datacycle-engine dataCycle-CORE

• CVE-2026-32825 High 7.3 dataCycle No Brute-Force Protection On Web And API Login Endpoints 0.3%
• CVE-2026-32824 High 7.3 dataCycle User API Password Reset And Confirmation Flows Trust Attacker- Controlled Redirect Targets 0.3%
• CVE-2026-32823 Medium 4.3 dataCycle State-Changing GET Endpoints Enable CSRF 0.1%
• CVE-2026-32821 High 8.1 API Collection Impersonation Via user_email And Missing Object- Level Authorization 0.4%
• CVE-2026-32806 High 7.5 dataCycle Authorization Bypass Via /remote_render 0.4%
• CVE-2026-32820 High 7.5 dataCycle Public Markdown Path Traversal Via /docs/*path 0.9%
• CVE-2026-32819 Medium 4.3 dataCycle User Directory Enumeration Via /users/search 0.3%
• CVE-2026-32822 Medium 6.1 dataCycle Unauthenticated Reflected DOM XSS Via flash[...] On Public Pages 0.3%
• CVE-2026-32807 High 7.5 dataCycle Public DataLink Text File Download Ignores Validity And Authorization 0.4%