CVE-2026-115994
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Oct 24, 2026
Vendor
unknown
Description
BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, compromising the integrity of penetration testing scopes, results, and associated security reports.