{"items":[{"id":"CVE-2026-49827","published":"2026-08-13T12:51:54.618Z","updated":"2026-08-13T17:53:01.716Z","title":"WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434)","severity":"CRITICAL","score":9.8,"vendor":"SMEWebify","product":"WebErpMesv2","kev":false,"epss":0.00862,"kevAdded":null,"exploit":false},{"id":"CVE-2026-22789","published":"2026-01-12T21:52:11.880Z","updated":"2026-01-13T19:41:31.721Z","title":"WebErpMesv2 has a File Upload Validation Bypass Leading to RCE","severity":"MEDIUM","score":5.4,"vendor":"SMEWebify","product":"WebErpMesv2","kev":false,"epss":0.00273,"kevAdded":null,"exploit":true},{"id":"CVE-2026-22788","published":"2026-01-12T21:40:11.913Z","updated":"2026-01-13T19:08:34.529Z","title":"WebErpMesv2 allows unauthenticated API Access","severity":"HIGH","score":8.2,"vendor":"SMEWebify","product":"WebErpMesv2","kev":false,"epss":0.00592,"kevAdded":null,"exploit":true}]}