What’s Vulnerable › Products

datacycle-engine dataCycle-CORE vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your datacycle-engine dataCycle-CORE version is affected

Latest datacycle-engine dataCycle-CORE vulnerabilities

• CVE-2026-32825 — dataCycle No Brute-Force Protection On Web And API Login Endpoints (CVSS 7.3)
• CVE-2026-32824 — dataCycle User API Password Reset And Confirmation Flows Trust Attacker- Controlled Redirect Targets (CVSS 7.3)
• CVE-2026-32823 — dataCycle State-Changing GET Endpoints Enable CSRF (CVSS 4.3)
• CVE-2026-32821 — API Collection Impersonation Via user_email And Missing Object- Level Authorization (CVSS 8.1)
• CVE-2026-32820 — dataCycle Public Markdown Path Traversal Via /docs/*path (CVSS 7.5)
• CVE-2026-32819 — dataCycle User Directory Enumeration Via /users/search (CVSS 4.3)
• CVE-2026-32806 — dataCycle Authorization Bypass Via /remote_render (CVSS 7.5)
• CVE-2026-32822 — dataCycle Unauthenticated Reflected DOM XSS Via flash[...] On Public Pages (CVSS 6.1)
• CVE-2026-32807 — dataCycle Public DataLink Text File Download Ignores Validity And Authorization (CVSS 7.5)