CVE-2026-115994

CVE-2026-115994CVE-2026-115994

Description

BOLA Allows Cross-Project Target Tampering  in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, compromising the integrity of penetration testing scopes, results, and associated security reports.

Scoring

CVSS 5.4 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Last modified2026-10-24
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.