US
Vendor
uselotus
6
CVEs
0
On KEV
6
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115334 New | LO lotus uselotus | 6.8 | Oct 22 | Lotus through 0.10.2 Authorization Bypass via switch_organization Endpoint |
| CVE-2026-115333 New | LO lotus uselotus | 5.9 | Oct 22 | Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix |
| CVE-2026-115332 New | LO lotus uselotus | 8.8 | Oct 22 | Lotus through 0.10.2 SQL Injection via Subscription Filter Keys |
| CVE-2026-115331 New | LO lotus uselotus | 8.8 | Oct 22 | Lotus through 0.10.2 SQL Injection via Metric Property Names and Filters |
| CVE-2026-115330 New | LO lotus uselotus | 8.8 | Oct 22 | Lotus through 0.10.2 SQL Injection via Custom SQL Billable Metrics |
| CVE-2026-115329 New | LO lotus uselotus | 5.9 | Oct 22 | Lotus through 0.10.2 Cross-Organization IDOR via SubscriptionViewSet |