otto-support

Otto Support Customer support MCP server for AI coding assistants. One Go binary, tiered authentication, 19 tools across 4 role levels. Built with mcp-go. Quick Start Option A: Docker container recommended Run everything in an isolated container. Claude Code is pre-installed and the MCP server...

WordPress Search Atlas SEO – OTTO AI SEO Automation for WordPress plugin <= 2.6.23 - Missing Authorization to Authenticated (Subscriber+) Whitelabel Password Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Whitelabel Password Modification vulnerability discovered by Wordfence PRISM in WordPress Plugin Search Atlas SEO versions = 2.6.23...

WordPress Search Atlas SEO – OTTO AI SEO Automation for WordPress plugin <= 2.6.23 - Missing Authorization to Authenticated (Subscriber+) Site-Wide Option Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Site-Wide Option Modification vulnerability discovered by Wordfence PRISM in WordPress Plugin Search Atlas SEO versions = 2.6.23...

Rockwell Automation OTTO Fleet Manager

ADVISORY SUMMARY Successful exploitation of this vulnerability could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password hashes. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

CVE-2026-75112

A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password...

CVE-2026-75112 OTTO® Fleet Manager – Weak Password Hashing Configuration

A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password...

EUVD-2026-62694

A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password...

CVE-2026-75112

OTTO® Fleet Manager uses an insufficient bcrypt work factor, lowering the computational cost for offline brute-force attacks on stored password hashes if an attacker obtains an unencrypted system backup. CVSS 6.9 (Medium), ADJACENT vector. No exploitation reported; Rockwell advisory SD1791 refere...

CVE-2026-75112 OTTO® Fleet Manager – Weak Password Hashing Configuration

A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password...

CVE-2026-75112: Use of Password Hash With Insufficient Computational Effort

A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password...

PT-2026-78587

Name of the Vulnerable Software and Affected Versions OTTO® Fleet Manager affected versions not specified Description An issue exists due to the use of an insufficient work factor in the bcrypt password hashing implementation. This reduces the computational cost for attackers to perform offline...

airosentris (>=0.1.8, <=0.1.31), mafiagg (1.0.4) +1 more potentially affected by CVE-2026-55443 via langchain (0.3.8)

langchain PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - airosentris =0.1.8, =0.1.31 - mafiagg 1.0.4 - otto-m8-backend 0.0.3 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

auditize (>=0.2.1, <=0.2.4), otto-m8-backend (>=0.0.3, <=0.0.4) +3 more potentially affected by CVE-2026-54282 via starlette (0.38.5)

starlette PYPI version 0.38.5 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - auditize =0.2.1, =0.0.3, =0.0.0, =0.1.0 Source cves: CVE-2026-54282 Source advisory: OSV:PYSEC-2026-248...

auditize (>=0.2.1, <=0.2.4), otto-m8-backend (>=0.0.3, <=0.0.4) +3 more potentially affected by CVE-2026-48818 via starlette (0.38.5)

starlette PYPI version 0.38.5 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - auditize =0.2.1, =0.0.3, =0.0.0, =0.1.0 Source cves: CVE-2026-48818 Source advisory: OSV:PYSEC-2026-2281...

airosentris (>=0.1.8, <=0.1.31), mafiagg (1.0.4) +1 more potentially affected by CVE-2026-55443 via langchain (0.3.8)

langchain PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - airosentris =0.1.8, =0.1.31 - mafiagg 1.0.4 - otto-m8-backend 0.0.3 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

auditize (>=0.2.1, <=0.2.4), otto-m8-backend (>=0.0.3, <=0.0.4) +3 more potentially affected by CVE-2026-48817 via starlette (0.38.5)

starlette PYPI version 0.38.5 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - auditize =0.2.1, =0.0.3, =0.0.0, =0.1.0 Source cves: CVE-2026-48817 Source advisory: OSV:GHSA-X746-7M8F-X49C...

auditize (>=0.2.1, <=0.2.4), otto-m8-backend (>=0.0.3, <=0.0.4) +3 more potentially affected by CVE-2026-48710 via starlette (0.38.5)

starlette PYPI version 0.38.5 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - auditize =0.2.1, =0.0.3, =0.0.0, =0.1.0 Source cves: CVE-2026-48710 Source advisory: OSV:GHSA-86QP-5C8J-P5MR...

atom-llm (0.1.0), docksec (>=2026.2.23, <=2026.5.6) +5 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.4)

langchain-text-splitters PYPI version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - atom-llm 0.1.0 - docksec =2026.2.23, =0.1.2, =0.1.0, =1.0.0, =2.0.4 Source cves: CVE-2026-41481 Source advisory:...

atom-llm (0.1.0), docksec (>=2026.2.23, <=2026.5.6) +5 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.4)

langchain-text-splitters PYPI version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - atom-llm 0.1.0 - docksec =2026.2.23, =0.1.2, =0.1.0, =1.0.0, =2.0.4 Source cves: CVE-2026-41481 Source advisory:...

CVE-2026-39479

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.This issue affects OttoKit: from n/a through = 1.1.20...