Advisories · Technology

metasfresh.

Every CVE that names metasfresh among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111351 CVE record

CVSS 2.3 Low

metasfresh through 5.175 Authorization Bypass via /rest/api/board REST API
- metasfresh
- Broken access control
Not analysed yet 15 Oct 2026
CVE-2026-92752 CVE record

CVSS 8.7 High

metasfresh Unauthorized Access via Document Attachments and Comments Endpoints
- metasfresh
- Broken access control
Not analysed yet 16 Sept 2026