TI-2026-39793 CVE-2026-55089
Etherpad: JWT `admin` claim presence-only check lets non-admin OAuth users invoke every Etherpad HTTP API endpoint
Priority HIGH 76
Etherpad is a real-time collaborative editor.
ether
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
ether records in CISA KEVNo ether vulnerabilities are listed in CISA KEV.
Records
8 records
TI-2026-39789 CVE-2026-55085
Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-lite
Priority HIGH 76
Etherpad is a real-time collaborative editor.
TI-2026-39790 CVE-2026-55086 · GHSA-2jwf-f4xq-f24h
Link following in etherpad
Priority MEDIUM 53
Etherpad is a real-time collaborative editor.
TI-2009-04910 CVE-2009-10007 · GHSA-pfqm-wq4x-p42c
Session fixation in ether Catalyst::Plugin::Authentication
Priority MEDIUM 47
Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks.
TI-2025-27313 CVE-2025-40920 · GHSA-5xmm-95mj-42h8
Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl use insecurely generated nonces
Priority MEDIUM 44
Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library.
TI-2026-39792 CVE-2026-55088 · GHSA-vqfp-p66c-xrp9
Information disclosure in etherpad
Priority LOW 32
Etherpad is a real-time collaborative editor.
TI-2026-39794 CVE-2026-55090 · GHSA-2jp7-wwpg-3p9w
Etherpad: Stored XSS in HTML export via unescaped attribute-pool values
Priority LOW 31
Etherpad is a real-time collaborative editor.
TI-2026-39791 CVE-2026-55087 · GHSA-fjgc-3mj7-8rg8
Open redirect in etherpad
Priority LOW 28
Etherpad is a real-time collaborative editor.