OOpenAEV-Platform

Products

Exploited and recent CVEs

• CVE-2026-71854 High 8.2 OpenAEV has unauthenticated access and missing object-level authorization on player lessons API 0.2%
• CVE-2026-24468 Medium 5.3 OpenAEV Vulnerable to Username/Email Enumeration Through Differential HTTP Responses in Password Reset API 0.3%
• CVE-2026-24467 Critical 9.1 OpenAEV's Improper Password Reset Token Management Leads to Unauthenticated Account Takeover and Platform Compromise 0.9%