CVE-2026-116817 — Vulnerability intelligence

Openpanel-dev — openpanel

Published: 2026-10-26T23:05:44.806Z

CVSS

6.9

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access the Bull Board dashboard served on the worker HTTP port. Attackers can query /api/queues and call mutating Bull Board APIs to add, retry, or clean jobs and read queue data, metrics, and datastore health.

Sources

• CVE-2026-116817
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-116817