← All credits
David Cruciani
13 vulnerability records and advisories credit this contributor.
CVE-2026-81827
Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input
CVE-2026-81826
Flowintel Fails to Invalidate Active Sessions After Password Change
CVE-2026-81820
Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes
CVE-2026-81819
Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments
CVE-2026-81818
Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges
CVE-2026-81817
Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification
CVE-2026-81814
Flowintel Stored XSS in Calendar via Malicious Case Title
CVE-2026-81753
Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content
CVE-2026-81743
Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection
CVE-2026-81662
Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys