Skip to content
OpenAdvisories

Product · Webkul

Aureus ERP

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-112193

    Webkul Aureus ERP UserForm.php weak password

    A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserForm.php. Performing a manipulation of the argument Password results in weak pas…

    Webkul Aureus ERP
  • Low 3.7
    CVE-2026-110218

    Aureus ERP through 1.6.0 Unpublished Blog Post Disclosure via Direct URL

    Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unpublished draft blog posts via the customer-facing post view page. Attackers who know or guess a post slug can retrieve the full title, con…

    Webkul Aureus ERP