Medium severity5.4NVD Advisory· Published Oct 24, 2026
CVE-2026-115994
CVE-2026-115994
Description
BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, compromising the integrity of penetration testing scopes, results, and associated security reports.
Affected products
2Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.