wimoor vulnerabilities

1 known vulnerability in wimoor from Wimoor-erp. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  wimoor: Authentication Bypass by Spoofing

  CVE-2026-111691Oct 16, 2026Wimoor-erp

  WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows attackers to impersonate any tenant and privilege level by sending an unsigned X-USERINFO header. Attackers reaching backend service ports directly, bypassing the gateway