Skip to content
OpenAdvisories

Vendor

Camunda

4 known vulnerabilities.

Products

Camunda 7 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-109431

    Camunda Missing Authorization in Task Sub-Resources

    Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that allows authenticated attackers with no permission grants to access task comments and attachments by calling sin…

    Camunda Camunda 7
  • High 8.1
    CVE-2026-77226

    Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint

    Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group r…

    Camunda Camunda 7