CVE-2026-111721

Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never enforces authwarehouse scoping. Attackers holding the menu permission can enumerate sequential IDs on...

CVE-2026-111721 Open WES through 1.0.0 Broken Access Control via GlobalGatewayFilter Warehouse Scoping

Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never enforces authwarehouse scoping. Attackers holding the menu permission can enumerate sequential IDs on...

EUVD-2026-103013

Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never enforces authwarehouse scoping. Attackers holding the menu permission can enumerate sequential IDs on...

CVE-2026-111721

The Open WES through 1.0.0 software contains an authorization bypass vulnerability caused by a lack of auth_warehouse scoping within the GlobalGatewayFilter . This flaw allows authenticated users with menu permission to modify stock records belonging to other warehouses. Specifically, attackers c...

PT-2026-116120

Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never enforces auth warehouse scoping. Attackers holding the menu permission can enumerate sequential IDs on...