https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:24:07.964047+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-329046 EUVD-2026-329046 2026-10-07T21:24:07.966826+00:00 EUVD-2026-329046 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56267 fkie_cve-2026-56267 2026-10-07T21:24:07.966857+00:00

Flowise before 3.0.13 contains an information exposure vulnerability in the POST /api/v1/account/forgot-password endpoint that returns full user objects including PII to unauthenticated attackers. An attacker can enumerate valid email addresses and harvest sensitive user data including user IDs, names, account status, and timestamps by sending requests with known email addresses.

 https://cve.radiocsirt.org/vuln/ghsa-2mv8-gxwc-hq84 GHSA-2mv8-gxwc-hq84 2026-10-07T21:24:07.966888+00:00

Flowise before 3.0.13 contains an information exposure vulnerability in the POST /api/v1/account/forgot-password endpoint that returns full user objects including PII to unauthenticated attackers. An attacker can enumerate valid email addresses and harvest sensitive user data including user IDs, names, account status, and timestamps by sending requests with known email addresses.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0626 WID-SEC-W-2026-0626 — Flowise: Mehrere Schwachstellen 2026-10-07T21:24:07.966906+00:00

Ein Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um sich erweiterte Berechtigungen zu verschaffen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.