CVE-2026-57870
Received Received - Intake

Unauthorized Document Template Access in MicroRealEstate

Publication date: 2026-07-07

Last updated on: 2026-07-07

Assigner: The Missing Link Australia (TML)

Description
Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other organizations without authorization. This issue affects MicroRealEstate: through 1.0.0-alpha3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-07
Last Modified
2026-07-07
Generated
2026-07-07
AI Q&A
2026-07-07
EPSS Evaluated
N/A
NVD
CVE-2026-57870
EUVD
EUVD-2026-42006

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
microrealestate microrealestate to 1.0.0-alpha3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-57870 is a Broken Object-Level Access Control vulnerability in the Template API of MicroRealEstate. It allows attackers to retrieve document templates that belong to other organizations without proper authorization.

Impact Analysis

This vulnerability can lead to unauthorized access to sensitive document templates used by other organizations on the MicroRealEstate platform. Attackers could potentially view or misuse these templates, which may result in information disclosure or compromise of organizational data.

Compliance Impact

The vulnerability allows unauthorized access to document templates used by other organizations, which could lead to unauthorized disclosure of sensitive information.

Such unauthorized access and potential data exposure may result in non-compliance with data protection regulations like GDPR and HIPAA, which require strict access controls and protection of sensitive data.

Mitigation Strategies

The vulnerability affects MicroRealEstate versions 1.0.0-alpha3 and earlier, and as of the provided information, no fixed versions are available.

Immediate mitigation steps include restricting access to the Template API to authorized users only and implementing additional access control checks at the application or network level to prevent unauthorized retrieval of document templates.

Additionally, consider monitoring and limiting API access, applying network segmentation, and reviewing user permissions to reduce the risk of exploitation until an official fix is released.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57870. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart