A vulnerability classified as critical was found in Fullstep up to 5.30.06. The affected element is an unknown function of the file /api/suppliers/v1/suppliers//false of the component Endpoint. The manipulation results in authorization bypass.
This vulnerability was named CVE-2026-5750. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is advised.