Skip to content
OpenAdvisories

Vendor

Kompini

2 known vulnerabilities.

Products

Tankuam Places 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-93556

    Direct references to unsafe objects (IDOR) in Tankuam Places by Kompini

    The ‘/password/guardarClau/recover’ endpoint accepts the ‘usuariId’ parameter, which specifies the account whose password is to be changed. The JWT token for the recovery process is not validated against the user specified in that parameter. An unauthenticate…

    Kompini Tankuam Places