Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-126123 EUVD-2026-123057GHSA-765h-3f46-9h3c

BeeS ERP administrative console IDOR

Published Nov 10, 2026 · Assigned by cisa-cg

Description

BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to the administrative dashboard endpoint and gain access to the administrative console, including unrestricted access to institutional, employee, and student data.

Affected products

VendorProductAffectedFixed
BeeS Software Solutions ERP < 2026-09-04 2026-09-04

Advisories 1

References

  • url third-party-advisory
  • url vdb-entry