Skip to content
OpenAdvisories

Vendor

TIM Solutions

2 known vulnerabilities.

Products

TIM Flow 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-39914

    TIM Flow < 26.0.6 Unauthorized SQL Query Execution via Dashboard Export Endpoint

    TIM Flow before 26.0.6 contains an improper authorization vulnerability that allows any authenticated user to submit arbitrary SQL queries to a privileged dashboard Excel export endpoint intended for administrative use only. Attackers can craft and submit una…

    TIM Solutions TIM Flow