CVE-2026-55382 | InvoiceShelf up to 2.3.x Note Policy destroy improper authorization

October 14, 2026 Yanac

A vulnerability categorized as critical has been discovered in InvoiceShelf up to 2.3.x. This issue affects the function NotesController::show/NotesController::update/NotesController::destroy of the component Note Policy. Executing a manipulation can lead to improper authorization.

This vulnerability appears as CVE-2026-55382. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More