clickvisual vulnerabilities

Products

• clickvisual/clickvisual 1

Latest clickvisual CVEs

Newest publication first

1. CVE-2026-111670 ClickVisual through 1.1.2 Missing Authorization in apiv2 Report Module

   Published 2026-10-16

   Medium·CVSS 5.3

   ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports handlers that allows authenticated low-privileged users to access ClickHouse instances they were not granted. Attackers can iterate the instance-id parameter in ReportSourceDatabases,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.