Newforma

Newforma's vulnerability footprint centers on Project Center, a project-management and collaboration platform for architecture, engineering, and construction firms that handles sensitive project data and document workflows. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes and recur through authentication and access-control weaknesses—including authentication bypass via capture-replay, path traversal, deserialization of untrusted data, and missing authentication for critical functions—that reflect the platform's document-handling and multi-user access model. Defenders should prioritize patching this vendor's advisories given the criticality tendency and the sensitive nature of the data these systems manage; live severity, exploitation, and exposure counts are shown alongside this summary.