[ Vendor · 4 CVEs ]
Camunda
CVEs affecting Camunda published in the last 30 days, plus any Camunda CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109431 | 19 Oct 2026 | CVSS 8.1 | Camunda 7Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that… | |
| CVE-2026-109432 | 19 Oct 2026 | CVSS 9.8 | Camunda 7Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate() fails to… | |
| CVE-2026-109433 | 19 Oct 2026 | CVSS 6.5 | Camunda 7Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp that allows… | |
| CVE-2026-77226 | 5 Oct 2026 | CVSS 8.1 | Camunda 7Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where… |