Live › vulnerability › CVE-2026-112190
Go to dashboardWebkul Aureus ERP up to 1.6.0 mishandles the composer.json file, which inserts sensitive information into debugging code. A remote attacker can read that leaked data, though the sources do not say exactly what data is exposed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
This page as .md · .json · in your agent: get_signal("CVE-2026-112190")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.