Openbullet

5 CVEs in 1 Openbullet product, including Openbullet2. Newest: CVE-2026-39908 (2026-06-08). Severity, EPSS and public exploits for each.

Openbullet products with known CVEs

ProductCVEs
Openbullet25
Openbullet CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-39908Medium6.52026-06-08OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers to capture the NTLMv2 hash of the proc…
CVE-2026-25856High8.82026-06-08OpenBullet2 through version 0.3.2 contains an authenticated remote code execution vulnerability that allows authenticated users to execute arbitrary C# code on…
CVE-2026-25855High8.82026-06-08OpenBullet2 through version 0.3.2 contains a remote code execution vulnerability that allows authenticated users to execute arbitrary commands by uploading scr…
CVE-2026-25559High8.82026-06-08OpenBullet2 through version 0.3.2 contains a path traversal vulnerability in the wordlist endpoint that allows authenticated attackers to perform arbitrary fil…
CVE-2026-25555Critical9.82026-06-08OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attacker…