CVE-2026-95655
Received Received - Intake

Aureus ERP ChatterPanel Message Access Vulnerability

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: VulnCheck

Description
Aureus ERP before 1.5.0 fails to scope message lookups to the current record in ChatterPanel, allowing authenticated users to access arbitrary messages. Attackers can submit sequential message IDs to read, edit, delete, or pin messages from other departments or companies, and enumerate all notes in the system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-22
Last Modified
2026-09-22
Generated
2026-09-22
AI Q&A
2026-09-22
EPSS Evaluated
N/A
NVD
CVE-2026-95655
EUVD
EUVD-2026-84526

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
aureus erp to 1.5.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-95655 is an authorization bypass vulnerability in Aureus ERP versions before 1.5.0. It affects the ChatterPanel feature, allowing authenticated users to access and manipulate messages not belonging to them by exploiting sequential message IDs. Attackers can read, edit, delete, or pin messages from other departments or companies without proper access.

Detection Guidance

To detect this vulnerability, monitor for unauthorized access to Chatter messages by checking logs for sequential message ID requests or actions performed on messages not belonging to the user. Inspect the ChatterPanel.php file in Aureus ERP v1.4.0 for direct message ID lookups without proper record scoping.

Impact Analysis

This vulnerability allows attackers to access sensitive messages, modify audit trails, and perform unauthorized actions like deleting or pinning messages. Since message IDs are sequential, attackers can enumerate and bulk-read messages, potentially exposing confidential data across departments or companies.

Compliance Impact

This vulnerability could lead to unauthorized access and exposure of sensitive data, violating GDPR's data protection principles and HIPAA's confidentiality requirements. It may result in non-compliance due to insufficient access controls and potential data breaches.

Mitigation Strategies

Upgrade Aureus ERP to version 1.5.0 or later to address the vulnerability. Ensure all message actions in ChatterPanel.php enforce record-based scoping and add null checks for missing records. Review and restrict access to adminer.php if present.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-95655. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart