https://vulnerability.circl.lu/cna-root/INCIBE/recent Most recent vulnerabilities from the INCIBE CNA root 2026-08-18T17:18:58.315003+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Latest vulnerabilities published by the CNAs operating under the INCIBE root of the CVE Program. https://vulnerability.circl.lu/vuln/cve-2026-75872 CVE-2026-75872 (Secur0) 2026-08-18T14:06:37.102000+00:00 HTML Injection in MailerUp double opt-in verification email HTML Injection in MailerUp double opt-in verification email 2026-08-18T14:06:37.102000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-19871 CVE-2026-19871 (Secur0) 2026-08-14T14:00:55.572000+00:00 Use of hard-coded credentials in Prospero Flow CRM employee onboarding Use of hard-coded credentials in Prospero Flow CRM employee onboarding 2026-08-14T14:00:55.572000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-19870 CVE-2026-19870 (Secur0) 2026-08-14T12:08:30.457000+00:00 IDOR in Prospero Flow CRM allows cross-tenant payroll disclosure and creation IDOR in Prospero Flow CRM allows cross-tenant payroll disclosure and creation 2026-08-14T12:08:30.457000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-19744 CVE-2026-19744 (Secur0) 2026-08-13T15:41:00.862000+00:00 Stored Cross-site Scripting in Pentestify Markdown renderer via unescaped quotes Stored Cross-site Scripting in Pentestify Markdown renderer via unescaped quotes 2026-08-13T15:41:00.862000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-19734 CVE-2026-19734 (Secur0) 2026-08-13T14:04:55.560000+00:00 IDOR in Prospero Flow CRM allows cross-tenant product disclosure and hijacking IDOR in Prospero Flow CRM allows cross-tenant product disclosure and hijacking 2026-08-13T14:04:55.560000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-19716 CVE-2026-19716 (Secur0) 2026-08-13T13:28:17.011000+00:00 Stored Cross-site Scripting in Pentestify user account deletion via unescaped username Stored Cross-site Scripting in Pentestify user account deletion via unescaped username 2026-08-13T13:28:17.011000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-19539 CVE-2026-19539 (Secur0) 2026-08-11T13:54:05.170000+00:00 IDOR in Prospero Flow CRM allows cross-tenant ticket read, hijacking, and deletion IDOR in Prospero Flow CRM allows cross-tenant ticket read, hijacking, and deletion 2026-08-11T13:54:05.170000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-19434 CVE-2026-19434 (Secur0) 2026-08-11T13:40:59.572000+00:00 Stored Cross-site Scripting in Pentestify finding severity field Stored Cross-site Scripting in Pentestify finding severity field 2026-08-11T13:40:59.572000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-19433 CVE-2026-19433 (Secur0) 2026-08-10T14:04:14.148000+00:00 Authorization Bypass Through User-Controlled Key in Prospero Flow CRM contact save and vCard export Authorization Bypass Through User-Controlled Key in Prospero Flow CRM contact save and vCard export 2026-08-10T14:04:14.148000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-59233 CVE-2026-59233 (Secur0) 2026-08-10T12:14:40.002000+00:00 Missing Authorization in Prospero Flow CRM permission save endpoint allows privilege escalation Missing Authorization in Prospero Flow CRM permission save endpoint allows privilege escalation 2026-08-10T12:14:40.002000+00:00