Login Request a demo
AE
Product
Aureus ERP
by Webkul · last CVE Oct 19, 2026
8
CVEs
0
On KEV
8.1
Max CVSS
4
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 1Medium 5Low 2
Severity
All severities8Critical0High1Medium5Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Aureus ERP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-95655
8.1
0%
Sep 22
Aureus ERP before 1.5.0 Unscoped Message Access via ChatterPanel
Affected: before 1.5.0
CVE-2026-111284
5.4
0%
Oct 15
Aureus ERP through 1.6.0 Stored XSS via Time Off Holiday Action Modal
Affected: through 1.6.0
CVE-2026-97062
5.4
0%
Sep 24
Aureus ERP 1.6.0 Stored XSS via SVG File Upload
Affected: through 1.6.0
CVE-2026-94387
5.4
0%
Sep 21
Aureus ERP before 1.6.0 Stored XSS via Chatter Field-Change Log
Affected: before 1.6.0
CVE-2026-93454
5.4
0%
Sep 17
Aureus ERP through 1.6.0 Stored XSS via Payment Term Note
Affected: through 1.6.0
CVE-2026-112190
5.3
0%
Oct 19
Webkul Aureus ERP composer.json insertion of sensitive information into debugging code
Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +1 more
CVE-2026-112193
3.7
0%
Oct 19
Webkul Aureus ERP UserForm.php weak password
Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +1 more
CVE-2026-110218
3.7
0%
Oct 13
Aureus ERP through 1.6.0 Unpublished Blog Post Disclosure via Direct URL
Affected: through 1.6.0
Showing 8