PT-2026-22842 · Opentext · Opentext Filr

Publicado 2026-03-03 · Atualizado 2026-03-04 · CVE-2026-3266

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenText Filr versions through 25.1.2

Description A missing authorization issue exists in OpenText Filr that allows authentication bypass. This could allow unauthenticated users to obtain an XSRF token and perform Remote Procedure Calls (RPC) using specially crafted programs.

Recommendations Update OpenText Filr to a version later than 25.1.2.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-3266

Produtos afetados

Opentext Filr

Referências · 8

• https://t.me/CVEtracker/46264 · Publicação no Telegram
• https://twitter.com/cyberbivash/status/2029003495819403644 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2028974434892071420 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2029049658446655750 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2028975373841531292 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-3266 · Nota de Segurança
• https://portal.microfocus.com/s/article/KM000045579?language=en_US · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-3266 · Aviso do Fabricante