CVE-2026-49192

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The summary service endpoint is subject to an Insecure Direct Object Reference (IDOR), a condition where an application provides direct access to objects based on user-supplied input. The system fails to verify if the user owns the hardware serial numbers being requested, allowing unauthorized parties to scrape device data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.