CVE-2026-57869
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
The vulnerability in MicroRealEstate stems from broken object-level access controls and the use of a deterministic pattern during random ID generation. This allows attackers to access documents uploaded by landlords or tenants without authorization.
Risk Assessment
The organization is at risk of leaking confidential documents, such as lease agreements or personal data, which could lead to privacy breaches and legal consequences.
Recommendation
Immediately update MicroRealEstate to a version newer than 1.0.0-alpha3 if available, or implement temporary mitigations such as strengthening access controls and using a cryptographically secure random number generator.
Original NVD description (English source)
Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization. This issue affects MicroRealEstate: through 1.0.0-alpha3.