All 4 CVE vulnerabilities found in magistrala, with AI-generated Chinese analysis, references, and POCs.
Vendor: absmach
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-111684 | Magistrala through 1.0.0 Cross-Tenant Authorization Bypass in Certs Service CWE-639 | 8.3 | High | 2026-10-16 |
| CVE-2026-82028 | Magistrala < 1.0.0 SQL Injection via format Parameter in Reader API CWE-89 | 8.8 | High | 2026-09-14 |
| CVE-2026-71276 | Magistrala (formerly Mainflux) IoT Platform SQL Injection via format Query Parameter CWE-89 | 7.1 | High | 2026-08-05 |
| CVE-2026-71235 | Magistrala IoT Platform - Unrestricted Go/Lua Script Execution in Rules Engine CWE-94 | 8.8 | High | 2026-08-05 |
All 4 known CVE vulnerabilities affecting magistrala with full Chinese analysis, references, and POCs where available.