Skip to content
OpenAdvisories

Vendor

Camunda

4 known vulnerabilities.

Products

Camunda 7 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-109432

    Camunda Expression Injection via orQueries RCE

    Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate() fails to check sub-query expression maps within the orQueries field exposed by TaskQueryDto, allowing authenticated use…

    Camunda Camunda 7