Oqtane Oqtane.framework
2 CVEs affecting Oqtane Oqtane.framework. Latest disclosed: 2026-11-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-122007 | Medium | 6.5 | 2026-11-04 | Oqtane Framework before 10.3.0 contains a broken access control vulnerability in SettingController.cs that allows an authenticated site administrator to read a… |
CVE-2026-122008 | Medium | 5.0 | 2026-11-04 | Oqtane Framework before 10.3.0 contains a server-side request forgery vulnerability in the UploadFile endpoint of FileController.cs that allows authenticated r… |