wimoor-erp CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL wimoor-erp CVE published 2026-10-16

CVE-2026-111691

CVE-2026-111691 is an authentication bypass vulnerability in WIMOOR, allowing attackers to impersonate any tenant and privilege level by sending an unsigned X-USERINFO header. This could lead to unauthorized access and modification of sensitive data, including orders, finance data, and Amazon seller authorizations. Defenders should assess exposure, particularly in backend service ports directly accessible [truncated]