<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent vulnerabilities from the ENISA CNA root</title>
    <link>https://db.gcve.eu</link>
    <description>Latest vulnerabilities published by the CNAs operating under the ENISA root of the CVE Program.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 27 Aug 2026 23:19:18 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-81827 (CIRCL)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81827</link>
      <description>Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input</description>
      <content:encoded>Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81827</guid>
      <pubDate>Thu, 27 Aug 2026 13:36:19 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-81826 (CIRCL)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81826</link>
      <description>Flowintel Fails to Invalidate Active Sessions After Password Change</description>
      <content:encoded>Flowintel Fails to Invalidate Active Sessions After Password Change</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81826</guid>
      <pubDate>Thu, 27 Aug 2026 13:32:48 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-81820 (CIRCL)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81820</link>
      <description>Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes</description>
      <content:encoded>Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81820</guid>
      <pubDate>Thu, 27 Aug 2026 13:25:08 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-56651 (CERT-PL)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-56651</link>
      <description>Arbitrary File Overwrite via Symlink Following in dool project</description>
      <content:encoded>Arbitrary File Overwrite via Symlink Following in dool project</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-56651</guid>
      <pubDate>Thu, 27 Aug 2026 13:22:17 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-56652 (CERT-PL)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-56652</link>
      <description>Formula Injection in dool project</description>
      <content:encoded>Formula Injection in dool project</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-56652</guid>
      <pubDate>Thu, 27 Aug 2026 13:22:13 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-81819 (CIRCL)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81819</link>
      <description>Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments</description>
      <content:encoded>Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81819</guid>
      <pubDate>Thu, 27 Aug 2026 13:20:49 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-81818 (CIRCL)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81818</link>
      <description>Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges</description>
      <content:encoded>Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81818</guid>
      <pubDate>Thu, 27 Aug 2026 13:14:20 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-81817 (CIRCL)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81817</link>
      <description>Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification</description>
      <content:encoded>Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81817</guid>
      <pubDate>Thu, 27 Aug 2026 13:10:30 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-81814 (CIRCL)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81814</link>
      <description>Flowintel Stored XSS in Calendar via Malicious Case Title</description>
      <content:encoded>Flowintel Stored XSS in Calendar via Malicious Case Title</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81814</guid>
      <pubDate>Thu, 27 Aug 2026 12:48:39 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-81753 (CIRCL)</title>
      <link>https://db.gcve.eu/vuln/cve-2026-81753</link>
      <description>Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content</description>
      <content:encoded>Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-81753</guid>
      <pubDate>Thu, 27 Aug 2026 12:06:18 +0000</pubDate>
    </item>
  </channel>
</rss>
