Lucene search
+L

553796 matches found

OSV
OSV
added 4 days ago3 views

CVE-2026-72692 OpenSignLabs opensignserver - Missing Authorization

A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to irreversibly decline any in-flight document and forge the decline attribution to an arbitrary user via the declinedoc Parse cloud function. The function writes...

7.5CVSS5.6AI score
SaveExploits0References3
Cvelist
Cvelist
added 4 days ago35 views

CVE-2026-72692 OpenSignLabs opensignserver - Missing Authorization

A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to irreversibly decline any in-flight document and forge the decline attribution to an arbitrary user via the declinedoc Parse cloud function. The function writes...

7.5CVSS0.00272EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago12 views

EUVD-2026-55535

A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to irreversibly decline any in-flight document and forge the decline attribution to an arbitrary user via the declinedoc Parse cloud function. The function writes...

7.5CVSS5.5AI score0.00272EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 days ago7 views

CVE-2026-72692

A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to irreversibly decline any in-flight document and forge the decline attribution to an arbitrary user via the declinedoc Parse cloud function. The function writes...

7.5CVSS5.5AI score0.00272EPSS
SaveExploits0References2
CVE
CVE
added 4 days ago23 views

CVE-2026-72692

OpenSignLabs opensignserver up to version 2.37.0 contains a missing authorization flaw in the declinedoc Parse cloud function. An unauthenticated remote attacker can irreversibly decline any in‑flight document and forge the decline attribution to an arbitrary user by writing IsDeclined, DeclineRe...

7.5CVSS5.5AI score0.00272EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 4 days ago7 views

CVE-2026-72691 OpenSignLabs opensignserver - Authentication Bypass

An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTERKEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The function skips its isAuthenticated check whenever an...

7.5CVSS5.5AI score0.00393EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago33 views

CVE-2026-72691 OpenSignLabs opensignserver - Authentication Bypass

An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTERKEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The function skips its isAuthenticated check whenever an...

7.5CVSS0.00393EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago27 views

CVE-2026-72691

OpenSignLabs opensignserver (up to version 2.37.0) has an authentication bypass vulnerability. An unauthenticated remote attacker can mint MASTER_KEY-signed file access tokens for arbitrary stored files via the getsignedurl cloud function. The function bypasses its isAuthenticated check when any ...

7.5CVSS5.5AI score0.00393EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago8 views

EUVD-2026-55531

An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTERKEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The function skips its isAuthenticated check whenever an...

7.5CVSS5.5AI score0.00393EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 days ago7 views

CVE-2026-72691

An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTERKEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The function skips its isAuthenticated check whenever an...

7.5CVSS5.5AI score0.00393EPSS
SaveExploits0References2
OSV
OSV
added 4 days ago6 views

CVE-2026-72691 OpenSignLabs opensignserver - Authentication Bypass

An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTERKEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The function skips its isAuthenticated check whenever an...

7.5CVSS5.6AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 4 days ago6 views

CVE-2026-72689 OpenSignLabs opensignserver - Broken Object Level Authorization

A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read complete contract records via the getDocument Parse cloud function. The function fetches documents using useMasterKey, bypassing the object ACL, and...

7.5CVSS5.4AI score0.00324EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 days ago8 views

CVE-2026-72689

A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read complete contract records via the getDocument Parse cloud function. The function fetches documents using useMasterKey, bypassing the object ACL, and...

7.5CVSS5.4AI score0.00324EPSS
SaveExploits0References2
Cvelist
Cvelist
added 4 days ago34 views

CVE-2026-72689 OpenSignLabs opensignserver - Broken Object Level Authorization

A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read complete contract records via the getDocument Parse cloud function. The function fetches documents using useMasterKey, bypassing the object ACL, and...

7.5CVSS0.00324EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago7 views

EUVD-2026-55524

A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read complete contract records via the getDocument Parse cloud function. The function fetches documents using useMasterKey, bypassing the object ACL, and...

7.5CVSS5.4AI score0.00324EPSS
SaveExploits0References1
OSV
OSV
added 4 days ago5 views

CVE-2026-72689 OpenSignLabs opensignserver - Broken Object Level Authorization

A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read complete contract records via the getDocument Parse cloud function. The function fetches documents using useMasterKey, bypassing the object ACL, and...

7.5CVSS5.5AI score
SaveExploits0References3
CVE
CVE
added 4 days ago28 views

CVE-2026-72689

OpenSignLabs opensignserver prior to 2.37.0 is affected by a Broken Object-Level Authorization issue. The getDocument Parse cloud function fetches documents using useMasterKey, bypassing object ACLs and returning full contract records, including sender and signer PII and a pre-signed document dow...

7.5CVSS5.4AI score0.00324EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 days ago8 views

CVE-2026-72688

A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function. The function mints MASTERKEY-signed file access tokens for any caller-supplied URL without...

7.5CVSS5.5AI score0.00501EPSS
SaveExploits0References2
EUVD
EUVD
added 4 days ago7 views

EUVD-2026-55521

A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function. The function mints MASTERKEY-signed file access tokens for any caller-supplied URL without...

7.5CVSS5.5AI score0.00501EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago30 views

CVE-2026-72688 OpenSignLabs opensignserver - Missing Authentication for Critical Function

A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function. The function mints MASTERKEY-signed file access tokens for any caller-supplied URL without...

7.5CVSS0.00501EPSS
SaveExploits0References1
Rows per page
Query Builder