https://vulnerability.circl.lu Latest vulnerabilities published by the CNAs operating under the INCIBE root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Tue, 18 Aug 2026 17:18:58 +0000 https://vulnerability.circl.lu/vuln/cve-2026-75872 HTML Injection in MailerUp double opt-in verification email HTML Injection in MailerUp double opt-in verification email https://vulnerability.circl.lu/vuln/cve-2026-75872 Tue, 18 Aug 2026 14:06:37 +0000 https://vulnerability.circl.lu/vuln/cve-2026-19871 Use of hard-coded credentials in Prospero Flow CRM employee onboarding Use of hard-coded credentials in Prospero Flow CRM employee onboarding https://vulnerability.circl.lu/vuln/cve-2026-19871 Fri, 14 Aug 2026 14:00:55 +0000 https://vulnerability.circl.lu/vuln/cve-2026-19870 IDOR in Prospero Flow CRM allows cross-tenant payroll disclosure and creation IDOR in Prospero Flow CRM allows cross-tenant payroll disclosure and creation https://vulnerability.circl.lu/vuln/cve-2026-19870 Fri, 14 Aug 2026 12:08:30 +0000 https://vulnerability.circl.lu/vuln/cve-2026-19744 Stored Cross-site Scripting in Pentestify Markdown renderer via unescaped quotes Stored Cross-site Scripting in Pentestify Markdown renderer via unescaped quotes https://vulnerability.circl.lu/vuln/cve-2026-19744 Thu, 13 Aug 2026 15:41:00 +0000 https://vulnerability.circl.lu/vuln/cve-2026-19734 IDOR in Prospero Flow CRM allows cross-tenant product disclosure and hijacking IDOR in Prospero Flow CRM allows cross-tenant product disclosure and hijacking https://vulnerability.circl.lu/vuln/cve-2026-19734 Thu, 13 Aug 2026 14:04:55 +0000 https://vulnerability.circl.lu/vuln/cve-2026-19716 Stored Cross-site Scripting in Pentestify user account deletion via unescaped username Stored Cross-site Scripting in Pentestify user account deletion via unescaped username https://vulnerability.circl.lu/vuln/cve-2026-19716 Thu, 13 Aug 2026 13:28:17 +0000 https://vulnerability.circl.lu/vuln/cve-2026-19539 IDOR in Prospero Flow CRM allows cross-tenant ticket read, hijacking, and deletion IDOR in Prospero Flow CRM allows cross-tenant ticket read, hijacking, and deletion https://vulnerability.circl.lu/vuln/cve-2026-19539 Tue, 11 Aug 2026 13:54:05 +0000 https://vulnerability.circl.lu/vuln/cve-2026-19434 Stored Cross-site Scripting in Pentestify finding severity field Stored Cross-site Scripting in Pentestify finding severity field https://vulnerability.circl.lu/vuln/cve-2026-19434 Tue, 11 Aug 2026 13:40:59 +0000 https://vulnerability.circl.lu/vuln/cve-2026-19433 Authorization Bypass Through User-Controlled Key in Prospero Flow CRM contact save and vCard export Authorization Bypass Through User-Controlled Key in Prospero Flow CRM contact save and vCard export https://vulnerability.circl.lu/vuln/cve-2026-19433 Mon, 10 Aug 2026 14:04:14 +0000 https://vulnerability.circl.lu/vuln/cve-2026-59233 Missing Authorization in Prospero Flow CRM permission save endpoint allows privilege escalation Missing Authorization in Prospero Flow CRM permission save endpoint allows privilege escalation https://vulnerability.circl.lu/vuln/cve-2026-59233 Mon, 10 Aug 2026 12:14:40 +0000