OOpenCATS

Products

Exploited and recent CVEs

• CVE-2026-54453 High 7.2 OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional) 0.4%
• CVE-2026-54455 High 7.6 OpenCATS: Authenticated SQL injection in activity DataGrid date filters 0.2%
• CVE-2026-115513 High 8.7 OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel 0.3%
• CVE-2026-113349 Medium 4.3 OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEvent 0.3%
• CVE-2026-112787 Medium 4.3 OpenCATS before 0.10.0 Missing Authorization in Reports Module EEO Reports 0.3%
• CVE-2026-112786 Medium 5.4 OpenCATS before 0.10.0 Missing Authorization via Import Revert Action 0.3%
• CVE-2026-112785 Medium 4.3 OpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX Endpoints 0.3%
• CVE-2026-112784 Medium 4.3 OpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.php 0.2%
• CVE-2026-112783 Medium 4.3 OpenCATS before 0.10.0 Missing Authorization via Activity AJAX Endpoints 0.3%
• CVE-2026-54454 Critical 9.1 OpenCATS: Authenticated RCE in the Import module 0.4%
• CVE-2026-49490 High 8.1 OpenCATS - SQL Injection in DataGrid Filter Handling for Tags Column 0.2%
• CVE-2026-49489 High 8.5 OpenCATS - SQL Injection in DataGrid sortDirection Parameter 0.3%
• CVE-2021-47936 Critical 9.8 OpenCATS 0.9.4 Remote Code Execution via Resume Upload 0.7%
• CVE-2026-27760 High 8.1 OpenCATS PHP Code Injection via installer AJAX endpoint 33.0%