Skip to content
OpenAdvisories

Vendor

openbullet

5 known vulnerabilities.

Products

openbullet2 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-25555 Public exploit

    OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header

    OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attackers to gain admin access by supplying an empty X-Api-Key header value. Attackers can exploit the middl…

    openbullet openbullet2
  • High 8.8
    CVE-2026-25856 Public exploit

    OpenBullet2 0.3.2 Authenticated RCE via Job Configuration Interface

    OpenBullet2 through version 0.3.2 contains an authenticated remote code execution vulnerability that allows authenticated users to execute arbitrary C# code on the server host by creating or modifying job configurations. Attackers can leverage the plain C# ex…

    openbullet openbullet2
  • Medium 6.5
    CVE-2026-39908 Public exploit

    OpenBullet2 0.3.2 NTLMv2 Hash Disclosure via UNC Path Proxy Source

    OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers to capture the NTLMv2 hash of the process user by configuring a job proxy source with a UNC path pointing to an attacker-controlled server…

    openbullet openbullet2