connect to the NetScaler Gateway, StoreFront users get "Attach a smart card reader and insert your smart card to log on" however smart authentication is not configured...