Vulnerabilities in OpenCATS
14 resultsCVE-2026-27760CRITICALOpenCATS PHP Code Injection via installer AJAX endpointEPSS 33.0%CVE-2021-47936CRITICALOpenCATS 0.9.4 Remote Code Execution via Resume UploadEPSS 0.7%CVE-2026-54453HIGHOpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)EPSS 0.4%CVE-2026-54454CRITICALOpenCATS: Authenticated RCE in the Import moduleEPSS 0.4%CVE-2026-115513MEDIUMOpenCATS before 0.12.0 Stored XSS via MRU Navigation PanelEPSS 0.3%CVE-2026-112787MEDIUMOpenCATS before 0.10.0 Missing Authorization in Reports Module EEO ReportsEPSS 0.3%CVE-2026-112786MEDIUMOpenCATS before 0.10.0 Missing Authorization via Import Revert ActionEPSS 0.3%CVE-2026-112785MEDIUMOpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX EndpointsEPSS 0.3%CVE-2026-49489HIGHOpenCATS - SQL Injection in DataGrid sortDirection ParameterEPSS 0.3%CVE-2026-113349MEDIUMOpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEventEPSS 0.3%CVE-2026-112783MEDIUMOpenCATS before 0.10.0 Missing Authorization via Activity AJAX EndpointsEPSS 0.3%CVE-2026-49490HIGHOpenCATS - SQL Injection in DataGrid Filter Handling for Tags ColumnEPSS 0.2%CVE-2026-54455HIGHOpenCATS: Authenticated SQL injection in activity DataGrid date filtersEPSS 0.2%CVE-2026-112784MEDIUMOpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.phpEPSS 0.2%