Vulnerabilities

TI-2026-39430 CVE-2026-54597

ITFlow: Authenticated Time-Based Blind SQL Injection in ITFlow via expires Parameter

HIGH 71

ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00427 Published 2026-09-17 Fixed in 26.07 CWE-89

TI-2026-39429 CVE-2026-54596

HIGH 70

ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00478 Published 2026-09-17 Fixed in 26.07 CWE-89

TI-2026-35255 CVE-2026-47755

LOW 29

ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00354 Published 2026-07-23 Fixed in 26.05 CWE-639