Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 43 MIN AGO
T-43M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-77769
OpenPanel report.list Queries Reports by an Unverified dashboardId, Crossing Organization Boundaries
High
PUBLISHED
CNA: VulnCheck
Base score
7.1
CVSS v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
View raw JSON
CVE Program record
02
Description
CNA: VulnCheck
OpenPanel report.list Queries Reports by an Unverified dashboardId, Crossing Organization Boundaries
03
Metadata
SCHEMA: 5.2
Published
2026-08-21 11:05Z
14 HR AGO
Last updated
2026-08-21 11:05Z
14 HR AGO
Reserved
2026-08-21
Assigning CNA
VulnCheck
Record state
PUBLISHED
Severity
High (CVSS 7.1)
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-639
Authorization Bypass Through User-Controlled Key
Base
SSVC decision
No CISA-ADP assessment
Data version
5.2
Document digest
17ba823eea4031dce77c5eb814ddc9021d9727b94b5b283b47c061e29688f4b9
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
Openpanel-dev
openpanel
0 to < 0a51b6805eed0b3da8376175acd5fa3d26819cb6
—
05
References
REFS: 5
github.com
GHSA-3q95-vc6f-vc9v
https://github.com/Openpanel-dev/openpanel/security/advisories/GHSA-3q95-vc6f-vc9v
vendor-advisory
github.com
report.list querying by unverified dashboardId
https://github.com/Openpanel-dev/openpanel/blob/e8a0602cda5a4d4b463f11d298a1b078c446bf33/packages/trpc/src/routers/report.ts
technical-description
github.com
fix: improve access rights
https://github.com/Openpanel-dev/openpanel/commit/0a51b6805eed0b3da8376175acd5fa3d26819cb6
patch
github.com
https://github.com/Openpanel-dev/openpanel
product
www.vulncheck.com
VulnCheck Advisory: OpenPanel report.list Queries Reports by an Unverified dashboardId, Crossing Organization Boundaries
https://www.vulncheck.com/advisories/openpanel-report-list-queries-reports-by-an-unverified-dashboardid-crossing-organization-boundaries
third-party-advisory