https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T12:51:42.173788+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-5798 CVE-2026-5798 — Unsafe Object Reference (IDOR) vulnerability in Stel Order 2026-10-27T12:51:42.174823+00:00

Affected: Stel Order

Unsafe object reference (IDOR) in Stel Order v3.25.1 and earlier versions, specifically in the ‘/app/FrontController’ endpoint, through manipulation of the ‘employeeID’ parameter. An authenticated attacker could exploit this vulnerability to access information about any employee (first names, last names, roles, job titles, and vacation records, among others) by modifying that identifier in requests sent to the server.