Skip to content
OpenAdvisories

Vendor

OpenAEV-Platform

3 known vulnerabilities.

Products

openaev 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-24468

    OpenAEV Vulnerable to Username/Email Enumeration Through Differential HTTP Responses in Password Reset API

    OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Starting in version 1.11.0 and prior to version 2.0.13, the /api/reset endpoint behaves differently depending on whether the…

    OpenAEV-Platform openaev