Costifier vulnerabilities
CVEs whose affected-version data names the Costifier package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-15575Medium· 5.3Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier
Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did n…
▾ SunlitSFM Software Technologies Inc. · Costifiervia CVEORG
CVE-2026-15219Medium· 6.5IDOR in SFM Software's Costifier
Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted ear…
▾ SunlitSFM Software Technologies Inc. · Costifiervia CVEORG