Products: 1
Vulnerabilities: 15
Known Exploited: 0
0
Critical Level Threats
4
High Level Threats
10
Medium Level Threats
1
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-61748
InvenTree: Report/Label print endpoints ignore per-model permissions
Last Modified: Sep 24, 2026
Published: Sep 21, 2026
CVE-2026-61746
InvenTree: Plugin-settings GET endpoints are readable without authentication
Last Modified: Sep 21, 2026
Published: Sep 21, 2026
CVE-2026-61744
InvenTree: Barcode-scan API (`POST /api/barcode/`) returns full serialized object data without enforcing the model's view role
Last Modified: Sep 29, 2026
Published: Sep 21, 2026
CVE-2026-61747
InvenTree: Authenticated IDOR in the data-import API exposes other users' imported rows (`row_data`/`data`) and column mappings
Last Modified: Sep 21, 2026
Published: Sep 21, 2026
CVE-2026-61749
InvenTree: Administrative staff users can trigger Arbitrary File Read leading to Credential Disclosure
Last Modified: Sep 24, 2026
Published: Sep 21, 2026
Items Per Page
