2571350 – (CVE-2026-126123) CVE-2026-126123 BeeS ERP: BeeS ERP: Information disclosure via missing administrative endpoint authorization

Bug 2571350 (CVE-2026-126123) - CVE-2026-126123 BeeS ERP: BeeS ERP: Information disclosure via missing administrative endpoint authorization

Summary: CVE-2026-126123 BeeS ERP: BeeS ERP: Information disclosure via missing admini...

Keywords:
Status:	NEW
Alias:	CVE-2026-126123
Product:	Security Response
Classification:	Other
Component:	vulnerability-draft
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	medium
Severity:	medium
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2026-11-10 22:01 UTC by OSIDB Bzimport
Modified:	2026-11-11 04:06 UTC (History)
CC List:	0 users
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Description OSIDB Bzimport 2026-11-10 22:01:21 UTC

BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to the administrative dashboard endpoint and gain access to the administrative console, including unrestricted access to institutional, employee, and student data.

Note You need to log in before you can comment on or make changes to this bug.