Wimoor-erp vulnerabilities
We track 1 vulnerability in Wimoor-erp products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest Wimoor-erp vulnerabilities
- 7.4 High severity
wimoor: Authentication Bypass by Spoofing
WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows attackers to impersonate any tenant and privilege level by sending an unsigned X-USERINFO header. Attackers reaching backend service ports directly, bypassing the gateway