Absmach Magistrala
2 CVEs affecting Absmach Magistrala. Latest disclosed: 2026-08-05. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-71235 | High | 8.8 | 2026-08-05 | Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Go scri… |
CVE-2026-71276 | High | 7.1 | 2026-08-05 | Magistrala (formerly Mainflux)'s message-readers API reads a `format` value from the HTTP query string (readers/api/http/transport.go) with no validation and i… |