Skip to content
OpenAdvisories

Product · ServiceNext

SerTec

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-79957

    ServiceNext Insecure Direct Object Reference via GetUsarios

    ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token belongs to the requested account (CWE-639).…

    ServiceNext SerTec