CVE-2026-71854 - OpenAEV has unauthenticated access and missing object-level authorization on player lessons API
CVE ID :CVE-2026-71854 Published : Oct. 14, 2026, 9:17 p.m. | 15 minutes ago Description :OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default installation, the...