中
5.4
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest(...
CVE-2026-112786
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest() that allows low-privileged authenticated users to roll back data imports. Attackers with READ-level access can request the import module's revert action with an importID to mass-delete imported candidate, company, and contact records.
出典: NIST National Vulnerability Database NVD GitHub Advisory