Question 1

What is CVE-2026-105325 — CVE-2026-105325?

Accepted Answer

Missing check for ACCOUNTING_UPDATE / ACCOUNTING_CREATE in accounting in allows user with only ACCOUNTING_VIEW permission to update/create PaymentApplication. Affected versions before : 24.09.08 Users are recommended to upgrade to version 24.09.08 which fixes this issue.

Question 2

What is the authoritative source for CVE-2026-105325?

Accepted Answer

CVE-2026-105325 (CVE-2026-105325) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-105325CVE-2026-105325

Description

Scoring