Activiti

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Activiti records in CISA KEV

No Activiti vulnerabilities are listed in CISA KEV.

1 record

TI-2026-61906 CVE-2026-91145 · GHSA-2x64-98jc-j98r

MEDIUM 64

Activiti through 7.1.0.M6 fails to validate hash-brace deferred expressions in process variables, allowing attackers to bypass expression filtering.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00422 Published 2026-09-14 No fix listed CWE-917