CVE-2026-112785 | OpenCATS up to 0.9.9 AJAX Endpoints newList.php savedListID improper authorization

October 20, 2026 Yanac

A vulnerability categorized as critical has been discovered in OpenCATS up to 0.9.9. Affected by this vulnerability is an unknown functionality of the file newList.php of the component AJAX Endpoints. Executing a manipulation of the argument savedListID can lead to improper authorization.

This vulnerability is tracked as CVE-2026-112785. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More