SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-27372

MEDIUM · CVSS 6.5 EPSS 0.27%

Source: NVD + CISA KEV + EPSS · Published 2026-07-23 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

PeproDev Ultimate Invoice versions up to 2.2.6 are vulnerable to unauthenticated sensitive data exposure, allowing attackers to access confidential information without authentication. This vulnerability poses a risk of data leakage, which could lead to privacy violations and potential exploitation of sensitive user data. Organizations using affected versions should prioritize remediation to safeguard their data integrity and user privacy.

CVE
CVE-2026-27372
Severity
MEDIUM
CVSS
6.5
EPSS
0.27%

Original NVD Description

Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.