{"items":[{"id":"CVE-2026-81827","published":"2026-08-27T13:36:19.087Z","updated":"2026-08-27T18:54:31.597Z","title":"Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input","severity":"MEDIUM","score":6.9,"vendor":"flowintel","product":"flowintel","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2026-81826","published":"2026-08-27T13:32:48.355Z","updated":"2026-08-27T19:34:55.872Z","title":"Flowintel Fails to Invalidate Active Sessions After Password Change","severity":"CRITICAL","score":9.1,"vendor":"flowintel","product":"flowintel","kev":false,"epss":0.00406,"kevAdded":null},{"id":"CVE-2026-81820","published":"2026-08-27T13:25:08.712Z","updated":"2026-08-27T19:39:23.123Z","title":"Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes","severity":"MEDIUM","score":5.1,"vendor":"flowintel","product":"flowintel","kev":false,"epss":0.0039,"kevAdded":null},{"id":"CVE-2026-81819","published":"2026-08-27T13:20:49.167Z","updated":"2026-08-27T19:41:04.930Z","title":"Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments","severity":"MEDIUM","score":5.3,"vendor":"flowintel","product":"flowintel","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2026-81818","published":"2026-08-27T13:14:20.526Z","updated":"2026-08-27T19:42:43.350Z","title":"Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges","severity":"HIGH","score":8.6,"vendor":"flowintel","product":"flowintel","kev":false,"epss":0.00388,"kevAdded":null},{"id":"CVE-2026-81817","published":"2026-08-27T13:10:30.500Z","updated":"2026-08-27T19:44:14.187Z","title":"Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification","severity":"HIGH","score":7.2,"vendor":"flowintel","product":"flowintel","kev":false,"epss":0.00351,"kevAdded":null},{"id":"CVE-2026-81814","published":"2026-08-27T12:48:39.314Z","updated":"2026-08-27T15:51:29.597Z","title":"Flowintel Stored XSS in Calendar via Malicious Case Title","severity":"MEDIUM","score":5.1,"vendor":"flowintel","product":"flowintel","kev":false,"epss":0.00396,"kevAdded":null},{"id":"CVE-2026-81753","published":"2026-08-27T12:06:18.177Z","updated":"2026-08-27T15:54:32.566Z","title":"Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content","severity":"MEDIUM","score":5.1,"vendor":"flowintel","product":"flowintel","kev":false,"epss":0.00546,"kevAdded":null},{"id":"CVE-2026-81743","published":"2026-08-27T11:59:50.189Z","updated":"2026-08-27T15:52:21.756Z","title":"Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection","severity":"HIGH","score":7.5,"vendor":"flowintel","product":"flowintel","kev":false,"epss":0.00422,"kevAdded":null},{"id":"CVE-2026-81662","published":"2026-08-27T10:23:01.833Z","updated":"2026-08-27T15:53:21.261Z","title":"Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys","severity":"HIGH","score":8.6,"vendor":"flowintel","product":"flowintel","kev":false,"epss":0.00527,"kevAdded":null},{"id":"CVE-2026-81659","published":"2026-08-27T10:07:30.269Z","updated":"2026-08-27T15:56:07.807Z","title":"Flowintel Note PDF Export Allows Arbitrary Local File Read via Pandoc/XeLaTeX Processing","severity":"HIGH","score":7.1,"vendor":"flowintel","product":"flowintel","kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2026-69075","published":"2026-08-03T08:46:59.881Z","updated":"2026-08-03T11:00:05.863Z","title":"Stored Cross-Site Scripting via Vue Template Injection in FlowIntel","severity":"MEDIUM","score":6.9,"vendor":"flowintel","product":"flowintel","kev":false,"epss":0.00492,"kevAdded":null},{"id":"CVE-2026-9813","published":"2026-05-28T09:27:26.124Z","updated":"2026-05-28T10:31:00.608Z","title":"FlowIntel external reference URL probe allows server-side request forgery","severity":"MEDIUM","score":6.2,"vendor":"flowintel","product":"flowintel","kev":false,"epss":0.00232,"kevAdded":null}]}