openaev vulnerabilities

2 known vulnerabilities in openaev from OpenAEV-Platform. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  openaev: Missing Authentication for Critical Functionality

  CVE-2026-71854Oct 14, 2026OpenAEV-Platform

  OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default installation, the `/api/player/**` lessons endpoints can be called without authenti

• 9.8 Critical severity

  openaev: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2026-24467Apr 20, 2026OpenAEV-Platform

  OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Starting in version 1.0.0 and prior to version 2.0.13, OpenAEV's password reset implementation contains multiple security wea