What’s Vulnerable › Products

Webkul Aureus ERP vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Webkul Aureus ERP version is affected

Latest Webkul Aureus ERP vulnerabilities

• CVE-2026-112193 — Webkul Aureus ERP UserForm.php weak password (CVSS 3.7)
• CVE-2026-112190 — Webkul Aureus ERP composer.json insertion of sensitive information into debugging code (CVSS 5.3)
• CVE-2026-111284 — Aureus ERP through 1.6.0 Stored XSS via Time Off Holiday Action Modal (CVSS 5.4)
• CVE-2026-110218 — Aureus ERP through 1.6.0 Unpublished Blog Post Disclosure via Direct URL (CVSS 3.7)
• CVE-2026-97062 — Aureus ERP 1.6.0 Stored XSS via SVG File Upload (CVSS 5.4)
• CVE-2026-95655 — Aureus ERP before 1.5.0 Unscoped Message Access via ChatterPanel (CVSS 8.1)
• CVE-2026-94387 — Aureus ERP before 1.6.0 Stored XSS via Chatter Field-Change Log (CVSS 5.4)
• CVE-2026-93454 — Aureus ERP through 1.6.0 Stored XSS via Payment Term Note (CVSS 5.4)