{"id":"CVE-2026-115994","published":"2026-10-24T10:17:10.600","lastModified":"2026-10-26T14:20:46.557","description":"BOLA Allows Cross-Project Target Tampering \nin Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, compromising the integrity of penetration testing scopes, results, and associated security reports.","cvssScore":5.4,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cwes":["CWE-639"],"vendors":[],"products":[],"references":[{"url":"https://www.grayback.es/advisories","tags":[]},{"url":"https://www.grayback.es/en/advisories","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}