Opencats vulnerabilities

Newest CVEs

• CVE-2026-54453

  OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)

  opencats · OpenCATS

  High7.2
• CVE-2026-54455

  OpenCATS: Authenticated SQL injection in activity DataGrid date filters

  opencats · OpenCATS

  High7.6
• CVE-2026-115513

  OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel

  opencats · OpenCATS

  Medium6.3
• CVE-2026-113349

  OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEvent

  opencats · OpenCATS

  Medium5.3
• CVE-2026-112787

  OpenCATS before 0.10.0 Missing Authorization in Reports Module EEO Reports

  opencats · OpenCATS

  Medium5.3
• CVE-2026-112786

  OpenCATS before 0.10.0 Missing Authorization via Import Revert Action

  opencats · OpenCATS

  Medium5.3
• CVE-2026-112785

  OpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX Endpoints

  opencats · OpenCATS

  Medium5.3
• CVE-2026-112784

  OpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.php

  opencats · OpenCATS

  Medium5.3
• CVE-2026-112783

  OpenCATS before 0.10.0 Missing Authorization via Activity AJAX Endpoints

  opencats · OpenCATS

  Medium5.3
• CVE-2026-54454

  OpenCATS: Authenticated RCE in the Import module

  opencats · OpenCATS

  Critical9.1