Browse CVEs

CRITICAL 9.8 CVE-2026-2096 Agentflow developed by Flowring has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete dat… Agentflow Mitigation only Fix from $2,3002026-02-10 HIGH 8.8 CVE-2026-2097 Agentflow developed by Flowring has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell b… Agentflow Mitigation only Fix from $1,9502026-02-10 CRITICAL 9.8 CVE-2026-2095 Agentflow developed by Flowring has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to exploit a specific functiona… Agentflow Mitigation only Fix from $2,3002026-02-10 CRITICAL 9.8 CVE-2025-3709 Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing unauthenticated remote attackers to exploit this vulnerabili… Agentflow Mitigation only Fix from $2,3002025-05-02 CRITICAL 9.8 CVE-2022-39036 The file upload function of Agentflow BPM has insufficient filtering for special characters in URLs. An unauthenticated remote attacker can exploit t… Agentflow Mitigation only Fix from $2,3002022-11-10 HIGH 8.8 CVE-2022-39038 Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user… Agentflow Mitigation only Fix from $1,9502022-11-10 HIGH 7.5 CVE-2022-39037 Agentflow BPM file download function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass … Agentflow Mitigation only Fix from $1,9502022-11-10