Vulnerabilities
Ultimate Guide: CVE-2026-22234 - OPEXUS eCasePortal unauthenticated IDOR
CVE ID : CVE-2026-22234 Published : Jan. 8, 2026, 6:16 p.m. | 39 minutes ago Description : OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values of 'formid', and download or delete all user-uploaded files, or upload new files. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE Details
Source: Telegram CVE Monitor