Skip to content
OpenAdvisories

Vendor

CervantesSec

4 known vulnerabilities.

Products

cervantes 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-115998

    IDOR: User reads and modifies findings from other people's projects

    IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept details, credentials, and client information from projects they do not belong to. Additionally, they can modify finding statuses and trans…

    CervantesSec cervantes
  • Medium 5.4
    CVE-2026-115994

    BOLA Allows Cross-Project Target Tampering

    BOLA Allows Cross-Project Target Tampering  in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, compromising the integrity of penetration testing scopes, results, and associated se…

    CervantesSec cervantes
  • Medium 6.8
    CVE-2026-115993

    Stored XSS in the “Notes” field of project checklists

    Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges

    CervantesSec cervantes