[ Vendor · 5 CVEs ]
Flowring Technology Corp
CVEs affecting Flowring Technology Corp published in the last 30 days, plus any Flowring Technology Corp CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-96430 | 29 Sep 2026 | CVSS 8.7 | Flowring Technology Corp Agentflow 4.0Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote… | |
| CVE-2026-96431 | 29 Sep 2026 | CVSS 9.3 | Flowring Technology Corp Agentflow 4.0Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before… | |
| CVE-2026-96440 | 29 Sep 2026 | CVSS 7.1 | Flowring Technology Corp Agentflow 4.0Improper Limitation of a Pathname to a Restricted Directory（Path Traversal） in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring… | |
| CVE-2026-96428 | 29 Sep 2026 | CVSS 9.3 | Flowring Technology Corp Agentflow 4.0SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to… | |
| CVE-2026-96429 | 29 Sep 2026 | CVSS 9.3 | Flowring Technology Corp Agentflow 4.0SQL Injection in the /WebAgenda/SMBAjaxConfigProcess.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to… |