Skip to content
OpenAdvisories

Vendor

openbullet

5 known vulnerabilities.

Products

openbullet2 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-25559

    OpenBullet2 0.3.2 Path Traversal via Wordlist Endpoint

    OpenBullet2 through version 0.3.2 contains a path traversal vulnerability in the wordlist endpoint that allows authenticated attackers to perform arbitrary file read, write, and delete operations by supplying unsanitized absolute paths to the upload handler a…

    openbullet openbullet2
  • High 8.8
    CVE-2026-25856 Public exploit

    OpenBullet2 0.3.2 Authenticated RCE via Job Configuration Interface

    OpenBullet2 through version 0.3.2 contains an authenticated remote code execution vulnerability that allows authenticated users to execute arbitrary C# code on the server host by creating or modifying job configurations. Attackers can leverage the plain C# ex…

    openbullet openbullet2
  • High 8.8
    CVE-2026-25855

    OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Upload

    OpenBullet2 through version 0.3.2 contains a remote code execution vulnerability that allows authenticated users to execute arbitrary commands by uploading script files (.bat.ps1.sh) through the FileProxySource proxy loading feature. Attackers can upload mali…

    openbullet openbullet2