CA
Vendor
Camunda
7
CVEs
0
On KEV
4
New 30D
Products
C79.8
Camunda 7
Camunda
4 CVEs0 on KEV4 new
BP5.4
Bpmn.io
Camunda
1 CVEs0 on KEV0 new
MI7.5
Min-dash
Camunda
1 CVEs0 on KEV0 new
MO9.1
Modeler
Camunda
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109433 | C7 Camunda 7 Camunda | 6.5 | Oct 19 | Camunda Broken Access Control via Cockpit |
| CVE-2026-109432 | C7 Camunda 7 Camunda | 9.8 | Oct 19 | Camunda Expression Injection via orQueries RCE |
| CVE-2026-109431 | C7 Camunda 7 Camunda | 8.1 | Oct 19 | Camunda Missing Authorization in Task Sub-Resources |
| CVE-2026-77226 | C7 Camunda 7 Camunda | 8.1 | Oct 5 | Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint |
| CVE-2024-51577 | BP Bpmn.io Camunda | 5.4 | Nov 10 | WordPress bpmn.io plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability |
| CVE-2021-23460 | MI Min-dash Camunda | 7.5 | Jan 21 | Prototype Pollution |
| CVE-2021-28154 | MO Modeler Camunda | 9.1 | Mar 11 | Camunda Modeler (aka camunda-modeler) through 4.6.0 allows arbitrary file access |