{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-115998",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-02T14:04:10.816409Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-02T14:05:02.842Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "cervantes",
          "vendor": "CervantesSec",
          "versions": [
            {
              "lessThanOrEqual": "1.3-beta",
              "status": "affected",
              "version": "alpha 0.3",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "v.1.4.0-beta"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:cervantessec:cervantes:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "1.3-beta",
                  "versionStartIncluding": "alpha_0.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:cervantessec:cervantes:v.1.4.0-beta:*:*:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Joan Arranz"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003c/div\u003e\u003cdiv\u003e\u003cp\u003eIDOR i\u003cspan\u003en Cervantes version v1.3-beta could allow a\u003c/span\u003en authenticated attacker ca\u0026nbsp;access sensitive findings, proof-of-concept details, credentials, and client information from projects they do not belong to. Additionally, they can modify finding statuses and transfer findings to their own projects, compromising data confidentiality and integrity.\u003c/p\u003e\u003c/div\u003e"
            }
          ],
          "value": "IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca\u00a0access sensitive findings, proof-of-concept details, credentials, and client information from projects they do not belong to. Additionally, they can modify finding statuses and transfer findings to their own projects, compromising data confidentiality and integrity."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-639",
              "description": "CWE-639: Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-24T09:28:05.849Z",
        "orgId": "772f0079-75c2-41ca-913e-d9072716578b",
        "shortName": "Grayback"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.grayback.es/advisories"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.grayback.es/en/advisories"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "IDOR: User reads and modifies findings from other people\u0027s projects",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "772f0079-75c2-41ca-913e-d9072716578b",
    "assignerShortName": "Grayback",
    "cveId": "CVE-2026-115998",
    "datePublished": "2026-10-24T09:28:05.849Z",
    "dateReserved": "2026-10-24T09:23:13.297Z",
    "dateUpdated": "2026-11-02T14:05:02.842Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-115998\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-11-02T14:04:10.816409Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-11-02T14:04:40.428Z\"}}], \"cna\": {\"title\": \"IDOR: User reads and modifies findings from other people\u0027s projects\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Joan Arranz\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"CervantesSec\", \"product\": \"cervantes\", \"versions\": [{\"status\": \"affected\", \"version\": \"alpha 0.3\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"1.3-beta\"}, {\"status\": \"unaffected\", \"version\": \"v.1.4.0-beta\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://www.grayback.es/advisories\", \"tags\": [\"patch\"]}, {\"url\": \"https://www.grayback.es/en/advisories\", \"tags\": [\"patch\"]}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.5\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca\\u00a0access sensitive findings, proof-of-concept details, credentials, and client information from projects they do not belong to. Additionally, they can modify finding statuses and transfer findings to their own projects, compromising data confidentiality and integrity.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cdiv\u003e\u003c/div\u003e\u003cdiv\u003e\u003cp\u003eIDOR i\u003cspan\u003en Cervantes version v1.3-beta could allow a\u003c/span\u003en authenticated attacker ca\u0026nbsp;access sensitive findings, proof-of-concept details, credentials, and client information from projects they do not belong to. Additionally, they can modify finding statuses and transfer findings to their own projects, compromising data confidentiality and integrity.\u003c/p\u003e\u003c/div\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-639\", \"description\": \"CWE-639: Authorization Bypass Through User-Controlled Key\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:cervantessec:cervantes:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndIncluding\": \"1.3-beta\", \"versionStartIncluding\": \"alpha_0.3\"}, {\"criteria\": \"cpe:2.3:a:cervantessec:cervantes:v.1.4.0-beta:*:*:*:*:*:*:*\", \"vulnerable\": false}], \"operator\": \"OR\"}], \"operator\": \"OR\"}], \"providerMetadata\": {\"orgId\": \"772f0079-75c2-41ca-913e-d9072716578b\", \"shortName\": \"Grayback\", \"dateUpdated\": \"2026-10-24T09:28:05.849Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-115998\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-11-02T14:05:02.842Z\", \"dateReserved\": \"2026-10-24T09:23:13.297Z\", \"assignerOrgId\": \"772f0079-75c2-41ca-913e-d9072716578b\", \"datePublished\": \"2026-10-24T09:28:05.849Z\", \"assignerShortName\": \"Grayback\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}