OP
Product
OpenCATS
39
CVEs
0
On KEV
9.8
Max CVSS
11
New 30D
Severity mix
Critical 6High 7Medium 25Low 1
Watch
Add OpenCATS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-115513 New | 8.7 | Oct 22 | OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel Affected: 0.10.0 before 0.12.0 |
| CVE-2026-49489 | 8.5 | May 31 | OpenCATS - SQL Injection in DataGrid sortDirection Parameter Affected: through 0.9.7.4 |
| CVE-2026-49490 | 8.1 | May 31 | OpenCATS - SQL Injection in DataGrid Filter Handling for Tags Column Affected: through 0.9.1a |
| CVE-2026-27760 | 8.1 | Apr 28 | OpenCATS PHP Code Injection via installer AJAX endpoint Affected: through 0.9.7.4 |
| CVE-2026-54455 New | 7.6 | Oct 28 | OpenCATS: Authenticated SQL injection in activity DataGrid date filters Affected: < 0.10.0 |
| CVE-2019-13358 | 7.5 | Jul 5 | lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system Affected: before 0.9.4-3 |
| CVE-2026-54453 New | 7.2 | Oct 28 | OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional) Affected: < 0.10.0 |
Showing 7