CVE-2026-55387 | InvoiceShelf up to 2.3.3 Bulk-Delete Request Validation privileges management

October 14, 2026 Yanac

A vulnerability was found in InvoiceShelf up to 2.3.3. It has been declared as problematic. This affects the function DeleteCustomersRequest/DeleteEstimatesRequest/DeleteExpensesRequest/DeleteInvoiceRequest/DeleteItemsRequest/DeletePaymentsRequest/DeleteUserRequest of the component Bulk-Delete Request Validation. Such manipulation leads to improper privilege management.

This vulnerability is documented as CVE-2026-55387. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More