Skip to content
OpenAdvisories

Product · Flowring

Agentflow 4.0

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-96431

    Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous Type

    Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to execute arbitrary system commands via a malicious file.

    Flowring Agentflow 4.0
  • Critical 9.3
    CVE-2026-96429

    Flowring Agentflow 4.0 - SQL Injection

    SQL Injection in the /WebAgenda/SMBAjaxConfigProcess.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands via the id parameter.

    Flowring Agentflow 4.0
  • Critical 9.3
    CVE-2026-96428

    Flowring Agentflow 4.0 - SQL Injection

    SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands via the words parameter.

    Flowring Agentflow 4.0