OpenIMSDK

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

OpenIMSDK records in CISA KEV

No OpenIMSDK vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-48520 CVE-2026-69115 · GHSA-pp5r-q37v-qxvp

OpenIM Server v3.8.3 Missing Authorization on User and Group Enumeration Endpoints

MEDIUM 64

OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated user to access admin-only management API endpoints by submitting POST requests with a regular user bearer token to /user/g…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00303 Published 2026-08-11 No fix listed CWE-862

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0