https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T09:10:44.183214+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111632 CVE-2026-111632 — Aureus ERP through 1.6.0 Multi-Company Authorization Bypass via company_id 2026-10-20T09:10:44.184772+00:00

Affected: aureuserp

Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed companies by supplying a foreign company_id. Attackers can submit create or update requests to plugin REST API endpoints such as partners, sales, or inventories to break multi-company data segregation.