Product · opencloud-eu

reva

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.2

CVE-2026-23989 Public exploit

REVA Public Link Exploit

REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass the scope verification of a public link. By exploiting this via the the "archiv…

opencloud-eu reva github.com/opencloud-eu/reva github.com/opencloud-eu/reva/v2 Go

Feb 6, 2026