CervantesSec cervantes

• CVE-2026-115998 Medium 4.3 IDOR: User reads and modifies findings from other people's projects 0.2%
• CVE-2026-115994 Medium 5.4 BOLA Allows Cross-Project Target Tampering 0.2%
• CVE-2026-115993 Medium 6.8 Stored XSS in the “Notes” field of project checklists 0.3%
• CVE-2026-115975 High 7.1 Broken access control in JiraController 0.2%