CVE Tools
Track your stack

Budibase

80 CVEs tracked since 2026. Since Apr 2026, none of them reached CISA KEV.

Budibase CVEs per month

Apr 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Budibase CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0470
2026-05210
2026-0670
2026-077 or fewer
2026-08360
2026-0990
2026-106 or fewer

Products

The products that kept showing up in Budibase's monthly top three, with their CVEs summed over those months.

  1. Budibase564 months
  2. Server242 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Budibase.

  1. CVE-2026-103757Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation7.7
  2. CVE-2026-100688Budibase server before 3.45.0 Cross-Tenant Information Disclosure6.5
  3. CVE-2026-100687Budibase Server before 3.45.0 Credential Exposure via External Table Broadcast5.5
  4. CVE-2026-100686Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/apps8.1
  5. CVE-2026-100684Budibase Server 3.41.0 before 3.45.0 Authentication Bypass via OIDC8.1
  6. CVE-2026-100685Budibase before 3.45.0 Information Disclosure via Chat Links7.7
  7. CVE-2026-100683Budibase before 3.45.0 SQL Injection via column-rename DDL8.0
  8. CVE-2026-100682Budibase Server before 3.45.0 Arbitrary File Write via ZIP Symlink8.8
  9. CVE-2026-100681Budibase before 3.45.0 SSRF and OAuth Token Exfiltration via Teams Webhook5.4
  10. CVE-2026-100680Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Import8.1
  11. CVE-2026-82246Budibase Server before 3.41.3 SSRF via Query Import7.1
  12. CVE-2026-82245Budibase before 3.41.3 Missing Authorization License Management8.1
  13. CVE-2026-82244Budibase before 3.41.3 Remote Code Execution via Plugin eval()9.1
  14. CVE-2026-82242Budibase before 3.41.3 Cross-Application Resource Injection via Missing Authorization7.7
  15. CVE-2026-82243Budibase Server before 3.41.3 SSRF with Credential Leakage7.6

The record

Peak rank
#34 in Aug 2026
Busiest month shown
Aug 2026, 36 CVEs
Months with a KEV entry
0 since Apr 2026
Monthly snapshots
5 since 2026
Budibase's full record, month by month