Opexustech Ecase Portal vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Opexustech Ecase Portal: 1 record(s), with affected versions and fixes.
cpe:2.3:a:opexustech:ecase_portal

CVE-2026-22234 Critical · 9.8 CWE-639 Jan 8, 2026

OPEXUS eCasePortal unauthenticated IDOR

OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values of 'formid', and download or delete all user-uploaded files, or upload new files.