Vulnerabilidades de OSSRS

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de OSSRS: 1 registro(s), com severidade, exploração e correções.

Srs 1

Somente exploradas (KEV) →

CVE-2026-105486 Alta · 7.3 CWE-287 05/10/2026

OSSRS srs System API api.go systemAPI.Run missing authentication

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 8.0-d0 mitigates this issue. The patch is named bb5fde228f4ca5bd26d96368b61f6e0c21df51df. The affected component should be upgraded.