All security reports
NVD security advisory

Security advisory for CVE-2026-78674

CVE-2026-78674

Full advisory details, affected packages, severity context, and original source.

Affected technology

CVE-2026-78674Affected product

Advisory overview

The BPMN System REST APIs do not sufficiently validate input parameters, allowing authenticated users to submit crafted requests that can lead to the execution of arbitrary commands on the server. An authenticated user can leverage this vulnerability to execute arbitrary commands with the privileges of the product's runtime account. The scope of potential damage is contingent upon the permissions assigned to this account.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account