F
Vendor security profile
flowintel
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs12
Critical1
CISA KEV0
Public exploit0
Patch rate%100
Avg. CVSS6.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
12
0
0
CVE KEV
CVE severity distribution
12toplam CVE
Critical1 (8%)
High5 (42%)
Medium6 (50%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%0
Public exploit
12Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
6.9
CVE-2026-81827
Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input
F
Patch verifiedEPSS %0
9.1
CVE-2026-81826
Flowintel Fails to Invalidate Active Sessions After Password Change
F
Patch verifiedEPSS %0
5.1
CVE-2026-81820
Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes
F
Patch verifiedEPSS %0
5.3
CVE-2026-81819
Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments
F
Patch verifiedEPSS %0
8.6
CVE-2026-81818
Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges
F
Patch verifiedEPSS %0
7.2
CVE-2026-81817
Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification
F
Patch verifiedEPSS %0
5.1
CVE-2026-81814
Flowintel Stored XSS in Calendar via Malicious Case Title
F
Patch verifiedEPSS %0
5.1
CVE-2026-81753
Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content
F
Patch verifiedEPSS %1
7.5
CVE-2026-81743
Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection
F
Patch verifiedEPSS %0
8.6
CVE-2026-81662
Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys
F
Patch verifiedEPSS %1