BeeS Software Solutions ERP administrative console IDOR
BeeS Software Solutions ERP allows low-privileged users to access the administrative dashboard, resulting in unauthorized access to sensitive data.
CVE search metadata
CVE search record: CVE-2026-126123. Severity: medium. CVSS: 6.5. EPSS: 0.35%. KEV: no. Product: BeeS ERP. Brief: BeeS Software Solutions ERP administrative console IDOR. Brief link: https://feed.craftedsignal.io/briefs/2026-11-bees-erp-idor-cve-2026-126123/
Triage facts
Revision 1- Applicability
- BeeS ERP
- Evidence
- Not observed
- Severity
- Low
- Sources
- 1 public source
- Freshness
- Revision 1Nov 12, 14:03 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
BeeS Software Solutions ERP allows low-privileged users to navigate directly to the administrative dashboard endpoint and gain access to the administrative console.
Impact
This vulnerability provides unauthorized access to the administrative console, including unrestricted access to institutional, employee, and student data.
Recommendation
Apply updates provided by BeeS Software Solutions to address the administrative console access issue.