CVE ID :CVE-2026-109432 Published : Oct. 19, 2026, 3:08 p.m. | 56 minutes ago Description :Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate() fails to check sub-query expression maps within the orQueries...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-109432 - Camunda Expression Injection via orQueries RCE

VERWANDTEARTIKEL

CVE-2026-84568

CVE-2026-112368 - Unbounded Recursion in phongo_bson_visit_document/visit_array:

CVE-2026-112305 - Semaphore UI through 2.19.16 RCE via Task Environment Ansible Variable Override

CVE-2026-109431 - Camunda Missing Authorization in Task Sub-Resources

CVE-2026-112296 - FlyCms through commit edfdf724 Default Super Administrator Credentials

CVE-2026-112292 - CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rules