High severity7.5NVD Advisory· Published Nov 4, 2026

CVE-2026-121817

Description

Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify specific parameters to access or operate other users' data and functions.

Affected products

About Time Technologies/Herowatch Go Serverllm-create

Patches

Vulnerability mechanics

References

www.twcert.org.tw/en/cp-139-11364-0dce6-2.htmlnvd
www.twcert.org.tw/tw/cp-132-11366-d92ac-1.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000