Camunda

Products

ProductCVEsExploitedLatest
Camunda 74–Oct 19, 2026

Exploited and recent CVEs

  • CVE-2026-109433 Medium 6.5 Camunda Broken Access Control via Cockpit 0.4%
  • CVE-2026-109432 Critical 9.8 Camunda Expression Injection via orQueries RCE 0.6%
  • CVE-2026-109431 High 8.1 Camunda Missing Authorization in Task Sub-Resources 0.4%
  • CVE-2026-77226 High 8.1 Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint 0.7%