Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation vulnerabilities

Product

Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation

by bitpressadmin · last CVE Oct 14, 2026

CVEs

On KEV

7.5

Max CVSS

New 30D

Vulnerabilities4 In the news0 Timeline

Severity mix

Critical 0High 3Medium 1Low 0

Severity

All severities4 Critical0 High3 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-104749	7.5	1%	Oct 14	Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data Affected: through 2.10.6
CVE-2026-15006	7.5	1%	Aug 1	Bit integrations <= 2.9.0 - Unauthenticated Arbitrary File Read via Optional CF7 File Field Affected: through 2.9.0
CVE-2026-102007	7.2	0%	Oct 13	Bit integrations <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback Affected: through 2.10.6