Known Vulnerabilities for User Role by BestWebSoft
Listed below are 3 of the newest known vulnerabilities associated with "User Role" by "BestWebSoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-73301 json | Budibase is an open-source low-code platform. Prior to 3.39.25, the GET /api/global/groups endpoint in packages/worker/src/ap... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-73221 json | CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user with... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-72911 json | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and 16.29.0, the validate_template and... | Not Provided | 2026-08-10 | 2026-08-13 |
| CVE-2026-72906 json | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, the send_auto_email funct... | Not Provided | 2026-08-10 | 2026-08-11 |
| CVE-2026-72866 json | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the WebSocket handler in apps/dokploy/server... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-72863 json | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy's WebSocket handlers (in-app termina... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-72772 json | n8n before 2.32.1 (and before 2.31.5) is vulnerable to account takeover via the Token Exchange Embed Login feature. When a va... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-72671 json | A Kibana Machine Learning capability that removes a saved object from the current space accepts machine learning trained mode... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-72585 json | An authorization bypass vulnerability in Grafana through 13.2.0 allows an Editor-role user to delete protected contact points... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-72576 json | A stored cross-site scripting (XSS) vulnerability in Bludit 4.0.0-beta allows a low-privileged authenticated user (Author rol... | Not Provided | 2026-08-10 | 2026-08-10 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Bestwebsoft | User Role | 1.6.1 | |||
| Application | Bestwebsoft | User Role | 1.6.0 | |||
| Application | Bestwebsoft | User Role | 1.5.9 | |||
| Application | Bestwebsoft | User Role | 1.5.8 | |||
| Application | Bestwebsoft | User Role | 1.5.7 | |||
| Application | Bestwebsoft | User Role | 1.5.6 | |||
| Application | Bestwebsoft | User Role | 1.5.5 | |||
| Application | Bestwebsoft | User Role | 1.5.4 | |||
| Application | Bestwebsoft | User Role | 1.5.3 | |||
| Application | Bestwebsoft | User Role | 1.5.2 | |||
| Application | Bestwebsoft | User Role | 1.5.1 | |||
| Application | Bestwebsoft | User Role | 1.5.0 | |||
| Application | Bestwebsoft | User Role | 1.4.9 | |||
| Application | Bestwebsoft | User Role | 1.4.8 | |||
| Application | Bestwebsoft | User Role | 1.4.7 | |||
| Application | Bestwebsoft | User Role | 1.4.6 | |||
| Application | Bestwebsoft | User Role | 1.4.5 | |||
| Application | Bestwebsoft | User Role | 1.4.4 | |||
| Application | Bestwebsoft | User Role | 1.4.3 | |||
| Application | Bestwebsoft | User Role | 1.4.2 |