O
Vendor security profile
Openpanel-dev
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs18
Critical2
CISA KEV0
Public exploit11
Patch rate%28
Avg. CVSS6.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
15
1
CVE KEV
CVE severity distribution
18toplam CVE
Critical2 (11%)
High6 (33%)
Medium9 (50%)
Low1 (6%)
Patch and exploitation view
%28
Verified patch
%0
CISA KEV
%61
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
13Unknown
Latest vulnerabilities
2.3
CVE-2026-108579
OpenPanel through 2.3.0 CSV Formula Injection via Cohort Member Export
O
Patch status unknownEPSS %0
9.4
CVE-2026-93985
OpenPanel js-runtime through 2.3.0 JavaScript Template Sandbox Escape RCE
O
Patch status unknownEPSS %1
6.9
CVE-2026-93984
OpenPanel API through 2.3.0 Authentication Bypass via Unverified Client Secret
O
Patch status unknownEPSS %0
5.3
CVE-2026-93983
OpenPanel through 2.3.0 SQL Injection via ClickHouse Property Key Filter
O
Patch status unknownEPSS %0
4.8
CVE-2026-93982
OpenPanel through 2.3.0 MCP Authentication Token in Query Parameter Logged Plaintext
O
Patch status unknownEPSS %0
8.7
CVE-2026-88893
OpenPanel through 2.3.0 Unauthenticated Share Lookup Information Disclosure
O
Patch verifiedEPSS %0
5.3
CVE-2026-88892
OpenPanel through 2.3.0 SSRF via Unguarded Importer File URL Fetch
O
Patch verifiedEPSS %0
7.2
CVE-2026-88891
OpenPanel through 2.3.0 Read-Only Access Level Enforcement Bypass via Mutations
O
Patch verifiedEPSS %0
8.4
CVE-2026-88890
OpenPanel through 2.3.0 SQL Injection via unvalidated profile filter column identifier
O
Patch status unknownEPSS %0
5.3
CVE-2026-85615
Openpanel before 2.3.0 Cross-Tenant IDOR via report.getLayouts
O
Patch status unknownEPSS %0