VULNERABILITY INTELLIGENCE

CVE-2026-57867

CVSS score8.8 HIGH
EPSS probability0.60%
CISA KEVNot currently listed
Published2026-07-07
Last modified2026-07-07

Description

MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targeting MicroRealEstate deployments to brute-force One-Time Passwords (OTP) to log in as any user. This issue affects MicroRealEstate: through 1.0.0-alpha3.

Primary references

  • TML — product
  • TML — third-party-advisory