VULNERABILITY INTELLIGENCE
CVE-2026-57869
EPSS probability0.36%
CISA KEVNot currently listed
Published2026-07-07
Last modified2026-07-07
Description
Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization. This issue affects MicroRealEstate: through 1.0.0-alpha3.
Weakness classification
- vdp@themissinglink.com.au: CWE-639