Skip to content
OpenAdvisories

Vendor

metasfresh

2 known vulnerabilities.

Products

metasfresh 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-92752

    metasfresh Unauthorized Access via Document Attachments and Comments Endpoints

    metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints check only that callers are logged in without enforcing record-level permissions. Attackers can enumerate sequential document identifiers to read, replace, and delete attachment…

    metasfresh metasfresh