floci-io

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

floci-io records in CISA KEV

No floci-io vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-70582 CVE-2026-108598 · GHSA-c3c4-9g85-pfvc

Code injection in Floci API Gateway mapping templates allows remote commands

HIGH 81

Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00931 Published 2026-10-10 Fixed in 2.2.0 CWE-94

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0