nl-portal nl-portal-backend-libraries

• CVE-2026-55414 Medium 5.3 NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF) 0.4%
• CVE-2026-54683 Medium 6.5 NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user until 3.0.3 (incomplete fix of CVE-2026-49463) 0.4%
• CVE-2026-49464 High 8.1 NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak 0.4%