Stel Order

2 CVEs in 1 Stel Order product, including Stel Order. Newest: CVE-2026-5798 (2026-05-14). Severity, EPSS and public exploits for each.

Stel Order products with known CVEs

ProductCVEs
Stel Order2
Stel Order CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57982026-05-14Unsafe object reference (IDOR) in Stel Order v3.25.1 and earlier versions, specifically in the ‘/app/FrontController’ endpoint, through manipulation of the ‘em…
CVE-2026-57902026-05-14Stored Cross-Site Scripting (XSS) in Stel Order v3.25.1 and earlier, located at the ‘/app/FrontController’ endpoint via the ‘legalName’ and ‘employeeID’ parame…