https://vulnerability.circl.lu/product/82ac6587-1f27-4ddc-a54a-187bbcc7f8de/recent 2026-09-29T14:23:43.941196+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Vulnerabilities published under the CPE names of flowintel. https://vulnerability.circl.lu/vuln/cve-2026-81817 2026-08-27T19:44:14.187000+00:00 Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification

Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification

2026-08-27T13:10:30.500000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-81818 2026-08-27T19:42:43.350000+00:00 Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges

Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges

2026-08-27T13:14:20.526000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-81819 2026-08-27T19:41:04.930000+00:00 Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments

Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments

2026-08-27T13:20:49.167000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-81820 2026-08-27T19:39:23.123000+00:00 Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes

Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes

2026-08-27T13:25:08.712000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-81826 2026-08-27T19:34:55.872000+00:00 Flowintel Fails to Invalidate Active Sessions After Password Change

Flowintel Fails to Invalidate Active Sessions After Password Change

2026-08-27T13:32:48.355000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-81827 2026-08-27T18:54:31.597000+00:00 Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input

Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input

2026-08-27T13:36:19.087000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-81659 2026-08-27T15:56:07.807000+00:00 Flowintel Note PDF Export Allows Arbitrary Local File Read via Pandoc/XeLaTeX Processing

Flowintel Note PDF Export Allows Arbitrary Local File Read via Pandoc/XeLaTeX Processing

2026-08-27T10:07:30.269000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-81753 2026-08-27T15:54:32.566000+00:00 Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content

Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content

2026-08-27T12:06:18.177000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-81662 2026-08-27T15:53:21.261000+00:00 Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys

Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys

2026-08-27T10:23:01.833000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-81743 2026-08-27T15:52:21.756000+00:00 Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection

Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection

2026-08-27T11:59:50.189000+00:00