openbao openbao
productUScpe:2.3:a:openbao:openbao:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
unpatched
by severity
1critical7high5medium3low
updated 2026-10-28
01
vulnerabilities (25)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2025-59043US | — | — |
| CVE-2024-9180US | high7.2 | — |
| CVE-2024-8185US | — | — |
| CVE-2024-2048US | critical9.8 | — |
| CVE-2025-4166US | medium6.5 | — |
| CVE-2026-33757US | high8.3 | — |
| CVE-2025-54997US | — | — |
| CVE-2025-52894US | high7.5OT elevated | — |
| CVE-2025-64761US | high7.2 | — |
| CVE-2025-54996US | — | — |
| CVE-2025-62705US | medium4.9 | — |
| CVE-2025-52893US | — | — |
| CVE-2025-62513US | high7.5 | — |
| CVE-2026-40264US | low2.7 | — |
| CVE-2026-33758US | medium6.1 | — |
| CVE-2024-7594US | high8.8 | — |
| CVE-2025-55003US | — | — |
| CVE-2026-42186US | high7.5 | — |
| CVE-2026-39946US | medium4.9 | — |
| CVE-2025-55001US | — | — |
| CVE-2025-55000US | — | — |
| CVE-2025-54998US | — | — |
| CVE-2026-39396US | medium6.5 | — |
| CVE-2025-54999US | low3.7 | — |
| CVE-2026-39388US | low3.1OT elevated | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-266Incorrect Privilege Assignment3 CVEs
- CWE-532Insertion of Sensitive Information into Log File3 CVEs
- CWE-156Improper Neutralization of Whitespace2 CVEs
- CWE-20Improper Input Validation2 CVEs
- CWE-269Improper Privilege Management2 CVEs
- CWE-295Improper Certificate Validation2 CVEs
- CWE-307Improper Restriction of Excessive Authentication Attempts2 CVEs
- CWE-400Uncontrolled Resource Consumption2 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE25 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan