CVE-2026-15219
CVE-2026-15219 · IDOR in SFM Software's Costifier
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS 6.5 · Medium · EPSS 0.2%
- Published
- Updated
Affected products and versions
costifier
- Versions
- ≥ 0, ≤ 2026-10-16: Affected (date)
No fix published