VULNERABILITY INTELLIGENCE
CVE-2026-115994
CVSS score5.4 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2026-10-24
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Description
BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, compromising the integrity of penetration testing scopes, results, and associated security reports.
Weakness classification
- 772f0079-75c2-41ca-913e-d9072716578b: CWE-639