All 5 CVE vulnerabilities found in Munshi, with AI-generated Chinese analysis, references, and POCs.
Vendor: Petpooja
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-119735 | Munshi XSS via Purchase Inquiry Thread Rendering CWE-79 | 5.4 | Medium | 2026-11-02 |
| CVE-2026-119734 | Munshi IDOR via Purchase Inquiry Thread Endpoint CWE-639 | 6.5 | Medium | 2026-11-02 |
| CVE-2026-119733 | Munshi Missing Authorization in Company Deletion API CWE-862 | 8.1 | High | 2026-11-02 |
| CVE-2026-119732 | Munshi Broken Object Level Authorization via Invoice Deletion API CWE-639 | 6.5 | Medium | 2026-11-02 |
| CVE-2026-119731 | Munshi Payment Bypass via Unauthenticated Webhook Endpoint CWE-345 | 7.5 | High | 2026-11-02 |
All 5 known CVE vulnerabilities affecting Munshi with full Chinese analysis, references, and POCs where available.