Risesoft-y9 Workflow-engine vulnerabilities

• risesoft-y9 workflow-engine WorkFlow-Engine through 9.6.11 Missing Authorization via flowableui buttonOperation Endpoints CVE-2026-110118 7.1 HighOctober 13, 2026
• risesoft-y9 workflow-engine risesoft-y9 WorkFlow-Engine OAuth2 Resource Filter CustomHistoricProcessServiceImpl.java getByIdAndYear sql injection CVE-2026-102616 6.9 MediumSeptember 29, 2026