openequella

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

openequella records in CISA KEV

No openequella vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-63325 CVE-2026-94109 · GHSA-w599-5qgp-f3cf

openEQUELLA < 2026.1.0 Authenticated Stored SSTI via FreemarkerPortletRenderer

HIGH 72

openEQUELLA before 2026.1.0 contains an authenticated stored server-side template injection vulnerability in FreemarkerPortletRenderer.renderHtml() that allows any authenticated non-guest user to achieve remote code exec…

CVSS 4.0HIGH 8.6 Network Low privileges User interaction EPSS 0.00778 Published 2026-09-20 Fixed in 2026.1.0 CWE-1336

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0