roostorg

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

roostorg records in CISA KEV

No roostorg vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-83442 CVE-2026-63399

Unauthenticated organization creation in Coop GraphQL API

HIGH 70

Coop is an open source review and moderation tool from ROOST.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00285 Published 2026-10-30 Fixed in 1.0.0 CWE-306

TI-2026-83441 CVE-2026-63396

Coop exposes organization and user data through unauthenticated GraphQL query

MEDIUM 43

Coop is an open source review and moderation tool from ROOST.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0031 Published 2026-10-30 Fixed in 1.0.0 CWE-306

TI-2026-83445 CVE-2026-63398

Coop SAML login flaw allows cross-tenant account takeover

LOW 34

Coop is an open source review and moderation tool from ROOST.

CVSS 4.0HIGH 7.4 Network High privileges No interaction EPSS 0.00184 Published 2026-10-30 Fixed in 1.0.2 CWE-287

TI-2026-83443 CVE-2026-63401

Coop lets users alter other organizations' review queue access

LOW 24

Coop is an open source review and moderation tool from ROOST.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00269 Published 2026-10-30 Fixed in 1.0.2 CWE-639

TI-2026-83446 CVE-2026-63400

Coop sessions stay valid after password reset

LOW 12

Coop is an open source review and moderation tool from ROOST.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00269 Published 2026-10-30 Fixed in 1.0.2 CWE-613

Open these records in search →