OpenAEV-Platform vulnerabilities
We track 2 vulnerabilities in OpenAEV-Platform products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
2vulnerabilities
1critical
1high
0exploited
9.0average CVSS score
Latest OpenAEV-Platform vulnerabilities
- 8.2 High severity
openaev: Missing Authentication for Critical Functionality
OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default installation, the `/api/player/**` lessons endpoints can be called without authenti
- 9.8 Critical severity
openaev: Weak Password Recovery Mechanism for Forgotten Password
OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Starting in version 1.0.0 and prior to version 2.0.13, OpenAEV's password reset implementation contains multiple security wea