Skip to content

Vendor

opencloud-eu vulnerabilities

3 published CVES affecting opencloud-eu, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
2
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of opencloud-eu alerts

Products

Latest opencloud-eu CVEs

Newest publication first

  1. CVE-2026-57500 REVA: Access to internal metadata

    Published
    MediumCVSS 6.3

    REVA is an interoperability platform. Prior to versions 2.40.5 and 2.46.4, Reva exposes internal metadata folders in the spaces of an authenticated user. This can lead to unwanted ways of interaction with the data. This issue has been patched in versions 2.40.5 and 2.46.4.

  2. CVE-2026-23989 REVA Public Link Exploit

    Published
    HighCVSS 8.1

    REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass the scope verification of a public link. By exploiting this via the the "archiver" service this can...

  3. GHSA-vf5j-r2hw-2hrw OpenCloud Affected by Public Link Exploit

    Published
    HighCVSS 8.2

    Impact A security issue was discovered in Reva that enables a malicious user to bypass the scope validation of a public link. That allows it to access resources outside the scope of a public link. OpenCloud uses Reva as one of its core components and thus it is affected. Patches...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.