Go2ismail develops a narrow product line centered on web-based business applications, including an ASP.NET Core inventory and order-management system and a free CRM platform, both presenting application-layer attack surfaces. The recurring weaknesses affecting these products—execution after redirect, improper authorization, incorrect control flow scoping, and incorrect privilege assignment—reflect common risks in access-control and post-authentication logic that defenders should verify in deployment-specific configurations. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Go2ismail over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-3265HIGH A vulnerability was identified in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. This affects an unknown part of the file /api/Security/ of the component Securi | Feb 26, 2026 | 8.8 | 28 | NO | NO |
CVE-2026-3262HIGH A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interfa | Feb 26, 2026 | 8.8 | 28 | NO | NO |
CVE-2026-3264HIGH A vulnerability was determined in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. Affected by this issue is some unknown functionality of the component Administr | Feb 26, 2026 | 8.8 | 27 | NO | NO |
CVE-2026-3263HIGH A vulnerability was found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected by this vulnerability is an unknown functionality of the file /api/ | Feb 26, 2026 | 8.8 | 27 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Go2ismail.
Media articles that mention a CVE ID that affects a product developed by Go2ismail — matched by CVE ID, not by vendor name.