The Fullstep V5 registration process has vulnerabilities that allow unauthorized access to user data and exploitation of API resources.

Cybersecurity Technology ConflictApr 22, 2026score 0.172 posts · 0 replies across 1 instances

The thread discusses two security vulnerabilities in Fullstep V5, an IDOR issue allowing data access and inadequate access control permitting JWT token exploitation. These vulnerabilities highlight significant security risks in the product's registration process.

Claims

Parent: CybersecurityEntity: Fullstep V5Impact: negativeDate: Apr 22, 2026Target: The Fullstep V5 registration process has vulnerabilities that allow unauthorized access to user data and exploitation of API resources.

Source posts

@[email protected]

🚨 EUVD-2026-24744

📊 Score: 8.7/10 (CVSS v3.1)
📦 Product: Fullstep, Fullstep
🏢 Vendor: Fullstep
📅 Updated: 2026-04-22

📝 Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT token with which to interact with authenticated API resources. Successful exploitation of this vulnerability could...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24744

#cybersecurity #infosec #euvd #cve #vulnerability

0 boosts · 0 favs · 0 replies · Apr 22, 2026

#cybersecurity#infosec#euvd#cve#vulnerability

@[email protected]

🚨 EUVD-2026-24746

📊 Score: 7.6/10 (CVSS v3.1)
📦 Product: Fullstep, Fullstep
🏢 Vendor: Fullstep
📅 Updated: 2026-04-22

📝 An insecure direct object reference (IDOR) vulnerability in the Fullstep V5 registration process allows authenticated users to access data belonging to other registered users through various vulnerable authenticated resources in the application. ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24746

#cybersecurity #infosec #euvd #cve #vulnerability

0 boosts · 0 favs · 0 replies · Apr 22, 2026

#cybersecurity#infosec#euvd#cve#vulnerability