CVE-2026-55381 | InvoiceShelf up to 2.3.9 ConvertEstimateController improper authorization

October 14, 2026 Yanac

A vulnerability was found in InvoiceShelf up to 2.3.9. It has been rated as critical. This vulnerability affects unknown code of the component ConvertEstimateController. Performing a manipulation results in improper authorization.

This vulnerability is reported as CVE-2026-55381. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More