GCVE - cpe:2.3:a:microrealestate:microrealestate:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microrealestate:microrealestate:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microrealestate (`bb957c44-67d7-5ffc-81d4-64ab60b30229`)
Product	Microrealestate (`3d627b15-4ef6-51b2-8410-f8fa8a50d2dd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-57871`	vulnerable	2026-07-29 01:03:16.373098	Details available Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files. This issue affects MicroRealEstate: through 1.0.0-alpha3. Published: 2026-07-07T05:34:07.508Z Updated: 2026-07-07T13:33:51.133Z Open on db.gcve.eu Reference links https://github.com/microrealestate/microrealestate https://www.themissinglink.com.au/security-advisories/cve-2026-57871	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-57870`	vulnerable	2026-07-29 01:03:16.372699	Details available Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other organizations without authorization. This issue affects MicroRealEstate: through 1.0.0-alpha3. Published: 2026-07-07T05:28:57.708Z Updated: 2026-07-07T13:33:17.528Z Open on db.gcve.eu Reference links https://github.com/microrealestate/microrealestate https://www.themissinglink.com.au/security-advisories/cve-2026-57870	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-57869`	vulnerable	2026-07-29 01:03:16.372514	Details available Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization. This issue affects MicroRealEstate: through 1.0.0-alpha3. Published: 2026-07-07T05:24:38.925Z Updated: 2026-07-07T13:32:42.313Z Open on db.gcve.eu Reference links https://github.com/microrealestate/microrealestate https://www.themissinglink.com.au/security-advisories/cve-2026-57869	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-57868`	vulnerable	2026-07-29 01:03:16.372297	Details available MicroRealEstate is affected by broken object-level access controls in PDF generator functionality. This issue affects MicroRealEstate: through 1.0.0-alpha3. Published: 2026-07-07T05:18:54.645Z Updated: 2026-07-07T13:31:57.313Z Open on db.gcve.eu Reference links https://github.com/microrealestate/microrealestate https://www.themissinglink.com.au/security-advisories/cve-2026-57868	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-57867`	vulnerable	2026-07-29 01:03:16.371924	Details available MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targeting MicroRealEstate deployments to brute-force One-Time Passwords (OTP) to log in as any user. This issue affects MicroRealEstate: through 1.0.0-alpha3. Published: 2026-07-07T05:11:05.945Z Updated: 2026-07-07T13:35:02.868Z Open on db.gcve.eu Reference links https://github.com/microrealestate/microrealestate https://www.themissinglink.com.au/security-advisories/cve-2026-57867	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Microrealestate

Notes

PURL mappings

Vulnerability references

Contribute