Skip to content
OpenAdvisories
Medium VA-26-313-04 1 CVE

BeeS ERP administrative console IDOR

Published Nov 10, 2026 · Updated Nov 10, 2026

Vendor: BeeS Software Solutions Product: ERP

Summary

BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to the administrative dashboard endpoint and gain access to the administrative console, including unrestricted access to institutional, employee, and student data.

Vulnerabilities 1

  • Medium 6.5
    CVE-2026-126123

    BeeS ERP administrative console IDOR

    BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to the administrative dashboard endpoint and gain access to the administrative console, including unrestricted access to institutional, employee, and stud…

    BeeS Software Solutions ERP

Revision history

  1. #1.0.0

    Initial publication