What’s Vulnerable › Vulnerabilities
CVE-2026-2406: IDOR in Universe Software's Online Registration and Workflow Management System
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-07-22 · updated 2026-08-05
- Weakness: CWE-639
Description
Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through 12022026.
Affected products
- Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System: through 12022026
References
Get alerted when CVE-2026-2406 or the next vulnerability affects your stack