Open WebU vulnerabilities
3 known CVE vulnerabilities in Open WebU, translated and rated.
- CVE-2026-0766Very high risk· EPSS 98%
This CVE has been rejected. Open WebU's investigation showed that this is intended functionality of the Plugins extension system, where users with the relevant permission author Python that the server executes by design, and not a security issue.
- CVE-2026-0767Low risk· EPSS 17%
This CVE has been rejected. Open WebU's investigation showed that this describes the behavior of plain HTTP rather than a defect in the product. TLS termination is the operator's deployment decision, as it is for any backend that speaks HTTP, and not a security issue.
- CVE-2026-0765Elevated risk· EPSS 74%
This CVE has been rejected. Open WebU's investigation showed that this is intended functionality of the Plugins extension system, where users with the relevant permission author Python that the server executes by design, and not a security issue.