CVE-2026-112193
lowA vulnerability was detected in Webkul Aureus ERP up to 1.6.0.
A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserForm.php. Performing a manipulation of the argument Password results in weak password requirements. Remote exploitation of the attack is possible. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/KaranParelkar/Auresus_vulnerability/blob/main/Weak%20Password%20Policy/... cna@vuldb.com
- https://vuldb.com/cve/CVE-2026-112193 cna@vuldb.com
- https://vuldb.com/submit/973095 cna@vuldb.com
- https://vuldb.com/vuln/422296 cna@vuldb.com
- https://vuldb.com/vuln/422296/cti cna@vuldb.com