Login Request a demo
OP
Product
Openedx
by Openedx · last CVE May 11, 2026
4
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 2High 0Medium 2Low 0
Severity
All severities4Critical2High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Openedx to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42858
9.9
0%
May 11
Open edX Platform: Server-Side Request Forgery (SSRF) in SAML Provider Data Sync Endpoint
Affected: before 2026-04-24
CVE-2024-43782
9.8
1%
Aug 23
openedx-translations's Atlas translations for Open edX missing validation
Affected: redwood1; redwood2
CVE-2026-35404
6.1
0%
Apr 6
Open edX Platform has an Open Redirect in Survey Views via Unvalidated redirect_url Parameter
Affected: through 2026-04-02
CVE-2026-42857
5.4
0%
May 11
Open edX Platform: Stored CSS Injection in Email Notifications via Incomplete HTML Sanitization
Affected: before 2026-04-24
Showing 4