Skip to content
OpenAdvisories

Vendor

floci-io

3 known vulnerabilities.

Products

floci 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-108598 Public exploit

    Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Templates

    Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can create a REST API with a MOCK integration whose template…

    floci-io floci