CVE-2026-57870

UNKNOWN 0.0

CVSS Score

0.0

EPSS Score

0.2%

EPSS Percentile

12th

Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other organizations without authorization. This issue affects MicroRealEstate: through 1.0.0-alpha3.

CWE	CWE-639
Vendor	microrealestate
Product	microrealestate
Published	Jul 7, 2026
Last Updated	Jul 7, 2026

Stay Ahead of the Next One

Get instant alerts for microrealestate microrealestate

Be the first to know when new unknown vulnerabilities affecting microrealestate microrealestate are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

MicroRealEstate / MicroRealEstate

0 ≤ 1.0.0-alpha3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/microrealestate/microrealestate themissinglink.com.au: https://www.themissinglink.com.au/security-advisories/cve-2026-57870

Credits

Jake Cleland