CyberSecBulletin

ON24 vulnerabilities

We track 1 vulnerability in ON24 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 30, 2026.

1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score

Latest ON24 vulnerabilities

  • 8.7 High severity

    ON24 Q&A chat: Authorization Bypass Through User-Controlled Key

    CVE-2026-3321ON24

    A vulnerability of authorization bypass through user-controlled key in the 'console-survey/api/v1/answer/{EVENTID}/{TIMESTAMP}/' endpoint. Exploiting this vulnerability would allow an unauthenticated attacker to enumerate event IDs and obtain the complete Q&A