123 matches found
CVE-2026-47884 vulnerabilities
Vulnerabilities for packages: datahub-gms, apache-activemq, geoserver, apache-nifi-registry, datahub-gms-fips, camunda-zeebe, camunda, apache-activemq-fips...
GHSA-PC63-QCMH-9CMG vulnerabilities
Vulnerabilities for packages: datahub-gms, apache-activemq, geoserver, apache-nifi-registry, datahub-gms-fips, camunda-zeebe, camunda, apache-activemq-fips...
CVE-2026-77226
Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...
CVE-2026-77226
The Camunda engine, specifically versions 7.24.0 before 7.24.15 , is vulnerable to an incorrect authorization flaw in the Admin web application's first-run setup endpoint. The SetupResource component incorrectly determines setup availability by only counting direct members of the camunda-admin gr...
CVE-2026-77226 Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint
Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...
EUVD-2026-92791
Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...
CVE-2026-77226 Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint
Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...
PT-2026-106239
Name of the Vulnerable Software and Affected Versions Camunda versions 7.24.0 through 7.24.14 Description An incorrect authorization issue exists in the Admin web application's first-run setup endpoint. The SetupResource incorrectly determines if the setup process is available by counting only...
CVE-2026-77226: Incorrect Authorization
Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...
CVE-2026-41719 vulnerabilities
Vulnerabilities for packages: camunda-zeebe...
CVE-2026-41721 vulnerabilities
Vulnerabilities for packages: camunda-zeebe...
GHSA-5M4M-73W9-8433 vulnerabilities
Vulnerabilities for packages: camunda-zeebe...
GHSA-5VPF-XVV7-C8VH vulnerabilities
Vulnerabilities for packages: camunda-zeebe...
GHSA-9FW2-H3HF-293R vulnerabilities
Vulnerabilities for packages: camunda-zeebe...
CVE-2026-41711 vulnerabilities
Vulnerabilities for packages: camunda-zeebe...
CVE-2026-41716 vulnerabilities
Vulnerabilities for packages: camunda-zeebe...
GHSA-XG2J-3HJ6-PC24 vulnerabilities
Vulnerabilities for packages: camunda-zeebe...
GHSA-GGG2-9786-HWC8 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe...
GHSA-8C42-7QJ2-3J46 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, apache-activemq-artemis-fips, s3proxy-fips, strimzi-kafka-operator-fips, thingsboard, apicurio-registry, kafbat-ui, conductor-fips, airbyte-platform-fips, hono, celeborn, sonarqube,...
CVE-2026-59903 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, apache-activemq-artemis-fips, s3proxy-fips, strimzi-kafka-operator-fips, thingsboard, apicurio-registry, kafbat-ui, conductor-fips, airbyte-platform-fips, hono, celeborn, sonarqube,...