Advisories · Technology
ArnasDon wacrm.
Every CVE that names ArnasDon wacrm among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
WACRM: Service-role routes missing a role check
- ArnasDon wacrm
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
WACRM: Database-layer authorization bypasses
- ArnasDon wacrm
- Broken access control
- CVSS 6.4 Medium
WACRM: SSRF via the automation `send_webhook` action
- ArnasDon wacrm
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
WACRM Authorization Bypass via Automation Engine Endpoint
- ArnasDon wacrm
- Broken access control