CVE-2026-27760High· 8.1▾ MidnightPoC availableOpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the installer AJAX endpoint that allows unauthenticated attackers to execute arbitrary code by injecting PHP statements into the databaseConnectivity action …
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 44.6 · likelihood 6.6 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 2 sources. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
33%
Metasploit ×1 · Nuclei ×1 (last check)
OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the installer AJAX endpoint that allows unauthenticated attackers to execute arbitrary code by injecting PHP statements into the databaseConnectivity action parameter. Attackers can break out of the define() string context in config.php using a single quote and statement separator to inject malicious PHP code that persists and executes on every subsequent page load when the installation wizard remains incomplete.
OpenCATS <= 0.9.7.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-54453High· 7.2OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)
CVE-2026-49489High· 8.5OpenCATS - SQL Injection in DataGrid sortDirection Parameter
CVE-2026-111874Low· 3.7OpenCATS Career Portal CareersUI.php processLogin excessive authentication
CVE-2026-49490High· 8.1OpenCATS - SQL Injection in DataGrid Filter Handling for Tags Column
CVE-2026-54455High· 7.6OpenCATS: Authenticated SQL injection in activity DataGrid date filters
CVE-2026-115513High· 8.7OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel