Skip to content

Vendor

opencve vulnerabilities

2 published CVES affecting opencve, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of opencve alerts

Products

Latest opencve CVEs

Newest publication first

  1. CVE-2026-62282 OpenCVE: Server-Side Request Forgery (SSRF) in notifications

    Published
    MediumCVSS 6.5 EPSS 0.45%

    OpenCVE is a vulnerability intelligence platform. Prior to 3.0.0, OpenCVE notification testing for Webhook and Slack integrations does not sufficiently validate user-supplied HTTP or HTTPS destinations. An authenticated user with permission to configure notification channels can...

  2. CVE-2026-92764 OpenCVE 2.4.0 < 3.1.0 Organization API Ignores Token Scope

    Published
    MediumCVSS 5.3 EPSS 0.37%

    OpenCVE versions 2.4.0 before 3.1.0 fails to properly scope the organizations API endpoint to the token's organization, instead returning the token creator's memberships. Attackers with organization-scoped tokens can list and retrieve every organization their creator belongs to,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.