Biloop vulnerabilities

1 known vulnerability in Biloop from Adiss. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Biloop: Authorization Bypass Through User-Controlled Key

  CVE-2026-12686Jul 6, 2026Adiss

  An authenticated user could manipulate a company ID parameter in a POST request to the backend to gain unauthorised access to other companies hosted within the same subdomain environment. The application does not adequately verify whether the requested company