Skip to content
OpenAdvisories

Vendor

wimoor-erp

1 known vulnerabilities.

Products

wimoor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-111691

    WIMOOR through commit ec86736 Authentication Bypass via Forged X-USERINFO Header

    WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows attackers to impersonate any tenant and privilege level by sending an unsigned X-USERINFO header. Attackers reaching backend service ports directly, bypassing the gatewa…

    wimoor-erp wimoor