OP
Product
openEQUELLA
by Apereo Foundation · last CVE Oct 29, 2026
7
CVEs
0
On KEV
9.4
Max CVSS
6
New 30D
Severity mix
Critical 1High 2Medium 4Low 0
Watch

Add openEQUELLA to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-67615
8.8
1%
Sep 22
openEQUELLA < 2026.1.0 Authenticated RCE via Java Deserialization in HTTP Invoker
Affected: before 2026.1.0
CVE-2026-66090
New
7.1–Oct 29
XML External Entity (XXE) Injection in Metadata Field Allows Arbitrary File Read
Affected: before 2026.1
Showing 2