CVE-2026-112190 | Webkul Aureus ERP up to 1.6.0 composer.json insertion of sensitive information into debugging code

October 19, 2026 Yanac

A vulnerability described as problematic has been identified in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code.

This vulnerability is traded as CVE-2026-112190. The attack may be launched remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More