NL
Vendor
nl-portal
6
CVEs
0
On KEV
2
New 30D
Products
NL8.1
nl-portal-backend-libraries
nl-portal
3 CVEs0 on KEV2 new
NL5.3
nl.nl-portal:app
nl-portal
1 CVEs0 on KEV0 new
NL6.5
nl.nl-portal:besluiten
nl-portal
1 CVEs0 on KEV0 new
NL6.5
nl.nl-portal:documenten-api
nl-portal
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-55414 | NL nl-portal-backend-libraries nl-portal | 5.3 | Oct 15 | NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF) |
| CVE-2026-54683 | NL nl-portal-backend-libraries nl-portal | 6.5 | Oct 15 | NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user until 3.0.3 (incomplete fix of CVE-2026-49463) |
| CVE-2026-49464 | NL nl-portal-backend-libraries nl-portal | 8.1 | Sep 11 | NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak |
| CVE-2026-49462 | NL nl.nl-portal:app nl-portal | 5.3 | Sep 11 | nl.nl-portal:app has GraphiQL UI and GraphQL schema introspection enabled by default |
| CVE-2026-49463 | NL nl.nl-portal:besluiten nl-portal | 6.5 | Sep 11 | NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries |