nl-portal
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| nl-portal-backend-libraries | 3 | – | Oct 15, 2026 |
| nl.nl-portal:app | 1 | – | Sep 11, 2026 |
| nl.nl-portal:besluiten | 1 | – | Sep 11, 2026 |
| nl.nl-portal:documenten-api | 1 | – | Sep 11, 2026 |
Exploited and recent CVEs
- CVE-2026-55414 NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF) 0.4%
- CVE-2026-54683 NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user until 3.0.3 (incomplete fix of CVE-2026-49463) 0.4%
- CVE-2026-49464 NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak 0.4%
- CVE-2026-49462 nl.nl-portal:app has GraphiQL UI and GraphQL schema introspection enabled by default 0.4%
- CVE-2026-49463 NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries 0.3%
- CVE-2026-49463 NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries 0.3%