Read the docs

flaskbb

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

flaskbb records in CISA KEV

No flaskbb vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-18195 CVE-2026-22660

FlaskBB Logic Flaw Authorization Group Deletion via Bulk AJAX Endpoint

Priority HIGH 72

FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administrators to delete all built-in authorization groups by exploiting a type mismatch in the bulk delete pr…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00606 Published 2026-07-10 Fixed CWE-697
TI-2026-18194 CVE-2026-22659

FlaskBB Authorization Bypass via Topic ID Manipulation

Priority HIGH 65

FlaskBB through 2.2.0, fixed in commit acc88cf, contains an authorization bypass vulnerability that allows authenticated moderators to perform unauthorized actions on topics in forums they do not control by submitting cr…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00525 Published 2026-07-10 Fixed CWE-863
Open these records in search →