uselotus

Products

ProductCVEsExploitedLatest
lotus6–Oct 22, 2026

Exploited and recent CVEs

  • CVE-2026-115334 Medium 6.8 Lotus through 0.10.2 Authorization Bypass via switch_organization Endpoint 0.4%
  • CVE-2026-115333 Medium 5.9 Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix 0.4%
  • CVE-2026-115332 High 8.8 Lotus through 0.10.2 SQL Injection via Subscription Filter Keys 0.4%
  • CVE-2026-115331 High 8.8 Lotus through 0.10.2 SQL Injection via Metric Property Names and Filters 0.4%
  • CVE-2026-115330 High 8.8 Lotus through 0.10.2 SQL Injection via Custom SQL Billable Metrics 0.4%
  • CVE-2026-115329 Medium 5.9 Lotus through 0.10.2 Cross-Organization IDOR via SubscriptionViewSet 0.3%