Moyenne
5.4
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest(...
CVE-2026-112786
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest() that allows low-privileged authenticated users to roll back data imports. Attackers with READ-level access can request the import module's revert action with an importID to mass-delete imported candidate, company, and contact records.
Source: NIST National Vulnerability Database NVD GitHub Advisory