CVE-2026-96428

Flowring Agentflow 4.0 - SQL Injection PUBLISHED

Description (CNA)

SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands via the words parameter.

Affected (CNA)

Vendor / product	Versions
Flowring Technology Corp / Agentflow 4.0	affected 0 before 2025/08/08

CWE

CWE-89

References

https://zuso.ai/cve-advisory/advisory

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.