Skip to content
OpenAdvisories

Vendor

canove

2 known vulnerabilities.

Products

whaticket-community 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-111708

    WhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup

    WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to admin, gaining user ma…

    canove whaticket-community