ArnasDon

Products

ProductCVEsExploitedLatest
wacrm4–Sep 18, 2026

Exploited and recent CVEs

  • CVE-2026-77239 High 8.1 WACRM: Service-role routes missing a role check 0.5%
  • CVE-2026-77240 Critical 9.9 WACRM: Database-layer authorization bypasses 0.5%
  • CVE-2026-67530 Medium 6.4 WACRM: SSRF via the automation `send_webhook` action 0.3%
  • CVE-2026-49141 High 7.1 WACRM Authorization Bypass via Automation Engine Endpoint 0.2%