Opencode vulnerabilities
We track 3 vulnerabilities in Opencode products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 5, 2026.
Latest Opencode vulnerabilities
- 8.1 High severity
Ussd Gateway: Improper Access Control
OpenCode Systems OC Messaging / USSD Gateway OC Release 6.32.2 contains a broken access control vulnerability in the web-based control panel allowing authenticated low-privileged attackers to gain to access to arbitrary SMS messages via a crafted company or te
- 9.8 Critical severity
Ussd Gateway: Improper Neutralization of Special Elements used in an SQL Command
OpenCode Systems USSD Gateway OC Release: 5 was discovered to contain a SQL injection vulnerability via the Session ID parameter in the /occontrolpanel/index.php endpoint.
- 9.8 Critical severity
Ussd Gateway: Improper Neutralization of Special Elements used in an SQL Command
OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via the ID parameter in the getSubUsersByProvider function.