CVE-2026-22788 | SMEWebify WebErpMesv2 up to 1.18 API Endpoint missing authentication (GHSA-pp68-5pc2-hv7w)

January 13, 2026 Yanac

A vulnerability was found in SMEWebify WebErpMesv2 up to 1.18. It has been declared as critical. This impacts an unknown function of the component API Endpoint. Such manipulation leads to missing authentication.

This vulnerability is traded as CVE-2026-22788. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More