Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: absmach Clear all filters
TI-2026-75470 CVE-2026-111684 · GHSA-vh76-85cj-956g

Authorization bypass in Magistrala certs service

Priority HIGH 65

Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, issue, and revoke other tenants' device certificates by supplying foreign serials or entity ids…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.0022 Published 2026-10-16 No fix listed CWE-639
TI-2026-56613 CVE-2026-82028 · GHSA-9m8c-pc28-w7mx

Magistrala < 1.0.0 SQL Injection via format Parameter in Reader API

Priority MEDIUM 41

Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-reader HTTP API services that allows authenticated attackers to inject arbitrary SQL by supplying a malicious format que…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00596 Published 2026-09-14 Fixed in 1.0.0 CWE-89
TI-2026-49943 CVE-2026-71276 · GHSA-pwc8-43hr-jg4j

Magistrala (formerly Mainflux) IoT Platform SQL Injection via format Query Parameter

Priority LOW 31

Magistrala (formerly Mainflux)'s message-readers API reads a value from the HTTP query string (readers/api/http/transport.go) with no validation and interpolates it directly into raw SQL queries via fmt.Sprintf in both t…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00323 Published 2026-08-05 No fix listed CWE-89