Absmach Magistrala
4 CVEs affecting Absmach Magistrala. Latest disclosed: 2026-10-16. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-82028 | High | 8.8 | 2026-09-14 | Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-reader HTTP API services that allows authenticated attacker… |
CVE-2026-71235 | High | 8.8 | 2026-08-05 | Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Lua scr… |
CVE-2026-111684 | High | 8.3 | 2026-10-16 | Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, issue, and revoke other tenants' d… |
CVE-2026-71276 | High | 7.1 | 2026-08-05 | Magistrala (formerly Mainflux)'s message-readers API reads a value from the HTTP query string (readers/api/http/transport.go) with no validation and interpolat… |