whaticket-community vulnerabilities
CVEs whose affected-version data names the whaticket-community package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-111708Critical· 9.8PoCWhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup
WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to …
▾ Abyssalcanove · whaticket-communityvia CVEORG
CVE-2026-111709Medium· 5.4WhaTicket Community through commit cf04795 IDOR via /tickets/:ticketId and /messages/:ticketId
WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerability that allows authenticated agents to access other agents' tickets because ShowTicketService performs no ownership or queue checks. Attac…
▾ Sunlitcanove · whaticket-communityvia CVEORG