Login Request a demo
OP
Product
openEQUELLA
by Apereo Foundation · last CVE Oct 29, 2026
7
CVEs
0
On KEV
9.4
Max CVSS
6
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 2Medium 4Low 0
Severity
All severities7Critical1High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add openEQUELLA to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-66091
New
6.9–Oct 29
Unauthenticated IDOR Enables Disclosure of Other Users’ last-known details
Affected: 2019.2 before 2026.1
CVE-2026-66089
New
6.1–Oct 29
XML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity Expansion
Affected: before 2026.1
CVE-2026-66092
New
4.8–Oct 29
Stored XSS in pre-login notice via reachable legacy logon route
Affected: 2019.1 before 2026.2
CVE-2026-16889
New
4.8–Oct 29
Stored XSS via Pre-Login Notice Image Upload Serves Attacker HTML from Application Origin
Affected: 2019.1 before 2026.1
Showing 4