VYPR

TIM Flow

by Atlassian

CVEs (1)

  • CVE-2026-39914MedAug 24, 2026
    risk 0.42cvss 6.5epss 0.00

    TIM Flow before 26.0.6 contains an improper authorization vulnerability that allows any authenticated user to submit arbitrary SQL queries to a privileged dashboard Excel export endpoint intended for administrative use only. Attackers can craft and submit unauthorized SQL…