Asp.Net-Core-Inventory-Order-Management-System vulnerabilities

4 known vulnerabilities in Asp.Net-Core-Inventory-Order-Management-System from Go2ismail. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Asp.Net-Core-Inventory-Order-Management-System: Use of Default Credentials

  CVE-2026-125384Nov 10, 2026Go2ismail

  INDOTALENT WHMS before 10.20261109 contains a default credentials vulnerability that allows unauthenticated attackers to gain administrator access because UserAdminSeeder creates [email protected] with password 123456. Attackers can log in with these credentials,

• 9.8 Critical severity

  Asp.Net-Core-Inventory-Order-Management-System: Use of Hard-coded Cryptographic Key

  CVE-2026-125383Nov 10, 2026Go2ismail

  INDOTALENT WHMS (Asp.Net-Core-Inventory-Order-Management-System) before 10.20261109 contains an authentication bypass vulnerability caused by a hard-coded JWT signing key, issuer and audience in appsettings.json. Unauthenticated remote attackers can forge toke

• 8.8 High severity

  Asp.Net-Core-Inventory-Order-Management-System: Incorrect Privilege Assignment

  CVE-2026-3263Feb 26, 2026Go2ismail

  A vulnerability was found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected by this vulnerability is an unknown functionality of the file /api/Security/ of the component Security API. Performing a manipulation results in im

• 8.8 High severity

  Asp.Net-Core-Inventory-Order-Management-System: Execution After Redirect (EAR)

  CVE-2026-3262Feb 26, 2026Go2ismail

  A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interface. Such manipulation leads to execution after redirect. The attack may be launc