Skip to content
OpenAdvisories

Product · Adiss

Biloop

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-12686

    Incorrect authorisation in Adiss’s Biloop

    An authenticated user could manipulate a company ID parameter in a POST request to the backend to gain unauthorised access to other companies hosted within the same subdomain environment. The application does not adequately verify whether the requested compan…

    Adiss Biloop