Improper Authorization in go2ismail Asp.Net-Core-Inventory-Order-Management-System
CVE-2026-3263

5.3MEDIUM

Key Information:

Vendor

Go2ismail

Status
Asp.net-core-inventory-order-management-system
Vendor
CVE Published:
26 February 2026

What is CVE-2026-3263?

A vulnerability exists in the go2ismail Asp.Net-Core-Inventory-Order-Management-System, specifically within the Security API component located at /api/Security/. This flaw allows for improper authorization, enabling potential attackers to execute unauthorized actions. The exploitation of this issue can be performed remotely, raising significant security concerns. Despite early disclosure attempts to the vendor, there has been no response, leaving users vulnerable to potential attacks.

Affected Version(s)

Asp.Net-Core-Inventory-Order-Management-System 9.20250118

References

https://vuldb.com/?id.347986
vdb-entry
https://vuldb.com/?ctiid.347986
signaturepermissions-required
https://vuldb.com/?submit.758335
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ghufran Khan (VulDB User)
Ghufran Khan (VulDB User)
VulDB
.