Camunda
Camunda Security Releases - October 2026
camunda-2026-10 Oct 1, 2026 Source: Vendor
Camunda security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-109431
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
3 lines
Showing 1–3 of 3 matching , clear filters
CVE-2026-109431
BR2026-0000-040200
Camunda 7
unclaimed
Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that allows authenticated attackers with no permission...
Credited as CodeAnt AI Security Research Team
CVE-2026-109432
BR2026-0000-040201
Camunda 7
unclaimed
Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate() fails to check sub-query expression maps within the orQue...
Credited as CodeAnt AI Security Research Team
CVE-2026-109433
BR2026-0000-040202
Camunda 7
unclaimed
Camunda 7.24.0 before 7.24.16 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp that allows authenticated attackers to bypass permission checks due to a...
Credited as CodeAnt AI Security Research Team