Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Bohdan Triapitsyn Clear all filters
TI-2026-38937 CVE-2026-53977 · GHSA-hw79-7vhm-4hc6

OpenChamber 1.11.7 Unauthenticated DoS via /api/system/shutdown

Priority MEDIUM 46

OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint, which is reg…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00967 Published 2026-08-06 No fix listed CWE-306
TI-2026-38936 CVE-2026-53976 · GHSA-9wgq-4cmq-jhvv

OpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace Parameter

Priority MEDIUM 53

OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to read arbitrary files by supplying the a…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02612 Published 2026-08-06 No fix listed CWE-22
TI-2026-38935 CVE-2026-53975 · GHSA-xj9x-9j3p-fff9

OpenChamber 1.11.7 Unauthenticated RCE via /api/fs/exec

Priority MEDIUM 51

OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by sending crafted POST requests to the /api/fs/exec endpoint, which pas…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01676 Published 2026-08-06 No fix listed CWE-78