Datacycle-engine vulnerabilities

Products

• Datacycle-core 9

Newest

• datacycle-engine datacycle-core dataCycle No Brute-Force Protection On Web And API Login Endpoints CVE-2026-32825 7.3 HighJuly 20, 2026
• datacycle-engine datacycle-core dataCycle User API Password Reset And Confirmation Flows Trust Attacker- Controlled Redirect Targets CVE-2026-32824 7.3 HighJuly 20, 2026
• datacycle-engine datacycle-core dataCycle State-Changing GET Endpoints Enable CSRF CVE-2026-32823 4.3 MediumJuly 20, 2026
• datacycle-engine datacycle-core API Collection Impersonation Via user_email And Missing Object- Level Authorization CVE-2026-32821 8.1 HighJuly 20, 2026
• datacycle-engine datacycle-core dataCycle Authorization Bypass Via /remote_render CVE-2026-32806 7.5 HighJuly 20, 2026
• datacycle-engine datacycle-core dataCycle Public Markdown Path Traversal Via /docs/*path CVE-2026-32820 7.5 HighJuly 20, 2026
• datacycle-engine datacycle-core dataCycle User Directory Enumeration Via /users/search CVE-2026-32819 4.3 MediumJuly 20, 2026
• datacycle-engine datacycle-core dataCycle Unauthenticated Reflected DOM XSS Via flash[...] On Public Pages CVE-2026-32822 6.1 MediumJuly 20, 2026
• datacycle-engine datacycle-core dataCycle Public DataLink Text File Download Ignores Validity And Authorization CVE-2026-32807 7.5 HighJuly 20, 2026