opencve

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

opencve records in CISA KEV

No opencve vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-44475 CVE-2026-62282 · GHSA-ch3g-4xvr-674q

OpenCVE: Server-Side Request Forgery (SSRF) in notifications

MEDIUM 62

OpenCVE is a vulnerability intelligence platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00451 Published 2026-09-18 Fixed in 3.0.0 CWE-918

TI-2026-62509 CVE-2026-92764 · GHSA-chx7-hm9p-hcvg

OpenCVE 2.4.0 < 3.1.0 Organization API Ignores Token Scope

LOW 24

OpenCVE versions 2.4.0 before 3.1.0 fails to properly scope the organizations API endpoint to the token's organization, instead returning the token creator's memberships.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00367 Published 2026-09-16 Fixed in 3.1.0 CWE-863

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0