CVE-2026-112190

MediumCVSS 5.3

Published: 19/10/2026(UTC)Updated: 19/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

A security vulnerability was detected in Webkul Aureus ERP up to 1.6.0 affecting unknown processing of composer.json that leads to insertion of sensitive information into debugging code. The attack may be launched remotely, the exploit has been publicly disclosed and may be used, and the vendor was contacted.

Risk Assessment

Sensitive information exposed in debugging code may help an attacker further exploit the ERP system.

Recommendation

Disable debug mode in production, protect composer.json, and monitor vendor updates.

Other vulnerabilities in Webkul Aureus ERP

CVE-2026-112193Low
A vulnerability was detected in Webkul Aureus ERP up to 1.6.0 in UserForm.php involving manipulation of the Password argument, resulting in weak password requirements. The exploit is publicly available and attack complexity is high.

Original NVD description (English source)

A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS