Oqtane CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Oqtane CVE published 2026-10-16

CVE-2026-111616

CVE-2026-111616 is an authorization bypass vulnerability in Oqtane Framework through 10.2.6 that allows a site administrator to read another co-tenant site's private settings, including SMTPPassword and SMTPClientSecret values. This vulnerability impacts site administrators and security teams responsible for Oqtane Framework deployments, as it could lead to unauthorized access to sensitive settings. Affec [truncated]