Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-115994

BOLA Allows Cross-Project Target Tampering

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Grayback

Description

BOLA Allows Cross-Project Target Tampering  in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, compromising the integrity of penetration testing scopes, results, and associated security reports.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CervantesSec cervantes

Default version status: unaffected

  • alpha 0.3 to ≤ 1.3-betaaffected
  • v.1.4.0-betaunaffected

References