Products: 1
Vulnerabilities: 97
Known Exploited: 0
2
Critical Level Threats
48
High Level Threats
43
Medium Level Threats
4
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-56400
open-webui - Remote Code Execution via CORS Misconfiguration and Session Validation
Last Modified: Jul 15, 2026
Published: Jul 15, 2026
CVE-2026-56398
Open WebUI - Stored Cross-Site Scripting via OAuth Picture Claim SVG Data URI
Last Modified: Jul 15, 2026
Published: Jul 15, 2026
CVE-2026-56399
Open WebUI - Server-Side Request Forgery via Location Redirect in /api/v1/retrieval/process/web
Last Modified: Jul 01, 2026
Published: Jun 30, 2026
CVE-2026-45338
Open WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)
Last Modified: May 18, 2026
Published: May 15, 2026
CVE-2026-44549
Open WebUI: Stored XSS in excel file preview
Last Modified: May 19, 2026
Published: May 15, 2026
Items Per Page
