What’s Vulnerable › Products

OpenAEV-Platform openaev vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your OpenAEV-Platform openaev version is affected

Latest OpenAEV-Platform openaev vulnerabilities

• CVE-2026-71854 — OpenAEV has unauthenticated access and missing object-level authorization on player lessons API (CVSS 8.2)
• CVE-2026-24468 — OpenAEV Vulnerable to Username/Email Enumeration Through Differential HTTP Responses in Password Reset API (CVSS 5.3)
• CVE-2026-24467 — OpenAEV's Improper Password Reset Token Management Leads to Unauthenticated Account Takeover and Platform Compromise (CVSS 9.8)