QSearchQSearch

CVE-2026-10597

5.3 MEDIUM

OMICARD EDM developed by ITPison has a Insecure Direct Object Reference vulnerability, allowing unauthenticated remote attackers to modif...

Published: 2026-06-04 · Last updated: 2026-06-04

Severity and scoring

CVSS
5.3 MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE
CWE-639

Description

OMICARD EDM developed by ITPison has a Insecure Direct Object Reference vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to obtain user's email address.

Source: NVD

References

Related CVEs

Same CWE

  • CVE-2026-47238 — ClipBucket v5 is an open source video sharing platform (6.5 MEDIUM)
  • CVE-2026-47189 — Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support
  • CVE-2026-7787 — IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authenticatio... (7.5 HIGH)
  • CVE-2026-8406 — openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module
  • CVE-2026-6976 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.... (3.7 LOW)