Login Request a demo
OP
Product
openpanel
by Openpanel-dev · last CVE Oct 26, 2026
32
CVEs
0
On KEV
9.9
Max CVSS
15
New 30D
Vulnerabilities32In the news0Timeline
Severity mix
Critical 1High 12Medium 18Low 1
Severity
All severities32Critical1High12Medium18Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add openpanel to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-116811
New
8.8
0%
Oct 26
OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template
Affected: before 3.0.0
CVE-2026-85610
8.8
1%
Sep 4
OpenPanel before 2.3.0 Remote Code Execution via chart formulas
Affected: before 2.3.0
CVE-2026-85614
8.6
0%
Sep 4
OpenPanel API before 2.3.0 Unauthenticated SSRF via site-checker
Affected: before 2.3.0
CVE-2026-116819
New
8.5
0%
Oct 26
OpenPanel before 3.0.0 Credential Disclosure via notification.rules Query
Affected: before 3.0.0
CVE-2026-88890
8.5
0%
Sep 10
OpenPanel through 2.3.0 SQL Injection via unvalidated profile filter column identifier
Affected: through 2.3.0
CVE-2026-88891
8.3
0%
Sep 10
OpenPanel through 2.3.0 Read-Only Access Level Enforcement Bypass via Mutations
Affected: through 2.3.0
CVE-2026-116818
New
8.2
0%
Oct 26
OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket
Affected: before 3.0.0
CVE-2026-85613
8.2
0%
Sep 4
OpenPanel before 2.3.0 Unauthenticated XSS via SVG Favicon Proxy
Affected: before 2.3.0
CVE-2026-88893
7.5
0%
Sep 10
OpenPanel through 2.3.0 Unauthenticated Share Lookup Information Disclosure
Affected: through 2.3.0
CVE-2026-85612
7.5
0%
Sep 4
OpenPanel before 2.3.0 SSRF via favicon and og endpoints
Affected: before 2.3.0
CVE-2026-85609
7.5
0%
Sep 4
Openpanel before 2.3.0 SSRF via Site Checker Endpoint
Affected: before 2.3.0
CVE-2026-116808
New
7.2
0%
Oct 26
OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.values
Affected: before 3.0.0
Showing 12