Sfm Software Technologies CVEs and Security Vulnerabilities

CVE-2026-15219

IDOR in SFM Software's Costifier

Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Sfm Software Technologies

Products

Costifier

CVE-2026-15575

Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier

Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed