clickvisual vulnerabilities

CVEs whose affected-version data names the clickvisual package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111670Medium· 4.3

yesterday

ClickVisual through 1.1.2 Missing Authorization in apiv2 Report Module

ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports handlers that allows authenticated low-privileged users to access ClickHouse instances they were not granted. Attackers can iterate the insta…

▾ Sunlitclickvisual · clickvisualvia CVEORG