CVE-2026-15219 — IDOR in SFM Software's Costifier

CVE-2026-15219

IDOR in SFM Software's Costifier PUBLISHED

Description (CNA)

Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
SFM Software Technologies Inc. / Costifier	affected 0 through 2026-10-16

CWE

CWE-639

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1349

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.