openwisp-controller vulnerabilities

CVEs whose affected-version data names the openwisp-controller package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116677Medium· 5.3

today

OpenWISP Controller CA CRL REST API does not scope requests to managed organizations

OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI management. From 1.0.0 until 1.3.2, the GET /api/v1/controller/ca/<integer-id>/crl endpoint allows an authenticated organiz…

▾ Sunlitopenwisp · openwisp-controllervia CVEORG