CVE-2026-57868

HighCVSS 7.1

Published: 07/07/2026(UTC)Updated: 07/07/2026(UTC)Translated: 08/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

MicroRealEstate is vulnerable to broken object-level access controls in its PDF generator functionality. This affects versions through 1.0.0-alpha3.

Risk Assessment

An attacker can access sensitive property data or other objects without proper authorization, leading to information disclosure.

Recommendation

Upgrade MicroRealEstate to the latest version beyond 1.0.0-alpha3 if available, or implement access control mechanisms at the application level.

Original NVD description (English source)

MicroRealEstate is affected by broken object-level access controls in PDF generator functionality. This issue affects MicroRealEstate: through 1.0.0-alpha3.