CVE-2026-57867: Microrealestate

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targeting MicroRealEstate deployments to brute-force One-Time Passwords (OTP) to log in as any user. This issue affects MicroRealEstate: through 1.0.0-alpha3.

Affected products

• Microrealestate Microrealestate: up to and including 1.0.0-alpha3

Published 2026-07-07. Last modified 2026-07-07.