CyberSecBulletin

Datacycle-engine vulnerabilities

We track 6 vulnerabilities in Datacycle-engine products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on July 20, 2026.

6vulnerabilities
0critical
6high
0exploited
7.5average CVSS score

Latest Datacycle-engine vulnerabilities

  • 7.3 High severity

    dataCycle-CORE: Improper Restriction of Excessive Authentication Attempts

    CVE-2026-32825Datacycle-engine

    dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, the application accepts unlimite

  • 7.3 High severity

    dataCycle-CORE: URL Redirection to Untrusted Site

    CVE-2026-32824Datacycle-engine

    dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, a low-privileged authenticated A

  • 8.1 High severity

    dataCycle-CORE: Improper Authorization

    CVE-2026-32821Datacycle-engine

    dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any authenticated API user who h

  • 7.5 High severity

    dataCycle-CORE: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-32820Datacycle-engine

    dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, the documentation and static mar

  • 7.5 High severity

    dataCycle-CORE: Improper Authorization

    CVE-2026-32806Datacycle-engine

    dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any authenticated user can reque

  • 7.5 High severity

    dataCycle-CORE: Improper Authorization

    CVE-2026-32807Datacycle-engine

    dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can