CVE-2025-9062CWE-639

IDOR in MeCODE Informatics' Envanty

High · published February 19, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

Authorization Bypass Through User-Controlled Key vulnerability in MeCODE Informatics and Engineering Services Ltd. Envanty allows Parameter Injection.

This issue affects Envanty: before 1.0.6.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

The vulnerability was learned to be remediated through reporter information and testing.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.8th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-02-19T10:57Z
EPSS history
Timeline
  • 19 FEB 10:57Z
    IDOR in MeCODE Informatics' Envanty
    cvelistv5