Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-56267 Information Exposure in Flowise Before 3.0.13 POST Account Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56267
Post summary
The notice briefly reports CVE‑2026‑56267 as an information‑exposure flaw in Flowise's POST account endpoint, but offers no proof of concept, exploit, patch, or evidence of active exploitation.
🚨*CVE* CVE-2026-56267 Flowise before 3.0.13 contains an information exposure vulnerability in the POST /api/v1/account/forgot-password endpoint that returns full user objects including PII… https://www.cve.org/CVERecord?id=CVE-2026-56267 ----- Traducción: CVE-2026-56267 Flo… http://infoflow.cloud`
Post summary
The text announces CVE‑2026‑56267, describing an information‑exposure flaw in Flowise’s forgot‑password endpoint that leaks full user objects containing PII; it includes a link to the CVE record but offers no PoC, exploit, or patch details.
CVE-2026-56267 Flowise before 3.0.13 contains an information exposure vulnerability in the POST /api/v1/account/forgot-password endpoint that returns full user objects including PII… https://www.cve.org/CVERecord?id=CVE-2026-56267
Post summary
The post announces CVE-2026-56267, detailing an information‐exposure flaw in Flowise’s forgot‑password endpoint that leaks user data, but does not provide PoC, exploit, or patch information.