agentprime: budibase-serverEvery new CVE for budibase-server.https://agentprime.io/CVE-2026-100688: Budibase server before 3.45.0 Cross-Tenant Information Disclosurehttps://agentprime.io/advisories/CVE-2026-100688/https://agentprime.io/advisories/CVE-2026-100688/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:48 GMTCVECVE-2026-100687: Budibase Server before 3.45.0 Credential Exposure via External Table Broadcasthttps://agentprime.io/advisories/CVE-2026-100687/https://agentprime.io/advisories/CVE-2026-100687/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:47 GMTCVECVE-2026-100686: Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/appshttps://agentprime.io/advisories/CVE-2026-100686/https://agentprime.io/advisories/CVE-2026-100686/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:46 GMTCVECVE-2026-100685: Budibase before 3.45.0 Information Disclosure via Chat Linkshttps://agentprime.io/advisories/CVE-2026-100685/https://agentprime.io/advisories/CVE-2026-100685/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:45 GMTCVECVE-2026-100684: Budibase Server 3.41.0 before 3.45.0 Authentication Bypass via OIDChttps://agentprime.io/advisories/CVE-2026-100684/https://agentprime.io/advisories/CVE-2026-100684/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:45 GMTCVEcriticalCVE-2026-100683: Budibase before 3.45.0 SQL Injection via column-rename DDLhttps://agentprime.io/advisories/CVE-2026-100683/https://agentprime.io/advisories/CVE-2026-100683/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:44 GMTCVECVE-2026-100682: Budibase Server before 3.45.0 Arbitrary File Write via ZIP Symlinkhttps://agentprime.io/advisories/CVE-2026-100682/https://agentprime.io/advisories/CVE-2026-100682/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:43 GMTCVECVE-2026-100681: Budibase before 3.45.0 SSRF and OAuth Token Exfiltration via Teams Webhookhttps://agentprime.io/advisories/CVE-2026-100681/https://agentprime.io/advisories/CVE-2026-100681/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:43 GMTCVECVE-2026-100680: Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Importhttps://agentprime.io/advisories/CVE-2026-100680/https://agentprime.io/advisories/CVE-2026-100680/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:42 GMTCVECVE-2026-82246: Budibase Server before 3.41.3 SSRF via Query Importhttps://agentprime.io/advisories/CVE-2026-82246/https://agentprime.io/advisories/CVE-2026-82246/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:49:32 GMTCVECVE-2026-82245: Budibase before 3.41.3 Missing Authorization License Managementhttps://agentprime.io/advisories/CVE-2026-82245/https://agentprime.io/advisories/CVE-2026-82245/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:49:32 GMTCVECVE-2026-82244: Budibase before 3.41.3 Remote Code Execution via Plugin eval()https://agentprime.io/advisories/CVE-2026-82244/https://agentprime.io/advisories/CVE-2026-82244/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:49:31 GMTCVEcriticalCVE-2026-82243: Budibase Server before 3.41.3 SSRF with Credential Leakagehttps://agentprime.io/advisories/CVE-2026-82243/https://agentprime.io/advisories/CVE-2026-82243/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:49:30 GMTCVECVE-2026-82242: Budibase before 3.41.3 Cross-Application Resource Injection via Missing Authorizationhttps://agentprime.io/advisories/CVE-2026-82242/https://agentprime.io/advisories/CVE-2026-82242/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:49:30 GMTCVECVE-2026-82241: Budibase backend-core SSRF via incomplete default blacklisthttps://agentprime.io/advisories/CVE-2026-82241/https://agentprime.io/advisories/CVE-2026-82241/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:49:29 GMTCVECVE-2026-82240: Budibase before 3.41.3 Privilege Escalation via User Update APIhttps://agentprime.io/advisories/CVE-2026-82240/https://agentprime.io/advisories/CVE-2026-82240/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:49:28 GMTCVECVE-2026-82239: Budibase before 3.41.3 Authorization Bypass via datasources/queryhttps://agentprime.io/advisories/CVE-2026-82239/https://agentprime.io/advisories/CVE-2026-82239/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 10:49:28 GMTCVECVE-2026-72851: Budibase before 3.40.0 SQL Injection via Unauthenticated Webhookhttps://agentprime.io/advisories/CVE-2026-72851/https://agentprime.io/advisories/CVE-2026-72851/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 21:54:43 GMTCVEcriticalCVE-2026-72850: Budibase before 3.40.0 Arbitrary File Write via Path Traversalhttps://agentprime.io/advisories/CVE-2026-72850/https://agentprime.io/advisories/CVE-2026-72850/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 21:54:42 GMTCVEcritical