itflow-org

Products

ProductCVEsExploitedLatest
itflow3–Sep 17, 2026

Exploited and recent CVEs

  • CVE-2026-54597 High 8.3 ITFlow: Authenticated Time-Based Blind SQL Injection in ITFlow via expires Parameter 0.4%
  • CVE-2026-54596 High 8.1 ITFlow: Authenticated SQL Injection via recurring_invoice_frequency Parameter Enables Full Database Exfiltration 0.5%
  • CVE-2026-47755 Medium 6.5 ITFlow Vulnerable to Authenticated Cross-Tenant Credential Disclosure via Unprotected Credential Modal 0.4%