Fflowintel

Products

Exploited and recent CVEs

• CVE-2026-81827 Medium 6.9 Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input 0.4%
• CVE-2026-81826 Critical 9.1 Flowintel Fails to Invalidate Active Sessions After Password Change 0.4%
• CVE-2026-81820 Medium 5.1 Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes 0.4%
• CVE-2026-81819 Medium 5.3 Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments 0.5%
• CVE-2026-81818 High 8.6 Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges 0.4%
• CVE-2026-81817 High 7.2 Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification 0.4%
• CVE-2026-81814 Medium 5.1 Flowintel Stored XSS in Calendar via Malicious Case Title 0.4%
• CVE-2026-81753 Medium 5.1 Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content 0.5%
• CVE-2026-81743 High 7.5 Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection 0.4%
• CVE-2026-81662 High 8.6 Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys 0.5%
• CVE-2026-81659 High 7.1 Flowintel Note PDF Export Allows Arbitrary Local File Read via Pandoc/XeLaTeX Processing 0.5%
• CVE-2026-69075 Medium 6.9 Stored Cross-Site Scripting via Vue Template Injection in FlowIntel 0.5%
• CVE-2026-9813 Medium 6.2 FlowIntel external reference URL probe allows server-side request forgery 0.2%