Skip to content
OpenAdvisories

Vendor

OpenCATS

14 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-27760 Public exploit EPSS 33%

    OpenCATS PHP Code Injection via installer AJAX endpoint

    OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the installer AJAX endpoint that allows unauthenticated attackers to execute arbitrary code by injecting PHP statements into the databaseConnectivity action parameter. Attackers c…