Skip to content
OpenAdvisories

Vendor

OpenAEV-Platform

3 known vulnerabilities.

Products

openaev 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-71854

    OpenAEV has unauthenticated access and missing object-level authorization on player lessons API

    OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default installation, the `/api/player/**` lessons endpoints can be called without authent…

    OpenAEV-Platform openaev