travisun vulnerabilities

Products

• opptrix 3

Latest travisun CVEs

Newest publication first

1. CVE-2026-115971 Travisun Opptrix preParsing handler webhook Buffer.concat denial of service

   Published 2026-10-24

   Medium·CVSS 6.9 EPSS 0.37%

   A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the file /api/channels/webhook/ of the component preParsing handler. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been m...

2. CVE-2026-115970 Travisun Opptrix Import Endpoint import code injection

   Published 2026-10-24

   Medium·CVSS 6.9 EPSS 0.30%

   A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the component Import Endpoint. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclos...

3. CVE-2026-115969 Travisun Opptrix Schedule API setup command injection

   Published 2026-10-24

   Medium·CVSS 6.9 EPSS 1.3%

   A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the component Schedule API. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.