Skip to content
OpenAdvisories

Vendor

Arelle

1 known vulnerabilities.

Products

Arelle 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-42796 Public exploit Scanner template

    Arelle < 2.39.10 Unauthenticated RCE via /rest/configure

    Arelle before 2.39.10 contains an unauthenticated remote code execution vulnerability in the /rest/configure REST endpoint that accepts a plugins query parameter and forwards it to the plugin manager without authentication or authorization. Attackers can supp…

    Arelle Arelle