- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/14/2026, opencast recorded 2 security vulnerabilities in the last 90 days, of which 2 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of opencast and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-77615Paella Player: Stored XSS via caption cue textCVE-2026-77614Opencast: Session fixation in login enables account takeover via crafted linkCVE-2025-61906Opencast's editor accidentally publishes videos/overwrites publications #1626CVE-2025-61788Opencast Paella Player 7 vulnerable to Cross-Site-ScriptingCVE-2025-55202Opencast has a partial path traversal vulnerability in UI config| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-77615Paella Player: Stored XSS via caption cue text | Exploitation statusActively exploited | FixYes | Published09/17/2026 | SeverityHigh |
CVE-2026-77614Opencast: Session fixation in login enables account takeover via crafted link | Exploitation statusActively exploited | FixYes | Published09/17/2026 | SeverityHigh |
CVE-2025-61906Opencast's editor accidentally publishes videos/overwrites publications #1626 | Exploitation statusActively exploited | FixYes | Published10/08/2025 | SeverityLow |
CVE-2025-61788Opencast Paella Player 7 vulnerable to Cross-Site-Scripting | Exploitation statusNot exploited | FixYes | Published10/08/2025 | SeverityMedium |
CVE-2025-55202Opencast has a partial path traversal vulnerability in UI config | Exploitation statusNot exploited | FixYes | Published08/29/2025 | SeverityLow |
CVE-2025-54380Opencast still publishes global system account credentials | Exploitation statusNot exploited | FixYes | Published07/26/2025 | SeverityMedium |
CVE-2024-52797Searching Opencast may cause a denial of service | Exploitation statusNot exploited | FixNo | Published11/21/2024 | SeverityMedium |
CVE-2022-41965Opencast Authenticated OpenRedirect Vulnerability | Exploitation statusNot exploited | FixYes | Published11/28/2022 | SeverityMedium |
CVE-2022-29237Limited Authentication Bypass for Media Files in Opencast | Exploitation statusNot exploited | FixYes | Published05/24/2022 | SeverityMedium |
CVE-2021-43821Files Accessible to External Parties in Opencast | Exploitation statusNot confirmed | FixYes | Published12/14/2021 | SeverityCritical |
21 Results | Page 1 of 3