CVE-2026-55381High· 7.1▾ MidnightPoC availableInvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, POST /api/v1/estimates/{estimate}/convert-to-invoice in ConvertEstimateController…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 39.1 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 16.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
Exploit / PoC code exists
0.3%
0.3% → 0.4%
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, POST /api/v1/estimates/{estimate}/convert-to-invoice in ConvertEstimateController authorizes only the caller's create-invoice ability and does not authorize access to the route-bound Estimate. Because route-model binding can resolve an estimate from any company, an authenticated user with create-invoice ability can copy another company's line items, prices, totals, taxes, notes, currency, and customer data into an invoice in the attacker's company. The victim company's configured conversion action reaches checkForEstimateConvertAction and can also change or delete the original estimate. This issue is fixed in version 2.4.0.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-55387High· 7.2InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates
CVE-2026-55382High· 7.6InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates
CVE-2026-55386High· 7.1InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates
CVE-2026-55385Medium· 6.8InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates
CVE-2026-55383High· 8.2InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates
CVE-2026-55384Medium· 5.3InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates