3 CVEs
CRITICAL
CVSS 9.8
Coral Server Authorization and Authentication Bypass
2026-03-10
CVE-2026-30968
CRITICAL
Coral Server open collaboration platform has a missing authorization enabling unauthenticated access to all collaboration data.
9.8
CVSS
0.0%
EPSS
CVE-2026-30970
CRITICAL
Coral Server has a third missing authorization flaw.
9.1
CVSS
0.1%
EPSS
CVE-2026-30969
CRITICAL
Coral Server has an IDOR vulnerability enabling cross-user data access.
9.1
CVSS
0.0%
EPSS