CVE-2026-57869

UNKNOWN 0.0

CVSS Score

0.0

EPSS Score

0.2%

EPSS Percentile

12th

Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization. This issue affects MicroRealEstate: through 1.0.0-alpha3.

CWE	CWE-639 CWE-1241
Vendor	microrealestate
Product	microrealestate
Published	Jul 7, 2026
Last Updated	Jul 7, 2026

Stay Ahead of the Next One

Get instant alerts for microrealestate microrealestate

Be the first to know when new unknown vulnerabilities affecting microrealestate microrealestate are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

MicroRealEstate / MicroRealEstate

0 ≤ 1.0.0-alpha3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/microrealestate/microrealestate themissinglink.com.au: https://www.themissinglink.com.au/security-advisories/cve-2026-57869

Credits

Jake Cleland