aureuserp CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM aureuserp CVE published 2026-10-16

CVE-2026-111632

CVE-2026-111632 debrief: Aureus ERP through 1.6.0 Multi-Company Authorization Bypass via company_id allows authenticated API users to create or move records into disallowed companies by supplying a foreign company_id, potentially leading to unauthorized data access or manipulation. Defenders should assess exposure and prioritize remediation, especially for version 1.6.0 or earlier. This vulnerability has [truncated]