CVE-2026-121817
About Time Technologies｜Herowatch Go Server - Insecure Direct Object Reference
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify specific parameters to access or operate other users' data and functions.
| CWE | CWE-639 |
| Vendor | about time technologies |
| Product | herowatch go server |
| Published | Nov 4, 2026 |
| Last Updated | Nov 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for about time technologies herowatch go server
Be the first to know when new high vulnerabilities affecting about time technologies herowatch go server are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
About Time Technologies / Herowatch Go Server
all