CVE-2026-59234 – SystemTek – Technology news and information

Authorization Bypass Through User-Controlled Key in Prospero Flow CRM calendar event deletion (CVE-2026-59234)

July 4, 2026 Jason Davies 106 Views 0 Comments CVE-2026-59234, Cyber Security, Prospero Flow CRM 0 min read

– Authorization Bypass Through User-Controlled Key (CWE-639) in CalendarDeleteEventController (app/Http/Controllers/Calendar/CalendarDeleteEventController.php), exposed at GET /calendar/event/delete/{id}, in Prospero Flow CRM before 5.5.3.

Share this:

Like this: