Skip to content
Nextcloud Flow vulnerabilities
-
flarum framework, nextcloud flow, vaadin +2 more
Push Endpoint Returns Permissive CORS Headers
CVE-2026-110737
2.3 Low
-
elated-themes flow
WordPress Flow theme <= 1.8 - Local File Inclusion vulnerability
CVE-2026-57793
7.5 High
-
nextcloud flow
Possible information disclosure of environment variables in Vaadin Build Plugins via Failed Frontend Build
CVE-2026-7860
Fix available
1.6 Low
-
nextcloud flow, windmill, windmill labs ce (community edition) +1 more +3 more
Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE
CVE-2026-22683
8.7 High
-
vaadin, nextcloud flow +1 more
Unauthorized session creation via reserved framework path access
CVE-2026-2742
Fix available
5.3 Medium
-
vaadin, nextcloud flow +1 more
Zip Slip Path Traversal on Node Unpack
CVE-2026-2741
Fix available
2.3 Low
-
lwj flow
lwj flow SVG File FormResource.java uploadFile unrestricted upload
CVE-2026-1126
5.3 Medium
-
nextcloud flow
Total.js Flow SVG File unrestricted upload
CVE-2025-11655
5.1 Medium