RupeeWeb vulnerabilities

2 known vulnerabilities in RupeeWeb from Rupeeseed Technology Ventures. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  RupeeWeb: Incorrect Privilege Assignment

  CVE-2025-26523Feb 14, 2025Rupeeseed Technology Ventures

  This vulnerability exists in RupeeWeb trading platform due to insufficient authorization controls on certain API endpoints handling addition and deletion operations. Successful exploitation of this vulnerability could allow an authenticated remote attacker to

• 7.5 High severity

  RupeeWeb: Authentication Bypass by Assumed-Immutable Data

  CVE-2025-26522Feb 14, 2025Rupeeseed Technology Ventures

  This vulnerability exists in RupeeWeb trading platform due to improper implementation of OTP validation mechanism in certain API endpoints. A remote attacker with valid credentials could exploit this vulnerability by manipulating API responses. Successful expl