CE
Vendor
CervantesSec
6
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115998 New | CE cervantes CervantesSec | 4.3 | Oct 24 | IDOR: User reads and modifies findings from other people's projects |
| CVE-2026-115994 New | CE cervantes CervantesSec | 5.4 | Oct 24 | BOLA Allows Cross-Project Target Tampering |
| CVE-2026-115993 New | CE cervantes CervantesSec | 6.8 | Oct 24 | Stored XSS in the “Notes” field of project checklists |
| CVE-2026-115975 New | CE cervantes CervantesSec | 7.1 | Oct 24 | Broken access control in JiraController |
| CVE-2024-42054 | CE Cervantes Cervantessec | 5.4 | Jul 28 | Cervantes through 0.5-alpha accepts insecure file uploads |
| CVE-2024-42055 | CE Cervantes Cervantessec | 5.4 | Jul 28 | Cervantes through 0.5-alpha allows stored XSS |