OOpenListTeam

Products

Exploited and recent CVEs

• CVE-2026-102663 Medium 4.3 OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search 0.3%
• CVE-2026-75602 Medium 6.5 OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool 0.7%
• CVE-2026-69160 Medium 6.5 OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API 0.4%
• CVE-2026-73509 High 7.6 OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal 0.5%
• CVE-2026-25060 High 8.1 OpenList Insecure TLS Default Configuration 0.2%
• CVE-2026-25059 High 8.8 OpenList affected by Path Traversal in file copy and remove handlers 0.7%
• CVE-2025-50183 Medium 6.5 OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer 0.3%