Advisories · Technology

SMEWebify WebErpMesv2.

Every CVE that names SMEWebify WebErpMesv2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-49827 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434)
- SMEWebify WebErpMesv2
- Authentication bypass
- Unrestricted file upload
Not analysed yet 13 Aug 2026
CVE-2026-22789 CVE record

CVSS 5.4 Medium

WebErpMesv2 has a File Upload Validation Bypass Leading to RCE
- SMEWebify WebErpMesv2
- Unrestricted file upload
- CWE-616
Not analysed yet 12 Jan 2026
CVE-2026-22788 CVE record

CVSS 8.2 High

WebErpMesv2 allows unauthenticated API Access
- SMEWebify WebErpMesv2
- Authentication bypass
Not analysed yet 12 Jan 2026