Liquid-co

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Liquid-co records in CISA KEV

No Liquid-co vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-65684 CVE-2026-103398 · GHSA-x83p-5c62-2g52

OpenSave through 2.4.0 Arbitrary File Read and Write via Peer-Controlled Save Path

LOW 39

OpenSave through 2.4.0 fails to properly validate save paths supplied by paired peers in the manifest request handler.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00267 Published 2026-09-30 No fix listed CWE-73

TI-2026-65683 CVE-2026-103397 · GHSA-m7pc-whc6-fxc7

OpenSave before 2.4.0-beta.1 Authentication Bypass via Spoofed Relay Sender

LOW 27

OpenSave before 2.4.0-beta.1 fails to validate sender identity in WAN relay requests, allowing unpaired room members to impersonate paired devices by spoofing the RelayMessage From field.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00219 Published 2026-09-30 Fixed in 2.4.0-beta.1 CWE-290

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0