Security Advisory

CVE-2026-52780

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-26 19:09:21
Last updated 2026-06-27 02:55:37
Assigner GitHub_M
CVSS score 9.6
State PUBLISHED

Description

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, cache store poisoning leads to Remote Code Execution (RCE). This vulnerability is fixed in 17.3.3 and 17.4.1.