Skip to content
Iitflow-org
Products
| Product | CVEs | Exploited | Latest |
| itflow | 3 | – | Sep 17, 2026 |
Exploited and recent CVEs
-
CVE-2026-54597
High 8.3
ITFlow: Authenticated Time-Based Blind SQL Injection in ITFlow via expires Parameter
0.4%
-
CVE-2026-54596
High 8.1
ITFlow: Authenticated SQL Injection via recurring_invoice_frequency Parameter Enables Full Database Exfiltration
0.5%
-
CVE-2026-47755
Medium 6.5
ITFlow Vulnerable to Authenticated Cross-Tenant Credential Disclosure via Unprotected Credential Modal
0.4%