Vulnerabilities

TI-2026-75348 CVE-2026-55836

Path traversal in Open Zaak lets clients read server files

MEDIUM 63

Open Zaak is an open-source data and services layer for Dutch case-oriented working.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00391 Published 2026-10-16 Fixed in 1.27.2, 1.28.2 CWE-200

TI-2026-75346 CVE-2026-54657

LOW 28

Open Zaak is an open-source data and services layer for Dutch case-oriented working.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00263 Published 2026-10-16 Fixed in 1.27.2, 1.28.2 CWE-285

TI-2020-16072 CVE-2020-26251

LOW 22

Open Zaak is a modern, open-source data- and services-layer to enable zaakgericht werken, a Dutch approach to case management.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00453 Published 2020-12-18 Fixed in 1.3.3 CWE-346