https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T09:09:02.211977+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-39036 CVE-2022-39036 — FLOWRING Agentflow BPM - Arbitrary File Upload 2026-10-07T09:09:02.227739+00:00

Affected: FLOWRING Agentflow BPM

The file upload function of Agentflow BPM has insufficient filtering for special characters in URLs. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary file and execute arbitrary code to manipulate system or disrupt service.