Advisories · Technology

OpenKM Community Edition.

Every CVE that names OpenKM Community Edition among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112182 CVE record

CVSS 8.7 High

Multiple Vulnerabilities in OpenKM Community Edition
- OpenKM Community Edition
- Broken access control
Not analysed yet 13 Nov 2026
CVE-2026-112181 CVE record

CVSS 8.3 High

Multiple Vulnerabilities in OpenKM Community Edition
- OpenKM Community Edition
- XML external entities (XXE)
Not analysed yet 13 Nov 2026
CVE-2026-42785 CVE record

CVSS 8.6 High

OpenKM 6.3.12 Remote Code Execution via Administrative Scripting
- OpenKM Community Edition
- OpenKM Professional Edition
- Code injection
Not analysed yet 26 May 2026
CVE-2026-42425 CVE record

CVSS 8.6 High

OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQuery
- OpenKM Community Edition
- OpenKM Professional Edition
- SQL injection
Not analysed yet 26 May 2026
CVE-2026-41917 CVE record

CVSS 6.9 Medium

OpenKM 6.3.12 Local File Inclusion via Admin Scripting
- OpenKM Community Edition
- OpenKM Professional Edition
- Path traversal
Not analysed yet 26 May 2026