CVE-2026-115994 — Vulnerability intelligence
—
Published:
- CVSS
- 5.4
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
BOLA Allows Cross-Project Target Tampering
in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, compromising the integrity of penetration testing scopes, results, and associated security reports.