openmeetings-remember-me-password

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-remember-me-password Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-remember-me-password Class: ATO Reach: Remote Apache OpenMeetings 9.1.0. CVE-2026-33266 closed th...

openmeetings-nettest-ping-dos

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-nettest-ping-dos Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-nettest-ping-dos Class: DoS leftover Reach: Remote Apache OpenMeetings 9.1.0. Leftover of...

openmeetings-wb-fileid-idor

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-wb-fileid-idor Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-wb-fileid-idor Class: IDOR Reach: Remote Apache OpenMeetings 9.1.0. WHITEBOARD/PRESENTER CREATEOBJ stor...

openmeetings-cluster-openjpa

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-cluster-openjpa Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-cluster-openjpa Class: CWE-502 Reach: Remote Apache OpenMeetings 9.1.0. Leftover of CVE-2024-54676 doc...

openmeetings-calendar-save-idor

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-calendar-save-idor Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-calendar-save-idor Class: IDOR Reach: Remote Apache OpenMeetings 9.1.0 9773c59e - Apache Software...

openmeetings-chat-user-idor

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-chat-user-idor Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-chat-user-idor Class: IDOR Reach: Remote Apache OpenMeetings 9.1.0 9773c59e. Any ROOM/DASHBOARD session...

openmeetings-backup-config-path

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-backup-config-path Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-backup-config-path Class: File write leftover Reach: Remote Apache OpenMeetings 9.1.0 9773c59e -...

openmeetings-invite-recording-acl

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-invite-recording-acl Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-invite-recording-acl Class: IDOR Reach: Remote Apache OpenMeetings 9.1.0. CVE-2023-29032 stopped...

openmeetings-soap-user-rights

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-soap-user-rights Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-soap-user-rights Class: Privilege leftover Reach: Remote Apache OpenMeetings 9.1.0. SOAP POST /user/...

openmeetings-stale-install-admin

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-stale-install-admin Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-stale-install-admin Class: Privilege leftover Reach: Remote Apache OpenMeetings 9.1.0 9773c59e -...

openmeetings-soap-otp-skip

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-soap-otp-skip Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-soap-otp-skip Class: 2FA skip Reach: Remote Apache OpenMeetings 9.1.0. When otp.enabled is true, TOTP ru...

openmeetings-kms-unauth

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-kms-unauth Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-kms-unauth Class: Unauth KMS Reach: Remote Apache OpenMeetings 9.1.0 9773c59e - Apache Software Foundation...

CVE-2026-49488

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...

CVE-2026-49488

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...

CVE-2026-49488

Technical details are not publicly available in the provided documents. No versions, exploit vectors, or remediation specifics are provided beyond upgrade guidance to 9.1.0 ; monitor for updates.

EUVD-2026-43666

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...

org.apache.openmeetings:openmeetings-db (>=5.0.0, <=9.0.0) potentially affected by CVE-2026-49488 via org.apache.openmeetings:openmeetings-util (>=5.0.0, <=9.0.0)

org.apache.openmeetings:openmeetings-util MAVEN version =5.0.0, =5.0.0, =9.0.0 Source cves: CVE-2026-49488 Source advisory: MEND:CVE-2026-49488...

CVE-2026-49488

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...

CVE-2026-49488 Apache OpenMeetings: Arbitrary File Read

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...

CVE-2026-49488: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...