agentprime: opencatsEvery new CVE for opencats.https://agentprime.io/CVE-2026-54453: OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)https://agentprime.io/advisories/CVE-2026-54453/https://agentprime.io/advisories/CVE-2026-54453/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 21:53:24 GMTCVECVE-2026-54455: OpenCATS: Authenticated SQL injection in activity DataGrid date filtershttps://agentprime.io/advisories/CVE-2026-54455/https://agentprime.io/advisories/CVE-2026-54455/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 21:45:00 GMTCVECVE-2026-115513: OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panelhttps://agentprime.io/advisories/CVE-2026-115513/https://agentprime.io/advisories/CVE-2026-115513/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 16:52:10 GMTCVECVE-2026-113349: OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEventhttps://agentprime.io/advisories/CVE-2026-113349/https://agentprime.io/advisories/CVE-2026-113349/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 10:41:36 GMTCVECVE-2026-112787: OpenCATS before 0.10.0 Missing Authorization in Reports Module EEO Reportshttps://agentprime.io/advisories/CVE-2026-112787/https://agentprime.io/advisories/CVE-2026-112787/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 10:41:35 GMTCVECVE-2026-112786: OpenCATS before 0.10.0 Missing Authorization via Import Revert Actionhttps://agentprime.io/advisories/CVE-2026-112786/https://agentprime.io/advisories/CVE-2026-112786/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 10:41:34 GMTCVECVE-2026-112785: OpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX Endpointshttps://agentprime.io/advisories/CVE-2026-112785/https://agentprime.io/advisories/CVE-2026-112785/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 10:41:33 GMTCVECVE-2026-112784: OpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.phphttps://agentprime.io/advisories/CVE-2026-112784/https://agentprime.io/advisories/CVE-2026-112784/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 10:41:33 GMTCVECVE-2026-112783: OpenCATS before 0.10.0 Missing Authorization via Activity AJAX Endpointshttps://agentprime.io/advisories/CVE-2026-112783/https://agentprime.io/advisories/CVE-2026-112783/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 10:41:32 GMTCVECVE-2026-111874: OpenCATS Career Portal CareersUI.php processLogin excessive authenticationhttps://agentprime.io/advisories/CVE-2026-111874/https://agentprime.io/advisories/CVE-2026-111874/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 05:15:11 GMTCVECVE-2026-54454: OpenCATS: Authenticated RCE in the Import modulehttps://agentprime.io/advisories/CVE-2026-54454/https://agentprime.io/advisories/CVE-2026-54454/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 16:33:49 GMTCVEcriticalCVE-2026-49490: OpenCATS - SQL Injection in DataGrid Filter Handling for Tags Columnhttps://agentprime.io/advisories/CVE-2026-49490/https://agentprime.io/advisories/CVE-2026-49490/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 May 2026 12:07:55 GMTCVECVE-2026-49489: OpenCATS - SQL Injection in DataGrid sortDirection Parameterhttps://agentprime.io/advisories/CVE-2026-49489/https://agentprime.io/advisories/CVE-2026-49489/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 May 2026 12:04:48 GMTCVECVE-2021-47936: OpenCATS 0.9.4 Remote Code Execution via Resume Uploadhttps://agentprime.io/advisories/CVE-2021-47936/https://agentprime.io/advisories/CVE-2021-47936/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 May 2026 12:43:54 GMTCVEcriticalCVE-2026-27760: OpenCATS PHP Code Injection via installer AJAX endpointhttps://agentprime.io/advisories/CVE-2026-27760/https://agentprime.io/advisories/CVE-2026-27760/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. CVSS score 9.2 (7.0 or more) and EPSS 0.33 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Apr 2026 13:43:24 GMTCVEcriticalCVE-2023-27295: Cross-site request forgery in OpenCATShttps://agentprime.io/advisories/CVE-2023-27295/https://agentprime.io/advisories/CVE-2023-27295/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Feb 2023 00:00:00 GMTCVECVE-2023-27294: Cross-site scripting in OpenCATShttps://agentprime.io/advisories/CVE-2023-27294/https://agentprime.io/advisories/CVE-2023-27294/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Feb 2023 00:00:00 GMTCVECVE-2023-27293: Cross-site scripting in OpenCATShttps://agentprime.io/advisories/CVE-2023-27293/https://agentprime.io/advisories/CVE-2023-27293/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Feb 2023 00:00:00 GMTCVECVE-2023-27292: Open redirect in OpenCATShttps://agentprime.io/advisories/CVE-2023-27292/https://agentprime.io/advisories/CVE-2023-27292/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Feb 2023 00:00:00 GMTCVE