Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #12

Security flaw disclosed in Apereo openEQUELLA platform

Original: 🚨 EUVD-2026-112567 📊 Score: 6.9/10 (CVSS v3.1) 📦 Product: openEQUELLA 🏢 Vendor: Apereo Foundation 📅 Updated: 2026-10-29

A medium-severity vulnerability, tracked as EUVD-2026-112567 with a CVSS score of 6.9, has been disclosed in openEQUELLA, the open-source learning repository maintained by the Apereo Foundation. Versions before 2026.1 leave the GET /api/userquery/userinfobackup endpoint without authentication or authorisation checks, potentially letting unauthenticated attackers access sensitive user backup information. Administrators are advised to update to openEQUELLA 2026.1 or later.

Why now: The vulnerability disclosure is newly updated and affects an unauthenticated endpoint, prompting security teams to assess exposure in their systems.

openEQUELLAApereo FoundationEUVD-2026-112567

Open on mastodon →

Evidence

• 🚨 EUVD-2026-112567 📊 Score: 6.9/10 (CVSS v3.1) 📦 Product: openEQUELLA 🏢 Vendor: Apereo Foundation 📅 Updated: 2026-10-29 📝 In openEQUELLA before 2026.1, the GET /api/userquery/userinfobackup endpoint performs no authentication or authorisation check. An unauthenticated attacker… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/4063980