Opensignlabs Opensign
6 CVEs affecting Opensignlabs Opensign. Latest disclosed: 2026-09-16. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-92794 | High | 7.5 | 2026-09-16 | OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when one-time-password verification is disabled. Attackers can supp… |
CVE-2026-72548 | High | 7.5 | 2026-08-11 | An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any organisation tenant rec… |
CVE-2026-72545 | High | 7.5 | 2026-08-11 | An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to write to any contact recor… |
CVE-2026-72544 | High | 7.5 | 2026-08-11 | An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to forge document audit-trail entries v… |
CVE-2026-72543 | High | 7.5 | 2026-08-11 | An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any contact recor… |
CVE-2026-72549 | Medium | 5.3 | 2026-08-11 | An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to map any email address or username to… |