Login Request a demo
OP
Product
OpenCATS
by opencats · last CVE Oct 28, 2026
39
CVEs
0
On KEV
9.8
Max CVSS
11
New 30D
Vulnerabilities39In the news0Timeline
Severity mix
Critical 6High 7Medium 25Low 1
Severity
All severities39Critical6High7Medium25Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add OpenCATS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-47936
9.8
1%
May 10
OpenCATS 0.9.4 Remote Code Execution via Resume Upload
Affected: through 0.9.4
CVE-2022-48011
9.8
1%
Jan 27
Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function
Affected: 0.9.7
CVE-2022-43019
9.8
3%
Oct 19
OpenCATS v0.9.6 was discovered to contain a remote code execution (RCE) vulnerability via the getDataGridPager's ajax functionality
Affected: 0.9.6
CVE-2021-41560
9.8
11%
Dec 15
OpenCATS through 0.9.6 allows remote attackers to execute arbitrary code by uploading an executable file via lib/FileUtility.php
Affected: through 0.9.6
CVE-2021-25294
9.8
11%
Jan 18
OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution
Affected: through 0.9.5-3
CVE-2026-54454
9.1
0%
Oct 13
OpenCATS: Authenticated RCE in the Import module
Affected: < 0.10.0
Showing 6