CVE-2026-2406

MEDIUM

IDOR in Universe Software's Online Registration and Workflow Management System

Title source: cna
STIX 2.1

Description

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through 12022026.

References (1)

Core 1
Core References

Scores

CVSS v3 6.5
EPSS 0.0029
EPSS Percentile 21.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-639
Status published
Products (1)
Universe Software Computer Marketing Trade and Industry Inc./Online Registration and Workflow Management System < 12022026
Published Jul 22, 2026
Tracked Since Jul 22, 2026