Skip to content
OpenAdvisories

Vendor

rmyndharis

2 known vulnerabilities.

Products

OpenWA 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-91160

    OpenWA: A read-only API key can receive a session pairing QR over the WebSocket event stream

    OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the /events WebSocket gateway delivers the session.qr event to a VIEWER API key that subscribes by event name or through either wildcard subscription form, even though GET /api/…

    rmyndharis OpenWA