Oopen-zaak

Products

Exploited and recent CVEs

• CVE-2026-55836 Medium 6.8 Open Zaak: Path traversal / arbitrary server-file read via Documenten API document import (bestandspad) 0.4%
• CVE-2026-54657 Medium 6.5 Open Zaak: /zaken/_zoek and /enkelvoudiginformatieobjecten/_zoek endpoints do not filter result lists based on authorizations linked to token 0.3%
• CVE-2020-26251 Medium 4.7 CORS configuration is possibly vulnerable 0.5%