Advisories · Technology

Open Web Analytics.

Every CVE that names Open Web Analytics among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119646 CVE record

CVSS 5.3 Medium

Open Web Analytics before 1.14.1 Cross-Site Data Disclosure via REST Report API
- Open Web Analytics
- Broken access control
Not analysed yet 30 Oct 2026
CVE-2026-97865 CVE record

CVSS 6.9 Medium

Open-Web-Analytics Remote Event Queue Endpoint queue.php loadFromArray deserialization
- Open-Web-Analytics
- Insecure deserialization
- CWE-20
Not analysed yet 25 Sept 2026
CVE-2026-86810 CVE record

CVSS 6.9 Medium

Open-Web-Analytics Controller Controller.php checkCapabilityAndAuthenticateUser improper authentication
- Open-Web-Analytics
- Authentication bypass
Not analysed yet 8 Sept 2026