CRITICAL
Copart
CVE published 2026-10-14
CVE-2026-14851
A vulnerability in Copart's online billing service exposes personally identifiable information (PII) and financial data due to a lack of authorization checks at the endpoint serving PDF invoice files. Some URLs for invoicing documents are publicly accessible via search engines, exposing paths to confidential files. Successful exploitation could allow an attacker to access unauthorized data and predict ide [truncated]