CVE-2026-121817
About Time Technologies|Herowatch Go Server - Insecure Direct Object Reference
Description
Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify specific parameters to access or operate other users' data and functions.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| About Time Technologies | Herowatch Go Server | all |
References
External links from the record. They lead to third-party sites.