CVE-2026-28155

The vulnerability allows unauthenticated attackers to exploit Insecure Direct Object References (IDOR) in Do Lasso versions up to and including 358, potentially leading to unauthorized access to sensitive resources. Organizations using these versions should prioritize remediation to mitigate the risk of data exposure and unauthorized actions. This is particularly critical for those handling sensitive or personal information.