Skip to content
Uuselotus
Products
| Product | CVEs | Exploited | Latest |
| lotus | 6 | – | Oct 22, 2026 |
Exploited and recent CVEs
-
CVE-2026-115334
Medium 6.8
Lotus through 0.10.2 Authorization Bypass via switch_organization Endpoint
0.4%
-
CVE-2026-115333
Medium 5.9
Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix
0.4%
-
CVE-2026-115332
High 8.8
Lotus through 0.10.2 SQL Injection via Subscription Filter Keys
0.4%
-
CVE-2026-115331
High 8.8
Lotus through 0.10.2 SQL Injection via Metric Property Names and Filters
0.4%
-
CVE-2026-115330
High 8.8
Lotus through 0.10.2 SQL Injection via Custom SQL Billable Metrics
0.4%
-
CVE-2026-115329
Medium 5.9
Lotus through 0.10.2 Cross-Organization IDOR via SubscriptionViewSet
0.3%