Skip to content
OpenAdvisories

Vendor

openequella

1 known vulnerabilities.

Products

openEQUELLA 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2026-94109

    openEQUELLA < 2026.1.0 Authenticated Stored SSTI via FreemarkerPortletRenderer

    openEQUELLA before 2026.1.0 contains an authenticated stored server-side template injection vulnerability in FreemarkerPortletRenderer.renderHtml() that allows any authenticated non-guest user to achieve remote code execution by storing a malicious FreeMarker…

    openequella openEQUELLA