Known Vulnerabilities for 365 Apps by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "365 Apps" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-101052 json | A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the f... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-100844 json | MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner).... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-100686 json | Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint,... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-100684 json | Budibase versions 3.41.0 before 3.45.0 contain an authentication bypass in the OIDC/SSO login path of @budibase/server. In ss... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100623 json | Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase PostgREST. The table's row-l... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-100620 json | Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an over-permissioned service account in its Android onboardi... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100618 json | Capgo (capgo.app) is affected by an authorization flaw in the app icon update path. The PUT /app/:id endpoint accepts a user-... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-100616 json | capgo.app is an over-the-air update platform for Capacitor apps. In all versions prior to a fix, the row-level security UPDAT... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-100613 json | capgo.app is an over-the-air (OTA) update platform for Capacitor apps. In all versions up to and including the current releas... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-100611 json | Capgo (capgo.app backend, versions ≤ 12.261.0) improperly restricts which roles the apikey_manager organization role may bi... | Not Provided | 2026-09-26 | 2026-09-30 |