Sergestec Exito

• CVE-2025-41020 High 7.1 Insecure direct object reference (IDOR) vulnerability in Sergestec's Exito 0.4%
• CVE-2025-41018 Critical 9.3 SQL injection vulnerability in Sergestec's Exito 0.5%