VYPR

Camunda

by Camunda

CVEs (1)

  • CVE-2026-77226HigOct 5, 2026
    risk 0.53cvss 8.1epss —

    Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than…