Skip to content
OpenAdvisories

Product · datacycle-engine

dataCycle-CORE

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.3
    CVE-2026-32825

    dataCycle No Brute-Force Protection On Web And API Login Endpoints

    dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, the application accepts unlimit…

    datacycle-engine dataCycle-CORE
  • High 7.3
    CVE-2026-32824

    dataCycle User API Password Reset And Confirmation Flows Trust Attacker- Controlled Redirect Targets

    dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, a low-privileged authenticated …

    datacycle-engine dataCycle-CORE
  • High 8.1
    CVE-2026-32821

    API Collection Impersonation Via user_email And Missing Object- Level Authorization

    dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any authenticated API user who …

    datacycle-engine dataCycle-CORE
  • High 7.5
    CVE-2026-32806

    dataCycle Authorization Bypass Via /remote_render

    dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any authenticated user can requ…

    datacycle-engine dataCycle-CORE
  • High 7.5
    CVE-2026-32820

    dataCycle Public Markdown Path Traversal Via /docs/*path

    dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, the documentation and static ma…

    datacycle-engine dataCycle-CORE
  • High 7.5
    CVE-2026-32807

    dataCycle Public DataLink Text File Download Ignores Validity And Authorization

    dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can…

    datacycle-engine dataCycle-CORE