Publicly disclosed vulnerabilities discovered by or reported to Fluid Attacks

Search by term

Search filters

Discovered by

All

Severity

All

Our pentesters

PayloadCMS 3.84.1 - Authenticated account lockout bypass through default unlock access

5.3

Medium

CVE-2026-11779

Published date:

Jun 26, 2026

Discovered by

Oscar Naveda

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Tree View node label rendering

4.8

Medium

CVE-2026-50712

Published date:

Jun 24, 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Number Card filter fields rendering

4.6

Medium

CVE-2026-50711

Published date:

Jun 24, 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS via eval in Number Card filters_config

4.6

Medium

CVE-2026-50710

Published date:

Jun 24, 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Notifications Events color rendering

4.8

Medium

CVE-2026-50709

Published date:

Jun 24, 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Multi Select Dialog result rendering

4.8

Medium

CVE-2026-50708

Published date:

Jun 24, 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Form Dashboard headline rendering

4.6

Medium

CVE-2026-50705

Published date:

Jun 24, 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Reflected/Stored XSS in File View breadcrumbs rendering

4.6

Medium

CVE-2026-50704

Published date:

Jun 24, 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

Load more

Search by term

Search filters

Discovered by

All

Severity

All

Our pentesters

PayloadCMS 3.84.1 - Authenticated account lockout bypass through default unlock access

5.3

Medium

CVE-2026-11779

Published date:

Jun 26, 2026

Discovered by

Oscar Naveda

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Tree View node label rendering

4.8

Medium

CVE-2026-50712

Published date:

Jun 24, 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Number Card filter fields rendering

4.6

Medium

CVE-2026-50711

Published date:

Jun 24, 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS via eval in Number Card filters_config

4.6

Medium

CVE-2026-50710

Published date:

Jun 24, 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Notifications Events color rendering

4.8

Medium

CVE-2026-50709

Published date:

Jun 24, 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Multi Select Dialog result rendering

4.8

Medium

CVE-2026-50708

Published date:

Jun 24, 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Form Dashboard headline rendering

4.6

Medium

CVE-2026-50705

Published date:

Jun 24, 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Reflected/Stored XSS in File View breadcrumbs rendering

4.6

Medium

CVE-2026-50704

Published date:

Jun 24, 2026

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

Load more

Search by term

Search filters

Discovered by

All

Severity

All

Our pentesters

PayloadCMS 3.84.1 - Authenticated account lockout bypass through default unlock access

5.3

Medium

CVE-2026-11779

Published date:

Jun 26, 2026

Discovered by

Oscar Naveda

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Tree View node label rendering

4.8

Medium

CVE-2026-50712

Published date:

Jun 24, 2026

Discovered by

Oscar Uribe

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Number Card filter fields rendering

4.6

Medium

CVE-2026-50711

Published date:

Jun 24, 2026

Discovered by

Oscar Uribe

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS via eval in Number Card filters_config

4.6

Medium

CVE-2026-50710

Published date:

Jun 24, 2026

Discovered by

Oscar Uribe

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Notifications Events color rendering

4.8

Medium

CVE-2026-50709

Published date:

Jun 24, 2026

Discovered by

Oscar Uribe

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Multi Select Dialog result rendering

4.8

Medium

CVE-2026-50708

Published date:

Jun 24, 2026

Discovered by

Oscar Uribe

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Stored XSS in Form Dashboard headline rendering

4.6

Medium

CVE-2026-50705

Published date:

Jun 24, 2026

Discovered by

Oscar Uribe

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

AI SAST Scanner

Frappe Framework 17.0.0-dev - Reflected/Stored XSS in File View breadcrumbs rendering

4.6

Medium

CVE-2026-50704

Published date:

Jun 24, 2026

Discovered by

Oscar Uribe

Detected by

Fluid Attacks AI SAST Scanner,

disclosed by

Oscar Uribe

Load more

Learn about our policy for disclosing advisories of vulnerabilities in third-party, open-source products.

Start your 21-day free trial

Discover the benefits of the Fluid Attacks solution, which organizations of all sizes are already enjoying.

Start your 21-day free trial

Discover the benefits of the Fluid Attacks solution, which organizations of all sizes are already enjoying.

Start your 21-day free trial

Discover the benefits of the Fluid Attacks solution, which organizations of all sizes are already enjoying.

Fluid Attacks' solutions enable organizations to identify, prioritize, and remediate vulnerabilities in their software throughout the SDLC. Supported by AI, automated tools, and pentesters, Fluid Attacks accelerates companies' risk exposure mitigation and strengthens their cybersecurity posture.

Get an AI summary of Fluid Attacks

Subscribe to our newsletter

Stay updated on our upcoming events and latest blog posts, advisories and other engaging resources.

© 2026 Fluid Attacks. We hack your software.

Fluid Attacks' solutions enable organizations to identify, prioritize, and remediate vulnerabilities in their software throughout the SDLC. Supported by AI, automated tools, and pentesters, Fluid Attacks accelerates companies' risk exposure mitigation and strengthens their cybersecurity posture.

Subscribe to our newsletter

Stay updated on our upcoming events and latest blog posts, advisories and other engaging resources.

Get an AI summary of Fluid Attacks

© 2026 Fluid Attacks. We hack your software.

Fluid Attacks' solutions enable organizations to identify, prioritize, and remediate vulnerabilities in their software throughout the SDLC. Supported by AI, automated tools, and pentesters, Fluid Attacks accelerates companies' risk exposure mitigation and strengthens their cybersecurity posture.

Subscribe to our newsletter

Stay updated on our upcoming events and latest blog posts, advisories and other engaging resources.

Get an AI summary of Fluid Attacks

© 2026 Fluid Attacks. We hack your software.