Roskus Prospero Flow CRM

2 known vulnerabilities in Roskus Prospero Flow CRM, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-82911 CVSS 5.1 medium Cross-Site Request Forgery (CSRF) in the OrderConfirmController at GET /order/confirm/{order_number} in Roskus Prospero Flow CRM before…
CVE-2026-81931 CVSS 4.8 medium Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an…