CVE-2026-96430

Flowring Agentflow 4.0 - Exposed Dangerous Method or Function PUBLISHED

Description (CNA)

Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote authenticated users to execute arbitrary SQL commands via the sql parameter.

Affected (CNA)

Vendor / product	Versions
Flowring Technology Corp / Agentflow 4.0	affected 0 before 2026/08/28

CWE

CWE-749

References

https://zuso.ai/cve-advisory/advisory

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.