Brainstorm Force Cartflows vulnerabilities
3 known vulnerabilities affecting brainstorm_force/cartflows.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2026-96837P2HIGHCVSS 8.8≥ n/a, ≤ 3.2.02026-09-30
CVE-2026-96837 [HIGH] CWE-98 CVE-2026-96837: Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions.
Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions.
nvd
CVE-2026-25316P3HIGHCVSS 7.2≤ 2.1.192026-02-19
CVE-2026-25316 [HIGH] CWE-502 CVE-2026-25316: Deserialization of Untrusted Data vulnerability in Brainstorm Force CartFlows cartflows allows Objec
Deserialization of Untrusted Data vulnerability in Brainstorm Force CartFlows cartflows allows Object Injection.This issue affects CartFlows: from n/a through <= 2.1.19.
nvd
CVE-2026-39477P4MEDIUMCVSS 4.3≤ 2.2.32026-04-08
CVE-2026-39477 [MEDIUM] CWE-862 CVE-2026-39477: Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorr
Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartFlows: from n/a through <= 2.2.3.
nvd