What’s Vulnerable › Products

open-zaak vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your open-zaak version is affected

Latest open-zaak vulnerabilities

• CVE-2026-55836 — Open Zaak: Path traversal / arbitrary server-file read via Documenten API document import (bestandspad) (CVSS 6.8)
• CVE-2026-54657 — Open Zaak: /zaken/_zoek and /enkelvoudiginformatieobjecten/_zoek endpoints do not filter result lists based on authorizations linked to token (CVSS 6.5)
• CVE-2020-26251 — CORS configuration is possibly vulnerable (CVSS 4.7)