<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/cna-root/ENISA/recent</id>
  <title>Most recent vulnerabilities from the ENISA CNA root</title>
  <updated>2026-08-27T23:19:18.784534+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Latest vulnerabilities published by the CNAs operating under the ENISA root of the CVE Program.</subtitle>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81827</id>
    <title>CVE-2026-81827 (CIRCL)</title>
    <updated>2026-08-27T13:36:19.087000+00:00</updated>
    <content>Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81827"/>
    <summary>Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input</summary>
    <published>2026-08-27T13:36:19.087000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81826</id>
    <title>CVE-2026-81826 (CIRCL)</title>
    <updated>2026-08-27T13:32:48.355000+00:00</updated>
    <content>Flowintel Fails to Invalidate Active Sessions After Password Change</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81826"/>
    <summary>Flowintel Fails to Invalidate Active Sessions After Password Change</summary>
    <published>2026-08-27T13:32:48.355000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81820</id>
    <title>CVE-2026-81820 (CIRCL)</title>
    <updated>2026-08-27T13:25:08.712000+00:00</updated>
    <content>Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81820"/>
    <summary>Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes</summary>
    <published>2026-08-27T13:25:08.712000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-56651</id>
    <title>CVE-2026-56651 (CERT-PL)</title>
    <updated>2026-08-27T13:22:17.566000+00:00</updated>
    <content>Arbitrary File Overwrite via Symlink Following in dool project</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-56651"/>
    <summary>Arbitrary File Overwrite via Symlink Following in dool project</summary>
    <published>2026-08-27T13:22:17.566000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-56652</id>
    <title>CVE-2026-56652 (CERT-PL)</title>
    <updated>2026-08-27T13:22:13.928000+00:00</updated>
    <content>Formula Injection in dool project</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-56652"/>
    <summary>Formula Injection in dool project</summary>
    <published>2026-08-27T13:22:13.928000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81819</id>
    <title>CVE-2026-81819 (CIRCL)</title>
    <updated>2026-08-27T13:20:49.167000+00:00</updated>
    <content>Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81819"/>
    <summary>Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments</summary>
    <published>2026-08-27T13:20:49.167000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81818</id>
    <title>CVE-2026-81818 (CIRCL)</title>
    <updated>2026-08-27T13:14:20.526000+00:00</updated>
    <content>Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81818"/>
    <summary>Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges</summary>
    <published>2026-08-27T13:14:20.526000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81817</id>
    <title>CVE-2026-81817 (CIRCL)</title>
    <updated>2026-08-27T13:10:30.500000+00:00</updated>
    <content>Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81817"/>
    <summary>Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification</summary>
    <published>2026-08-27T13:10:30.500000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81814</id>
    <title>CVE-2026-81814 (CIRCL)</title>
    <updated>2026-08-27T12:48:39.314000+00:00</updated>
    <content>Flowintel Stored XSS in Calendar via Malicious Case Title</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81814"/>
    <summary>Flowintel Stored XSS in Calendar via Malicious Case Title</summary>
    <published>2026-08-27T12:48:39.314000+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cve-2026-81753</id>
    <title>CVE-2026-81753 (CIRCL)</title>
    <updated>2026-08-27T12:06:18.177000+00:00</updated>
    <content>Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content</content>
    <link href="https://db.gcve.eu/vuln/cve-2026-81753"/>
    <summary>Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content</summary>
    <published>2026-08-27T12:06:18.177000+00:00</published>
  </entry>
</feed>
