CVE-2025-70614
CVSS 8.1 HIGH: openCode Systems OC Messaging / USSD Gateway OC Release 6.32.2 contains a broken access control vulnerability in the… EPSS 0.3% (17º percentile).
Vulnerabilità ed exploit · Attacco ad app web
Una vulnerabilità in OpenCode OC Messaging e USSD Gateway 6.32.2 permette a un utente autenticato con privilegi bassi di accedere a SMS al di fuori del proprio tenant tramite un parametro identifier manipolato.
1 fonte · 26 mar
CVSS 8.1 HIGH: openCode Systems OC Messaging / USSD Gateway OC Release 6.32.2 contains a broken access control vulnerability in the… EPSS 0.3% (17º percentile).
CISA Advisories
OpenCode Systems OC Messaging and Custom Messaging Gateway | CISA
OpenCode Systems OC Messaging and Custom Messaging Gateway Summary Successful exploitation of this vulnerability could allow an authenticated low-privileged user to gain access to SMS messages outside of their authorized tenant scope via a crafted company or tenant identifier…
originalePart of the PlainSec briefing for 2026-03-27
Every edition of this story: OpenCode Messaging permette accesso cross-tenant a SMS in 6.32.2