openwisp vulnerabilities

Products

• openwisp-controller 1

Latest openwisp CVEs

Newest publication first

1. CVE-2026-116677 OpenWISP Controller CA CRL REST API does not scope requests to managed organizations

   Published 2026-10-27

   Medium·CVSS 5.3

   OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI management. From 1.0.0 until 1.3.2, the GET /api/v1/controller/ca/<integer-id>/crl endpoint allows an authenticated organization manager with CA view permission to re...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.