{"id":"CVE-2026-79957","title":"ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token belongs to the reques…","summary":"ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token belongs to the reques…","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-639"],"vendor":"ServiceNext","product":"SerTec","affected":["SerTec 1.00"],"published":"2026-10-14","updated":"2026-10-16","sourceUpdated":"2026-10-16T21:19:53.860","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-79957","references":[{"url":"https://blog.blacklanternsecurity.com/p/cve-2026-79957-insecure-direct-object","label":"cves@blacklanternsecurity.com"},{"url":"https://blog.blacklanternsecurity.com/p/cve-2026-79957-insecure-direct-object","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00308,"epssPercentile":0.23493,"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-10-16T20:15:16.490546Z"},"ingestedAt":"2026-10-14T18:47:39.316Z","slug":"CVE-2026-79957","body":"## Overview\n\nServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token belongs to the requested account (CWE-639). Any authenticated user can iterate the ID parameter to retrieve the full profile record of every other user, including passwords stored in cleartext (CWE-256), enabling account takeover and credential-stuffing attacks.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":57,"depthScoreParts":{"impact":44.6,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":223377,"id":"CVE-2026-79957","ts":1792183954038,"field":"exploit_available","old":"false","new":"true"}]}