CVE-2026-71854 | OpenAEV-Platform OpenAEV 2.0.13 Lessons Endpoint userId improper authentication

October 14, 2026 Yanac

A vulnerability labeled as critical has been found in OpenAEV-Platform OpenAEV 2.0.13. This impacts an unknown function of the component Lessons Endpoint. Such manipulation of the argument userId leads to improper authentication.

This vulnerability is traded as CVE-2026-71854. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More