Read the docs

OpenNHP

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

OpenNHP records in CISA KEV

No OpenNHP vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-62533 CVE-2026-92792 · GHSA-wj5x-jrhc-mqcx

OpenNHP through 1.0.2 Authentication Bypass via Fallback Verifier

Priority HIGH 77

OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a test_purpose key, causing the FallbackVerifier to execute unconditionally.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00604 Published 2026-09-16 No fix listed CWE-287
Open these records in search →