CyberSecBulletin

Stel Order vulnerabilities

We track 1 vulnerability in Stel Order products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2026.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest Stel Order vulnerabilities

  • 7.1 High severity

    Stel Order: Authorization Bypass Through User-Controlled Key

    CVE-2026-5798Stel Order

    Unsafe object reference (IDOR) in Stel Order v3.25.1 and earlier versions, specifically in the ‘/app/FrontController’ endpoint, through manipulation of the ‘employeeID’ parameter. An authenticated attacker could exploit this vulnerability to access information