What is the CVSS score of EUVD-2026-43666?

EUVD-2026-43666 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.7%.

Which versions of Apache OpenMeetings are affected by EUVD-2026-43666?

Apache OpenMeetings 5.0.0-9.0.x contains an arbitrary file read vulnerability allowing room moderators to extract server credentials and secrets via the WhiteBoard download endpoint.. A patch is available.

How to fix or mitigate EUVD-2026-43666?

Within 24 hours: Identify all internet-exposed OpenMeetings instances running versions 5.0.0-9.0.x and immediately restrict room moderator role assignments to essential trusted users only; enable detailed logging and alerting on the WhiteBoard download endpoint (/download) to detect directory traversal attempts. Within 7 days: Conduct a full audit of all moderator-assigned users and revoke moderator access for inactive or suspicious accounts; review server logs for evidence of unauthorized credential file access or directory traversal attempts. Within 30 days: Implement network segmentation to restrict OpenMeetings access to internal networks only; establish a daily monitoring routine for Apache OpenMeetings security advisories; develop a contingency migration plan to alternative collaboration platforms if vendor patching becomes unavailable.

Apache OpenMeetings EUVD-2026-43666

| CVE-2026-49488 MEDIUM

Path Traversal (CWE-22)

2026-07-14

GHSA-436m-m73c-vq4g

Path Traversal Apache Openmeetings

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

6.5 MEDIUM

Network-delivered via crafted HTTP request; PR:L for required room moderator privilege; read-only impact so I:N and A:N.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Jul 14, 2026 - 18:20 EUVD

CVSS changed

Jul 14, 2026 - 17:07 NVD

6.5 (MEDIUM)

Analysis Generated

Jul 14, 2026 - 10:18 vuln.today

CVE Published

Jul 14, 2026 - 09:57 oss-security

HIGH

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

AnalysisAI

Arbitrary file read in Apache OpenMeetings 5.0.0 through 9.0.x allows any room moderator to exfiltrate files accessible to the OS account running the server, including credentials and secrets, via a crafted download request to the WhiteBoard download service. The vulnerability stems from insufficient path validation in the WB download endpoint, enabling directory traversal outside the intended file scope. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Obtain moderator rights in any room

Delivery

Craft path traversal download request to WB service

Exploit

Server returns arbitrary OS-readable file

Execution

Harvest credentials or secrets from response

Impact

Leverage stolen credentials for deeper compromise

Access

Obtain moderator rights in any room

Delivery

Craft path traversal download request to WB service

Exploit

Server returns arbitrary OS-readable file

Execution

Harvest credentials or secrets from response

Impact

Leverage stolen credentials for deeper compromise

Vulnerability AssessmentAI

Exploitation	Exploitation requires the attacker to hold moderator rights in any room on the target Apache OpenMeetings instance - this is the key privilege gate. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	No vendor-provided CVSS vector accompanies this CVE, so risk signals are limited. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker registers an account on an OpenMeetings instance that permits self-registration, creates or joins a room where they hold or can obtain moderator rights, and then sends a crafted HTTP download request to the WhiteBoard download endpoint with a path traversal sequence (e.g., ../../etc/passwd or paths to application configuration files containing database credentials). The server processes the request without sufficient path restriction and returns the contents of the targeted file, allowing the attacker to harvest secrets and pivot to deeper system compromise. …
Remediation	Upgrade Apache OpenMeetings to version 9.1.0, which was released on 2026-07-08 and explicitly fixes CVE-2026-49488 by adding additional security checks in the WB download service. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Identify all internet-exposed OpenMeetings instances running versions 5.0.0-9.0.x and immediately restrict room moderator role assignments to essential trusted users only; enable detailed logging and alerting on the WhiteBoard download endpoint (/download) to detect directory traversal attempts. …

Threat intelligence, references, and detailed analysis are available after sign-in.