4 CVEs in 2 Idurar products, including Idurar-Erp-Crm, Idurar Erp Crm. Newest: CVE-2026-104475 (2026-10-03). Severity, EPSS and public exploits for each.
IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading unsanitized SV…
IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request. The update handler in backend/src/controll…
A broken access control vulnerability in Idurar IDURAR ERP CRM 4.1.0 allows unauthenticated remote attackers to download invoice PDF files containing customer…
IDURAR is open source ERP CRM accounting invoicing software. The vulnerability exists in the corePublicRouter.js file. Using the reference usage here, it is id…