CyberSecBulletin

ServiceNext vulnerabilities

We track 1 vulnerability in ServiceNext products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest ServiceNext vulnerabilities

  • 8.1 High severity

    SerTec: Authorization Bypass Through User-Controlled Key

    CVE-2026-79957ServiceNext

    ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token belongs to the requested account (CWE-639).