Solução

Planos

Recursos

Advisories

Empresa

Select Language



Contatar vendas

Fazer login

Teste gratuito

Select Language



Contatar vendas

Teste gratuito

Select Language



Publicly disclosed vulnerabilities discovered by or reported to Fluid Attacks

Buscar por termo

Search filters

Discovered by



All



Severity



All



Reset filters

Our pentesters

Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creation

7.5

High

CVE-2026-10716

Published date:

5 de ago. de 2026

Discovered by

Santiago Alvarez and Oscar Naveda

Our pentesters

ERPNext v16.25.0 - Improper authorization in Prospect opportunities API

7.1

High

CVE-2026-13227

Published date:

4 de ago. de 2026

Discovered by

Eduardo Ferguson

AI SAST Scanner

Zammad 7.0.1 - Improper authorization in ticket article attachment cloning

7.1

High

CVE-2026-13229

Published date:

4 de ago. de 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Naveda

External pentesters

osTicket v1.18.3 - v1,17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosure

7.1

High

CVE-2026-14871

Published date:

17 de jul. de 2026

Discovered by

Juan Felipe Osorio Z

External pentesters

openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download

5.3

Medium

CVE-2026-11944

Published date:

9 de jul. de 2026

Discovered by

Daniel Esteban Celis

Our pentesters

PayloadCMS 3.84.1 - Authenticated account lockout bypass through default unlock access

5.3

Medium

CVE-2026-11779

Published date:

26 de jun. de 2026

Discovered by

Oscar Naveda

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Tree View node label rendering

4.8

Medium

CVE-2026-50712

Published date:

24 de jun. de 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Number Card filter fields rendering

4.6

Medium

CVE-2026-50711

Published date:

24 de jun. de 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

Carregar mais

Buscar por termo

Search filters

Discovered by



All



Severity



All



Reset filters

Our pentesters

Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creation

7.5

High

CVE-2026-10716

Published date:

5 de ago. de 2026

Discovered by

Santiago Alvarez and Oscar Naveda

Our pentesters

ERPNext v16.25.0 - Improper authorization in Prospect opportunities API

7.1

High

CVE-2026-13227

Published date:

4 de ago. de 2026

Discovered by

Eduardo Ferguson

AI SAST Scanner

Zammad 7.0.1 - Improper authorization in ticket article attachment cloning

7.1

High

CVE-2026-13229

Published date:

4 de ago. de 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Naveda

External pentesters

osTicket v1.18.3 - v1,17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosure

7.1

High

CVE-2026-14871

Published date:

17 de jul. de 2026

Discovered by

Juan Felipe Osorio Z

External pentesters

openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download

5.3

Medium

CVE-2026-11944

Published date:

9 de jul. de 2026

Discovered by

Daniel Esteban Celis

Our pentesters

PayloadCMS 3.84.1 - Authenticated account lockout bypass through default unlock access

5.3

Medium

CVE-2026-11779

Published date:

26 de jun. de 2026

Discovered by

Oscar Naveda

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Tree View node label rendering

4.8

Medium

CVE-2026-50712

Published date:

24 de jun. de 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Number Card filter fields rendering

4.6

Medium

CVE-2026-50711

Published date:

24 de jun. de 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

Carregar mais

Buscar por termo

Search filters

Discovered by



All



Severity



All



Reset filters

Our pentesters

Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creation

7.5

High

CVE-2026-10716

Published date:

5 de ago. de 2026

Discovered by

Santiago Alvarez and Oscar Naveda

Our pentesters

ERPNext v16.25.0 - Improper authorization in Prospect opportunities API

7.1

High

CVE-2026-13227

Published date:

4 de ago. de 2026

Discovered by

Eduardo Ferguson

AI SAST Scanner

Zammad 7.0.1 - Improper authorization in ticket article attachment cloning

7.1

High

CVE-2026-13229

Published date:

4 de ago. de 2026

Discovered by

Oscar Naveda

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Naveda

External pentesters

osTicket v1.18.3 - v1,17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosure

7.1

High

CVE-2026-14871

Published date:

17 de jul. de 2026

Discovered by

Juan Felipe Osorio Z

External pentesters

openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download

5.3

Medium

CVE-2026-11944

Published date:

9 de jul. de 2026

Discovered by

Daniel Esteban Celis

Our pentesters

PayloadCMS 3.84.1 - Authenticated account lockout bypass through default unlock access

5.3

Medium

CVE-2026-11779

Published date:

26 de jun. de 2026

Discovered by

Oscar Naveda

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Tree View node label rendering

4.8

Medium

CVE-2026-50712

Published date:

24 de jun. de 2026

Discovered by

Oscar Uribe

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Number Card filter fields rendering

4.6

Medium

CVE-2026-50711

Published date:

24 de jun. de 2026

Discovered by

Oscar Uribe

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

Carregar mais

Learn about our policy for disclosing advisories of vulnerabilities in third-party, open-source products.

View disclosure policy

Comece seu teste gratuito de 21 dias

Descubra os benefícios da solução Fluid Attacks, da qual empresas de todos os tamanhos já desfrutam.

Teste gratuito

Contatar vendas

Comece seu teste gratuito de 21 dias

Descubra os benefícios da solução Fluid Attacks, da qual empresas de todos os tamanhos já desfrutam.

Teste gratuito

Contatar vendas

Comece seu teste gratuito de 21 dias

Descubra os benefícios da solução Fluid Attacks, da qual empresas de todos os tamanhos já desfrutam.

Teste gratuito

Contatar vendas

As soluções da Fluid Attacks permitem que as organizações identifiquem, priorizem e corrijam vulnerabilidades em seus softwares ao longo do SDLC. Com o apoio de IA, ferramentas automatizadas e pentesters, a Fluid Attacks acelera a mitigação da exposição ao risco das empresas e fortalece sua postura de cibersegurança.

Consulta IA sobre Fluid Attacks