Open-reception

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 22
    Known Exploited: 0
    5
    Critical Level Threats
    7
    High Level Threats
    8
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-75525

    OpenReception: unauthenticated ML-KEM key injection into the staff-crypto recipient directory in any tenant

    Last Modified: Oct 30, 2026
    Published: Oct 23, 2026

    CVE-2026-75524

    OpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agent

    Last Modified: Oct 29, 2026
    Published: Oct 23, 2026

    CVE-2026-65825

    OpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenants

    Last Modified: Oct 26, 2026
    Published: Oct 23, 2026

    CVE-2026-65824

    OpenReception: invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookie

    Last Modified: Oct 30, 2026
    Published: Oct 23, 2026

    CVE-2026-58202

    OpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation`

    Last Modified: Oct 29, 2026
    Published: Oct 23, 2026
    Items Per Page
    Open-Reception Vulnerabilities & Security CVEs | CVE-DB