CVE-2026-1597: Bdtask SalesERP Administrative Endpoint improper authorization
A vulnerability has been found in Bdtask SalesERP up to 20260116. This issue affects some unknown processing of the component Administrative Endpoint. Such manipulation of the argument cisession leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1597?
CVE-2026-1597 has a severity rating that highlights a potential risk of improper authorization within the Bdtask SalesERP application.
How do I fix CVE-2026-1597?
To remediate CVE-2026-1597, update Bdtask SalesERP to version after 20260116 to ensure secure handling of the Administrative Endpoint.
What impact does CVE-2026-1597 have on Bdtask SalesERP?
CVE-2026-1597 can allow unauthorized access and manipulation of administrative functions due to improper authorization handling.
Who is affected by CVE-2026-1597?
CVE-2026-1597 affects users and administrators of Bdtask SalesERP versions up to and including 20260116.
Is exploitation of CVE-2026-1597 easily achievable?
Yes, the exploitation of CVE-2026-1597 can be executed by attackers who manipulate session arguments to gain unauthorized access.