CVE Tools
Track your stack

Budibase

71 CVEs tracked since 2026. Since Apr 2026, none of them reached CISA KEV.

Budibase CVEs per month

Apr 2026 to Aug 2026. Point at a month, or focus the strip and use the arrow keys.
Budibase CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0470
2026-05210
2026-0670
2026-07null or fewer
2026-08360

Products

The products that kept showing up in Budibase's monthly top three, with their CVEs summed over those months.

  1. Budibase564 months
  2. Server151 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Budibase.

  1. CVE-2026-100688Budibase server before 3.45.0 Cross-Tenant Information Disclosure6.5
  2. CVE-2026-100687Budibase Server before 3.45.0 Credential Exposure via External Table Broadcast5.5
  3. CVE-2026-100686Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/apps8.1
  4. CVE-2026-100684Budibase Server 3.41.0 before 3.45.0 Authentication Bypass via OIDC8.1
  5. CVE-2026-100685Budibase before 3.45.0 Information Disclosure via Chat Links7.7
  6. CVE-2026-100683Budibase before 3.45.0 SQL Injection via column-rename DDL8.0
  7. CVE-2026-100681Budibase before 3.45.0 SSRF and OAuth Token Exfiltration via Teams Webhook5.4
  8. CVE-2026-100682Budibase Server before 3.45.0 Arbitrary File Write via ZIP Symlink8.8
  9. CVE-2026-100680Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Import8.1
  10. CVE-2026-82245Budibase before 3.41.3 Missing Authorization License Management8.1
  11. CVE-2026-82246Budibase Server before 3.41.3 SSRF via Query Import7.1
  12. CVE-2026-82244Budibase before 3.41.3 Remote Code Execution via Plugin eval()9.1
  13. CVE-2026-82243Budibase Server before 3.41.3 SSRF with Credential Leakage7.6
  14. CVE-2026-82242Budibase before 3.41.3 Cross-Application Resource Injection via Missing Authorization7.7
  15. CVE-2026-82241Budibase backend-core SSRF via incomplete default blacklist7.1

The record

Peak rank
#34 in Aug 2026
Busiest month shown
Aug 2026, 36 CVEs
Months with a KEV entry
0 since Apr 2026
Monthly snapshots
4 since 2026
Budibase's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store