What’s Vulnerable › Products

OpenKM Professional Edition vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your OpenKM Professional Edition version is affected

Latest OpenKM Professional Edition vulnerabilities

• CVE-2026-42785 — OpenKM 6.3.12 Remote Code Execution via Administrative Scripting (CVSS 7.2)
• CVE-2026-42425 — OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQuery (CVSS 7.2)
• CVE-2026-41917 — OpenKM 6.3.12 Local File Inclusion via Admin Scripting (CVSS 4.9)