Brainstorm Force Cartflows
3 CVEs affecting Brainstorm Force Cartflows. Latest disclosed: 2026-09-30. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-96837 | High | 8.8 | 2026-09-30 | Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions. |
CVE-2026-25316 | High | 7.2 | 2026-02-19 | Deserialization of Untrusted Data vulnerability in Brainstorm Force CartFlows cartflows allows Object Injection.This issue affects CartFlows: from n/a through… |
CVE-2026-39477 | Medium | 4.3 | 2026-04-08 | Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |