Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This issue affects Costifier: through 2026-10-1…

Medium CVSS 6.5

CVECVE-2026-15219

First seen2026-10-16 10:15 UTC

Disclosed2026-10-16 09:17 UTC

Last updated2026-10-16 13:16 UTC

Channel statusauto

Summary

Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1349

Timeline

2026-10-16 nvd_ingest NVD