Vulnerabilities

TI-2026-79418 CVE-2026-114611

OCO-Server MDM endpoint accepts self-signed enrollment signatures

HIGH 80

OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00324 Published 2026-10-22 Fixed in 1.2.3 CWE-295

TI-2026-79292 CVE-2026-114515

LOW 28

OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00267 Published 2026-10-22 Fixed in 1.2.3 CWE-862

TI-2026-79274 CVE-2026-61791

LOW 32

OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00287 Published 2026-10-22 Fixed in 1.2.1 CWE-83