PatchSiren cyber security CVE debrief

CVE-2026-22230 OPEXUS CVE debrief

CVE-2026-22230 is a HIGH-severity vulnerability in OPEXUS eCASE Audit, allowing an authenticated attacker to modify client-side JavaScript or craft HTTP requests to access functions or buttons that have been disabled or blocked by an administrator. The vulnerability was published on January 8, 2026, and has a CVSS score of 7.6. The issue is fixed in eCASE Platform 11.14.1.0. Users of affected versions should upgrade to the latest version to prevent exploitation. OPEXUS eCASE Audit versions 11.4.0 to 11.14.1.0 are affected by this vulnerability.

Vendor: OPEXUS
Product: eCASE Audit
CVSS: HIGH 7.6
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-01-08
Original CVE updated: 2026-01-08
Advisory published: 2026-01-08
Advisory updated: 2026-01-08

Who should care

Administrators and users of OPEXUS eCASE Audit, particularly those using versions 11.4.0 to 11.14.1.0, should be aware of this vulnerability and take steps to upgrade to a fixed version. This vulnerability requires authentication and allows attackers to bypass access controls, potentially leading to unauthorized access to sensitive functions or data.

Technical summary

CVE-2026-22230 is a vulnerability in OPEXUS eCASE Audit that allows an authenticated attacker to modify client-side JavaScript or craft HTTP requests to access functions or buttons that have been disabled or blocked by an administrator. The vulnerability has a CVSS score of 7.6 and is classified as HIGH severity. The issue arises from inadequate access control mechanisms in the affected versions of eCASE Audit. The Common Vulnerability Scoring System (CVSS) vector for this vulnerability is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L.

Defensive priority

This vulnerability should be prioritized for remediation due to its HIGH severity and potential impact on access control. Administrators should upgrade to version 11.14.1.0 or later as soon as possible to mitigate the risk.

Recommended defensive actions

Upgrade to eCASE Platform 11.14.1.0 or later
Review and restrict access to sensitive functions and data
Monitor for suspicious activity and unauthorized access attempts
Implement additional security measures, such as web application firewalls and intrusion detection systems
Verify the integrity of client-side JavaScript and HTTP requests

Evidence notes

The vulnerability is documented in the CISA CSAF file and the CVE record. The source item URL provides additional details on the affected products and versions. The NVD detail page also provides information on the vulnerability.

Sources and references

Verified primary and authoritative sources

CVE-2026-22230 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-22230

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-22230 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-22230

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source item URL
Unverified legacy reference

URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-008-01.json

cisa_csaf
Source reference
Unverified legacy reference

URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-008-01.json

Reference
Source reference
Unverified legacy reference

URL: https://docs.opexustech.com/docs/eCase/11.14.X/eCASE_Release_Notes_11.14.1.0.pdf

Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.