Camunda
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Camunda 7 | 4 | – | Oct 19, 2026 |
Exploited and recent CVEs
- CVE-2026-109433 Camunda Broken Access Control via Cockpit 0.4%
- CVE-2026-109432 Camunda Expression Injection via orQueries RCE 0.6%
- CVE-2026-109431 Camunda Missing Authorization in Task Sub-Resources 0.4%
- CVE-2026-77226 Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint 0.7%