CVE-2026-22601 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenProject is an open-source, web-based project management software. For OpenProject version 16.6.1 and below, a registered administrator can execute arbitrary…
High CVSS: 8.6

CVE-2026-22601

OpenProject is an open-source, web-based project management software. For OpenProject version 16.6.1 and below, a registered administrator can execute arbitrary command by configuring sendmail binary path and sending a test email. This issue has been patched in version 16.6.2.
Vendor
Openproject
Product
Openproject
CWE
CWE-77
Yayın Tarihi
2026-01-10 02:15:48
Güncelleme
2026-01-14 22:26:03
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-77 Openproject HIGH Openproject 2026

Referanslar

https://github.com/opf/openproject/releases/tag/v16.6.2 https://github.com/opf/openproject/security/advisories/GHSA-9vrv-7h26-c7jc