agentprime: budibaseEvery new CVE for budibase.https://agentprime.io/CVE-2026-103757: Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generationhttps://agentprime.io/advisories/CVE-2026-103757/https://agentprime.io/advisories/CVE-2026-103757/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:25 GMTCVECVE-2026-72857: Budibase before 3.40.0 Credential Exposure via STRING Fieldshttps://agentprime.io/advisories/CVE-2026-72857/https://agentprime.io/advisories/CVE-2026-72857/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 21:54:45 GMTCVECVE-2026-72856: Budibase before 3.40.0 Authentication Bypass via Tenant Owner Emailhttps://agentprime.io/advisories/CVE-2026-72856/https://agentprime.io/advisories/CVE-2026-72856/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 21:54:45 GMTCVECVE-2026-72853: Budibase before 3.40.0 SQL Injection via Oracle connectorhttps://agentprime.io/advisories/CVE-2026-72853/https://agentprime.io/advisories/CVE-2026-72853/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 21:54:43 GMTCVECVE-2026-67311: Budibase before 3.38.1 SSRF Blacklist Bypass via HTTP Redirecthttps://agentprime.io/advisories/CVE-2026-67311/https://agentprime.io/advisories/CVE-2026-67311/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Aug 2026 12:22:18 GMTCVECVE-2026-46425: Budibase: SCIM endpoints lack role-based authorization, BASIC users CRUD tenant usershttps://agentprime.io/advisories/CVE-2026-46425/https://agentprime.io/advisories/CVE-2026-46425/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 17:06:36 GMTCVEcriticalCVE-2026-46427: Budibase: Snowflake private key returned unmasked from datasource API to BASIC usershttps://agentprime.io/advisories/CVE-2026-46427/https://agentprime.io/advisories/CVE-2026-46427/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 17:03:10 GMTCVECVE-2026-48149: Budibase: Stored XSS in Text component: BASIC users execute JS in admin session via MarkdownViewer innerHTML + CDN+srcdoc CSP bypasshttps://agentprime.io/advisories/CVE-2026-48149/https://agentprime.io/advisories/CVE-2026-48149/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 16:59:31 GMTCVECVE-2026-35218: Budibase: Stored XSS via unsanitized entity names rendered with {@html} in Builder Command Palettehttps://agentprime.io/advisories/CVE-2026-35218/https://agentprime.io/advisories/CVE-2026-35218/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Apr 2026 15:47:45 GMTCVECVE-2026-25043: Budibase: Unauthenticated Password Reset Endpoint Lacks Rate Limiting, Enabling Email Floodinghttps://agentprime.io/advisories/CVE-2026-25043/https://agentprime.io/advisories/CVE-2026-25043/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Apr 2026 15:35:10 GMTCVECVE-2026-31816: Budibase Universal Auth Bypass via Webhook Query Param Injectionhttps://agentprime.io/advisories/CVE-2026-31816/https://agentprime.io/advisories/CVE-2026-31816/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.17 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Mar 2026 20:55:52 GMTCVEcriticalCVE-2026-30240: Budibase PWA ZIP Upload Path Traversal Allows Reading Arbitrary Server Files Including All Environment Secretshttps://agentprime.io/advisories/CVE-2026-30240/https://agentprime.io/advisories/CVE-2026-30240/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Mar 2026 20:50:09 GMTCVEcriticalCVE-2026-25045: Budibase Critical Privilege Escalation & IDOR via Missing RBAC on User Role Management (Creator-Role)https://agentprime.io/advisories/CVE-2026-25045/https://agentprime.io/advisories/CVE-2026-25045/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Mar 2026 20:11:59 GMTCVECVE-2026-25737: Budibase Arbitrary File Upload Leading to Multiple Critical Vulnerabilities (SSRF, Stored XSS)https://agentprime.io/advisories/CVE-2026-25737/https://agentprime.io/advisories/CVE-2026-25737/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Mar 2026 20:08:32 GMTCVECVE-2026-25040: Budibase Vulnerable to Privilege Escalation via API Abuse – Creator Can Invite Users with Admin/Any Rolehttps://agentprime.io/advisories/CVE-2026-25040/https://agentprime.io/advisories/CVE-2026-25040/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Jan 2026 21:33:57 GMTCVECVE-2023-29010: BudiBase Server-Side Request Forgery vulnerabilityhttps://agentprime.io/advisories/CVE-2023-29010/https://agentprime.io/advisories/CVE-2023-29010/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Apr 2023 16:02:18 GMTCVE