Skip to content
OpenAdvisories

Vendor

SIMAC

1 known vulnerabilities.

Products

MyPHR 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-47094

    SIMAC MyPHR 1.1 IDOR Account Takeover via /api/employes/put/{id}

    SIMAC MyPHR 1.1 contains an insecure direct object reference (IDOR) vulnerability that allows authenticated attackers to access and modify arbitrary employee records due to missing server-side ownership validation. Attackers can send a PUT request to the empl…

    SIMAC MyPHR