PT-2026-52911 · Undefined · Undefined

Publicado 2026-06-26 · Atualizado 2026-06-26 · CVE-2026-52780

NVD

CVSS v3.1

9.6

Crítica

Vetor base

AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, cache store poisoning leads to Remote Code Execution (RCE). This vulnerability is fixed in 17.3.3 and 17.4.1.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2026-52780

Produtos afetados

Undefined

Referências · 2

• https://github.com/opf/openproject/security/advisories/GHSA-qj96-f42f-6336 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-52780 · Nota de Segurança