~ / search / CVE-2026-121817

CVE-2026-121817

About Time Technologies|Herowatch Go Server - Insecure Direct Object Reference

State: published CNA: twcert CVSS 4.0 8.7 High NVD: deferred

Description

Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify specific parameters to access or operate other users' data and functions.

Affected products

VendorProductVersions
About Time Technologies Herowatch Go Server all

References

External links from the record. They lead to third-party sites.