PatchSiren

openwisp CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM openwisp CVE published 2026-10-30

CVE-2026-116677

CVE-2026-116677 debrief based on the supplied source corpus. The CVE record was published on 2026-10-30T22:58:10.000Z and has not been modified since then. The vulnerability in OpenWISP Controller's CA CRL REST API allows an organization manager to retrieve CRLs for CAs belonging to other organizations. This could potentially lead to misuse, especially in environments with multiple organizations or users [truncated]