CVE-2026-78365 | Roskus Prospero Flow CRM up to 5.3.1 Supplier API /api/supplier company_id authorization

August 24, 2026 Yanac

A vulnerability classified as critical has been found in Roskus Prospero Flow CRM up to 5.3.1. Affected by this issue is some unknown functionality of the file /api/supplier of the component Supplier API. Performing a manipulation of the argument company_id results in authorization bypass.

This vulnerability is cataloged as CVE-2026-78365. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More