OOpenSift

Products

Exploited and recent CVEs

• CVE-2026-28677 High 8.2 OpenSift: Insufficient URL destination restrictions in ingest flow could enable SSRF-style internal access 0.3%
• CVE-2026-28676 High 8.8 OpenSift: Insufficient path containment checks in storage helpers could allow path traversal-style file operations 0.5%
• CVE-2026-28675 Medium 5.3 OpenSift: Sensitive implementation details exposed via raw exception messages and token-returning endpoints 0.3%
• CVE-2026-27189 Medium 6.6 OpenSift: Race-prone local persistence could cause state corruption/loss 0.1%
• CVE-2026-27170 High 7.1 OpenSift: SSRF risk in URL ingestion endpoint 0.2%
• CVE-2026-27169 High 8.9 OpenSift: Persistent XSS Chat Tool Rendering 0.4%