CVE Intelligence

OutSystems Lifetime vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting OutSystems Lifetime: 1 record(s), with affected versions and fixes.

CVE-2026-40127 Medium · 5.3 CWE-639 May 25, 2026
Authorization Bypass Through User-Controlled Key in OutSystems Lifetime
OutSystems Lifetime is vulnerable to Authorization Bypass Through User-Controlled Key vulnerability in ApplicationID parameter. Any authenticated user, can read the Change Log containing actions performed by other users as well as application name of any application. This issue was fixed in OutSystems Lifetime version 11.28.2.3955