Login Request a demo
OX
Product
Open Xdmod
by Buffalo · last CVE Jun 5, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 3High 1Medium 3Low 0
Severity
All severities7Critical3High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Open Xdmod to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45779
9.8
0%
Jun 5
Open XDMoD Vulnerable to Unauthenticated SQL Injection Leading to Full Database Compromise
Affected: before 10.0.3
CVE-2026-45777
9.8
0%
Jun 5
Open XDMoD Vulnerable to Unauthenticated Remote Code Execution (RCE) via OS Command Injection
Affected: 9.5.0 before 11.0.3
CVE-2018-16988
9.8
2%
May 2
An issue was discovered in Open XDMoD through 7.5.0
Affected: before 8.0.0
CVE-2018-16961
7.5
3%
May 2
An issue was discovered in Open XDMoD through 7.5.0
Affected: through 7.5.0
CVE-2018-16960
6.1
1%
May 2
An issue was discovered in Open XDMoD through 7.5.0
Affected: through 7.5.0
CVE-2026-45778
5.4
0%
Jun 5
Open XDMoD Vulnerable to Reflected Cross-Site Scripting (XSS) in Password Reset
Affected: before 11.0.3
CVE-2026-45776
4.3
0%
Jun 5
Open XDMoD has Broken Access Control via Client-Controlled Session Variable
Affected: before 11.0.3
Showing 7