Where
-Infinity
0

Trending

Last week
Last month
Last year

FlowiseFlowise: Cross-Workspace OAuth2 Credential Metadata Leak

Risk 56
Severity
7.6
First published (updated )
CVE-2026-70474

FlowiseFlowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

Risk 81
Severity
9.4
First published (updated )
CVE-2026-69254

FlowiseFlowise RCE via TypeORM DataSource

Risk 76
Severity
9
First published (updated )
CVE-2026-69251

FlowiseFlowise - Weak Default JWT Secrets in Authentication Middleware

Risk 86
Severity
9.3
First published (updated )
CVE-2026-56271

FlowiseFlowise - Hardcoded CORS Wildcard in TTS Endpoint

Risk 41
Severity
6.9
First published (updated )
CVE-2026-56277
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

FlowiseFlowise - Session Hijacking via Weak Default Express Session Secret

Risk 67
Severity
9.3
First published (updated )
CVE-2026-56278

FlowiseFlowise - Custom MCP Environment Variable Denylist Bypass via Case Sensitivity

Risk 65
Severity
2.3
Exploited
First published (updated )
CVE-2026-58057

FlowiseFlowise - Arbitrary File Write to Remote Code Execution via document-store API

Risk 87
Severity
10
First published (updated )
CVE-2025-71338

FlowiseFlowise - Arbitrary File Upload via Unauthenticated /api/v1/attachments Endpoint

Risk 86
Severity
9.3
First published (updated )
CVE-2025-71333

FlowiseFlowise - Unverified Password Change via Account Settings

Risk 79
Severity
8.7
First published (updated )
CVE-2025-71328
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

FlowiseFlowise - Authentication Bypass via Unprotected Registration Endpoint

Risk 67
Severity
9.3
First published (updated )
CVE-2025-71327

FlowiseZDI-26-300: Flowise AccountService resetPassword Authentication Bypass Vulnerability

Risk 87
First published (updated )
ZDI-CAN-28762

FlowiseFlowise: Flowise Parameter Override Bypass Remote Command Execution

Risk 86
Severity
9.8
First published (updated )
CVE-2026-41268

Flowise FlowiseSQL Injection

Risk 58
Severity
7.6
First published (updated )
CVE-2025-29189

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203