Schorschii vulnerabilities
We track 2 vulnerabilities in Schorschii products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2026.
2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score
Latest Schorschii vulnerabilities
- 9.1 Critical severity
OCO-Server: Improper Certificate Validation
OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to 1.2.3,the Apple MDM enrollment endpoint `frontend/api-mdm.php` verifies the signed enrollment-request plist with `op
- 7.4 High severity
OCO-Server: Improper Neutralization of Script in Attributes in a Web Page
OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to 1.2.1, `Html::commandButton()` in `lib/Html.class.php` embeds an action URL containing a stored computer hostname in