Pawelmalak Flame vulnerabilities

• pawelmalak flame Flame through 2.4.0 Admin Token Insufficient Session Expiration CVE-2026-100502 5.9 MediumSeptember 25, 2026
• pawelmalak flame Flame through 2.4.0 Brute-Force Attack via Login Endpoint CVE-2026-100501 8.3 HighSeptember 25, 2026
• pawelmalak flame Flame through 2.4.0 Information Exposure via GET /api/config CVE-2026-100418 6.9 MediumSeptember 25, 2026