CVE-2026-52780 — OpenProject: Cache store poisoning leads to Remote Code Execution (RCE)
OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, cache store poisoning leads to Remote Code Execution (RCE). This vulnerability is …
Published: 2026-06-26 · CVSS: 9.6 · CVSS 3.1
OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, cache store poisoning leads to Remote Code Execution (RCE). This vulnerability is fixed in 17.3.3 and 17.4.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7