EUVD-2026-62589

Flow-Like is a platform for building end-to-end use cases. Prior to version 1.0.4, GET /api/v1/apps/appid/invoke/presign grants Azure Blob Storage SAS credentials with write and delete access to app content to any app member that has ExecuteEvents, even when that member lacks ReadFiles and...

CVE-2026-62589

...

CVE-2026-62589

Oracle Siebel CRM's Open Integration component (versions 25.12-26.6) has a HIGH-severity (CVSS 8.7) flaw exploitable by an unauthenticated remote attacker over HTTP with high attack complexity, enabling unauthorized read/write access to critical data with scope change. CISA SSVC rates technical i...