oM noM Security Feeds cve
vulnerability context

CVE-2026-52780

CVSS 9.6 CRITICALEPSS 14%CWE-20OTX 3 pulses

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, cache store poisoning leads to Remote Code Execution (RCE). This vulnerability is fixed in 17.3.3 and 17.4.1.

Published 2026-06-26 · last modified 2026-06-27

details

CISA KEV status
Not in catalog
CVSS v3
9.6 / CRITICAL
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
14% percentile (score 0.0023)
CWE
CWE-20
OTX pulses
3 total, 0 recent
View on NVD → · cve.org

source mentions 2

source consensus

  • Bluesky2×
Want the 3-bullet summary of CVE-2026-52780, plus webhook alerts when KEV is updated? Pro is $10/mo.
Open in readerSee Pro →