Skip to content
OpenAdvisories

Vendor

gamonoid

1 known vulnerabilities.

Products

icehrm 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-91770

    IceHRM before 36.0.0 Broken Access Control via Employee ID

    IceHRM before 36.0.0 fails to validate employee ownership on seven REST sub-resource endpoints, allowing authenticated employees to read any colleague's HR records. Attackers can substitute arbitrary employee IDs in skill, education, certification, language, …

    gamonoid icehrm