Flowise
No Flowise CVE is in the CISA KEV catalogue.
Tracked since 7 Apr · latest article Fri 11 Sep · RSS
Exploited, by due date
CSV downloadNo Flowise CVE is in the CISA KEV catalogue.
6 articles from 4 outlets since 7 Apr; the latest 45 days ago.
- Article
- First report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 11 Sep · 17:37 UTC | Security Affairs | 36,769 AI Endpoints Exposed Online, Researchers Warn of Abuse Risk |
| Mon 1 Jun · 14:21 UTC | Infosecurity | Critical Flowise Bug CVE-2026-40933 Lets Attackers Hijack Servers |
| Sat 30 May · 16:12 UTC | SecurityWeek | Flowise AI tool hit by critical RCE flaw CVE-2026-40933 |
| Tue 7 Apr · 21:01 UTC | Security Affairs | Critical Flowise flaw CVE-2025-59528 exploited, thousands at risk |
| Tue 7 Apr · 16:01 UTC | SecurityWeek | Flowise CVE-2025-59528 Bug Lets Attackers Execute Code via JS |
| Tue 7 Apr · 06:21 UTC | The Hacker News | Flowise CVE-2025-59528 exploited, over 12k servers at risk |
Who reported 4 outlets, last 12 months
- SecurityWeek2
- Security Affairs2
- The Hacker News1
- Infosecurity1
- 36,769 AI Endpoints Exposed Online, Researchers Warn of Abuse RiskSecurity Affairs
- Critical Flowise Bug CVE-2026-40933 Lets Attackers Hijack ServersInfosecurity
- Flowise AI tool hit by critical RCE flaw CVE-2026-40933SecurityWeek
- Critical Flowise flaw CVE-2025-59528 exploited, thousands at riskSecurity Affairs
- Flowise CVE-2025-59528 Bug Lets Attackers Execute Code via JSSecurityWeek
- Flowise CVE-2025-59528 exploited, over 12k servers at riskThe Hacker News
All CVEs in coverage
2How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.