Product by Datacycle-engine

    dataCycle-CORE

    9 known vulnerabilities in dataCycle-CORE (Datacycle-engine), 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in dataCycle-CORE (Datacycle-engine)
    HighCVE-2026-32820

    dataCycle Public Markdown Path Traversal Via /docs/*path

    		7.5
    HighCVE-2026-32821

    API Collection Impersonation Via user_email And Missing Object- Level Authorization

    		8.1
    HighCVE-2026-32806

    dataCycle Authorization Bypass Via /remote_render

    		7.5
    HighCVE-2026-32807

    dataCycle Public DataLink Text File Download Ignores Validity And Authorization

    		7.5
    HighCVE-2026-32824

    dataCycle User API Password Reset And Confirmation Flows Trust Attacker- Controlled Redirect Targets

    		7.3
    HighCVE-2026-32825

    dataCycle No Brute-Force Protection On Web And API Login Endpoints

    		7.3
    MediumCVE-2026-32822

    dataCycle Unauthenticated Reflected DOM XSS Via flash[...] On Public Pages

    		6.1
    MediumCVE-2026-32819

    dataCycle User Directory Enumeration Via /users/search

    		4.3
    MediumCVE-2026-32823

    dataCycle State-Changing GET Endpoints Enable CSRF

    		4.3

    All products by Datacycle-engine