Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: HKUDS OpenHarness dd1d235450dd987b20bff01b7bfb02fe8620a0af Clear all filters
TI-2026-29252 CVE-2026-40502 · GHSA-9w66-jgph-vx6j

OpenHarness Remote Administrative Command Injection via Gateway Handler

Priority MEDIUM 43

OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote gateway users with chat access to invoke sensitive administrative commands by exploiting insufficient distinction between…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01687 Published 2026-04-16 Fixed CWE-862
TI-2026-29253 CVE-2026-40503 · GHSA-fwhx-4vqr-m9gj

OpenHarness Path Traversal Information Disclosure via /memory show

Priority LOW 31

OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows remote gateway users with chat access to read arbitrary files by supplying path traversal sequences to the /memory show slash comman…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00414 Published 2026-04-16 Fixed CWE-22