Ussd Gateway (Opencode) - vulnerabilities (CVEs)
6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-03-05. Vendor: Opencode.
CVEs of Ussd Gateway
- CVE-2025-70614 - CVSS 8.1 (high), 2026-03-05: OpenCode Systems OC Messaging / USSD Gateway OC Release 6.32.2 contains a broken access control vulnerability in the web-based control panel allowing…
- CVE-2025-65236 - CVSS 9.8 (critical), 2025-11-26: OpenCode Systems USSD Gateway OC Release: 5 was discovered to contain a SQL injection vulnerability via the Session ID parameter in the…
- CVE-2025-65239 - CVSS 4.3 (medium), 2025-11-26: Incorrect access control in the /aux1/ocussd/trace endpoint of OpenCode Systems USSD Gateway OC Release:5, version 6.13.11 allows attackers with low-level…
- CVE-2025-65238 - CVSS 6.5 (medium), 2025-11-26: Incorrect access control in the getSubUsersByProvider function of OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 allows attackers with low-level…
- CVE-2025-65237 - CVSS 6.1 (medium), 2025-11-26: A reflected cross-site scripted (XSS) vulnerability in OpenCode Systems USSD Gateway OC Release: 5 allows attackers to execute arbitrary JavaScript in the…
- CVE-2025-65235 - CVSS 9.8 (critical), 2025-11-26: OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via the ID parameter in the…
