Unauthorized Access Vulnerability in BeeS Software Solutions ERP
CVE-2026-126123

7.1HIGH

Key Information:

Vendor

Bees Software Solutions

Status
Erp
Vendor
CVE Published:
10 November 2026

What is CVE-2026-126123?

BeeS Software Solutions ERP prior to September 4, 2026, contains a vulnerability that enables low-privileged users to bypass authorization mechanisms and gain direct access to the administrative dashboard. This oversight can lead to unauthorized access to sensitive institutional, employee, and student data, posing significant risks to the security and privacy of the affected entities.

Affected Version(s)

ERP 0 < 2026-09-04

ERP 2026-09-04

References

https://raw.githubusercontent.com/cisagov/CSAF/develop/cs...
third-party-advisory
https://www.cve.org/CVERecord?id=CVE-2026-126123
vdb-entry

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dinesh Goud
.