Skip to content
OpenAdvisories

Vendor

Fullstep

2 known vulnerabilities.

Products

Fullstep 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2026-5750

    Insecure direct object reference (IDOR) vulnerability in Fullstep

    An insecure direct object reference (IDOR) vulnerability in the Fullstep V5 registration process allows authenticated users to access data belonging to other registered users through various vulnerable authenticated resources in the application. The vulnerabl…

    Fullstep Fullstep
  • High 8.7
    CVE-2026-5749

    Inadequate access control vulnerability in Fullstep

    Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT token with which to interact with authenticated API resources. Successful exploitation of this vulnerability could allow an una…

    Fullstep Fullstep