Product by Webkul

    Aureus ERP

    8 known vulnerabilities in Aureus ERP (Webkul), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Aureus ERP (Webkul)
    HighCVE-2026-95655

    Aureus ERP before 1.5.0 Unscoped Message Access via ChatterPanel

    		8.1
    MediumCVE-2026-112190

    Webkul Aureus ERP composer.json insertion of sensitive information into debugging code

    		5.3
    MediumCVE-2026-110218

    Aureus ERP through 1.6.0 Unpublished Blog Post Disclosure via Direct URL

    		3.7
    LowCVE-2026-112193

    Webkul Aureus ERP UserForm.php weak password

    		3.7
    MediumCVE-2026-94387

    Aureus ERP before 1.6.0 Stored XSS via Chatter Field-Change Log

    		5.4
    MediumCVE-2026-93454

    Aureus ERP through 1.6.0 Stored XSS via Payment Term Note

    		5.4
    MediumCVE-2026-111284

    Aureus ERP through 1.6.0 Stored XSS via Time Off Holiday Action Modal

    		5.4
    MediumCVE-2026-97062

    Aureus ERP 1.6.0 Stored XSS via SVG File Upload

    		5.4

    All products by Webkul