Advisories · Technology

idurar-erp-crm.

Every CVE that names idurar-erp-crm among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-104475 CVE record

CVSS 5.1 Medium

IDURAR ERP CRM through 4.1.1 Stored XSS via SVG Upload
- idurar-erp-crm
- Cross-site scripting (XSS)
Not analysed yet 2 Oct 2026
CVE-2026-81031 CVE record

CVSS 8.6 High

IDURAR ERP CRM through 4.1.1 Account Takeover via Unverified Identifier on Password Update
- idurar-erp-crm
- Broken access control
Not analysed yet 26 Aug 2026
CVE-2026-72600 CVE record

CVSS 7.5 High

Idurar IDURAR ERP CRM - Broken Access Control
- IDURAR ERP CRM
- Broken access control
Not analysed yet 11 Aug 2026
CVE-2024-47769 CVE record

CVSS 7.5 High

IDURAR has a Path Traversal (unauthenticated user can read sensitive data)
- idurar-erp-crm
- Path traversal
Not analysed yet 4 Oct 2024