Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: TIM Flow 26.0.6 Clear all filters
TI-2026-28785 CVE-2026-39914 · GHSA-jv9g-4xc8-gqg7

TIM Flow < 26.0.6 Unauthorized SQL Query Execution via Dashboard Export Endpoint

Priority LOW 31

TIM Flow before 26.0.6 contains an improper authorization vulnerability that allows any authenticated user to submit arbitrary SQL queries to a privileged dashboard Excel export endpoint intended for administrative use o…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00375 Published 2026-08-24 Fixed in 26.0.6 CWE-862
TI-2026-28786 CVE-2026-39915 · GHSA-whrv-mf4r-37rq

TIM Flow < 26.0.6 CRLF Injection via rt Parameter

Priority LOW 39

TIM Flow before 26.0.6 contains a CRLF injection vulnerability that allows remote attackers to inject arbitrary HTTP headers and response body content by embedding unsanitized carriage return and line feed sequences in t…

CVSS 4.0HIGH 8.5 Network No auth User interaction EPSS 0.00476 Published 2026-08-24 Fixed in 26.0.6 CWE-113