Tim-Solutions Tim Flow
2 CVEs affecting Tim-Solutions Tim Flow. Latest disclosed: 2026-08-24. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-39915 | High | 8.1 | 2026-08-24 | TIM Flow before 26.0.6 contains a CRLF injection vulnerability that allows remote attackers to inject arbitrary HTTP headers and response body content by embed… |
CVE-2026-39914 | Medium | 6.5 | 2026-08-24 | TIM Flow before 26.0.6 contains an improper authorization vulnerability that allows any authenticated user to submit arbitrary SQL queries to a privileged dash… |