OutSystems Lifetime vulnerabilities

Latest OutSystems Lifetime CVEs

Newest publication first

1. CVE-2026-40127 Authorization Bypass Through User-Controlled Key in OutSystems Lifetime

   Published 2026-05-25

   Medium·CVSS 5.3 EPSS 0.50%

   OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue w...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.