CVE-2026-111351 | metasfresh up to 5.175 Board Controller BoardRestController.java getBoard/getCard/addCard/removeCard/patchCard improper authorization

October 15, 2026 Yanac

A vulnerability has been found in metasfresh up to 5.175 and classified as critical. This affects the function getBoard/getCard/addCard/removeCard/patchCard of the file BoardRestController.java of the component Board Controller. The manipulation leads to improper authorization.

This vulnerability is listed as CVE-2026-111351. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More