VULNERABILITY INTELLIGENCE
CVE-2026-57870
EPSS probability0.36%
CISA KEVNot currently listed
Published2026-07-07
Last modified2026-07-07
Description
Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other organizations without authorization. This issue affects MicroRealEstate: through 1.0.0-alpha3.
Weakness classification
- vdp@themissinglink.com.au: CWE-639