Skip to content
Rroostorg
Products
| Product | CVEs | Exploited | Latest |
| coop | 5 | – | Oct 30, 2026 |
Exploited and recent CVEs
-
CVE-2026-63400
Low 2.3
Coop sessions are not invalidated on password reset
0.3%
-
CVE-2026-63398
High 7.4
Coop has SAML cross-tenant authentication bypass
0.2%
-
CVE-2026-63401
Medium 5.3
Coop has cross-org IDOR in addAccessibleQueuesForUser / removeAccessibleQueuesForUser
0.3%
-
CVE-2026-63396
High 8.7
Coop has a data leak via unauthenticated GraphQL Query.allOrgs
0.3%
-
CVE-2026-63399
Medium 6.9
Coop: Unauthenticated org provisioning via GraphQL Mutation.createOrg
0.3%