CVE-2026-42158lowCWE-284

CVE-2026-42158: fallo de gravedad baja en reconurge flowsint

Flowsint: Broken Access Control allows modification of investigation metadata from any user

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear flowsint

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 2.3epss 0.2%
Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, an adversary with knowledge of an investigation ID, could update the metadata of an investigation of another user. This vulnerability is fixed in 1.2.3.
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Productos afectados
reconurge · flowsint
CVEs relacionadas — reconurge flowsint

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-32311CRITICALCommand Injection and Docker container escape allows root on host machineEPSS 0.5%CVE-2026-42156HIGHFlowsint: Cypher query injection in node type on node creationEPSS 0.3%CVE-2026-42157MEDIUMFlowsint: Stored XSS on map node marker in map pageEPSS 0.3%CVE-2026-44352MEDIUMFlowsint: Broken Access Control allows reading of sketch logs from any userEPSS 0.3%CVE-2026-42159MEDIUMFlowsint: Stored XSS in description of nodeEPSS 0.2%