opf Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by opf
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Web-based project management software vulnerability in OpenProject by OPF
CVE-2026-46386OpfOpenproject9.9CRITICALRemote Code Execution Vulnerability in OpenProject by OpenProject Foundation
CVE-2026-52780OpfOpenproject9.6CRITICALDisclosure of Historical Field Values in OpenProject by OPF
CVE-2026-47193OpfOpenproject7.5HIGHImproper Access Control in OpenProject Affects Project Management Systems
CVE-2026-52782OpfOpenproject9.9CRITICALOpenProject Vulnerability Exposing OAuth Access Tokens in Plaintext
CVE-2026-52783OpfOpenproject8.2HIGHCSRF Vulnerability in OpenProject Software from OpenProject Foundation
CVE-2026-52784OpfOpenproject8.8HIGHSQL Injection Vulnerability in OpenProject Web-Based Project Management Software
CVE-2026-52785OpfOpenproject9.9CRITICAL2FA Bypass Vulnerability in OpenProject by OpenProject Foundation
CVE-2026-33667OpfOpenproject7.4HIGHSQL Injection Vulnerability in OpenProject by OpenProject Foundation
CVE-2026-34717OpfOpenproject9.9CRITICALCross-Site Scripting Vulnerability in OpenProject Project Management Software
CVE-2026-32703OpfOpenproject9.1CRITICALSQL Injection Vulnerability in OpenProject by OpenProject
CVE-2026-32698OpfOpenproject9.1CRITICALArbitrary File Write Vulnerability in OpenProject by OPF
CVE-2026-25763OpfOpenproject9.4CRITICALOpenProject Web-Based Project Management Software Vulnerability
CVE-2026-24772OpfOpenproject8.9HIGHArbitrary File Write Vulnerability in OpenProject by OpenProject Foundation
CVE-2026-24685OpfOpenproject9.4CRITICALStored Cross-Site Scripting Vulnerability in OpenProject Project Management Software
CVE-2026-23625OpfOpenproject8.7HIGHCommand Execution Vulnerability in OpenProject by OpenProject Community
CVE-2026-22601OpfOpenproject8.6HIGHLocal File Read Vulnerability in OpenProject by OpenProject
CVE-2026-22600OpfOpenproject9.1CRITICALStored XSS in Cost Report feature via {icon} substitution
CVE-2024-35224OpfOpenproject7.6HIGHOpenProject vulnerable to project identifier information leakage through robots.txt
CVE-2023-33960opfopenproject7.5HIGHSQL injection in OpenProject
CVE-2021-43830OpfOpenproject7.4HIGH