Advisories · Technology

puemos Craftplan.

Every CVE that names puemos Craftplan among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111349 CVE record

CVSS 6.9 Medium

Craftplan through 0.7.5 Missing Authorization via CRM Customer JSON:API and GraphQL
- puemos Craftplan
- Broken access control
Not analysed yet 15 Oct 2026
CVE-2026-76876 CVE record

CVSS 8.2 High

Craftplan < 0.5.1 Broken Access Control Information Disclosure via Settings API
- puemos craftplan
- Broken access control
Not analysed yet 21 Aug 2026