Skip to content
Threat Feed
Subscribe

Vendor

Open Event

1 brief RSS
high advisory

Open Event Server Authentication Bypass for Member Roster Export (CVE-2026-63101)

An authentication bypass vulnerability, CVE-2026-63101, in Open Event Server through version 1.19.1 allows unauthenticated attackers to export the complete member roster of any group by exploiting unauthenticated CSV export and task status endpoints, leading to the exfiltration of sensitive data like email addresses, names, and roles.

Open Event Server <= 1.19.1 authentication-bypass data-exfiltration web-application cve
2r 4t 1c