VULNERABILITY INTELLIGENCE

CVE-2026-9493

CVSS score7.1 HIGH

EPSS probability0.26%

CISA KEVNot currently listed

Published2026-05-29

Last modified2026-07-21

Description

Service Center developed by BankPro E-Service Technology has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify the parameter of a specific query function to access other users' EC order details.