PatchTheCVEapereo vulnerabilities
Recent CVEs affecting apereo products. 13 tracked.
apereo has 13 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-03-20. Highest priority: CVE-2026-32985 (score 66/100).
- CVE-2025-55202 MEDIUM 5.3 UPGRADE Opencast is a free, open-source platform to support the management of educational audio and video content
- CVE-2025-61906 MEDIUM 4.3 UPGRADE Opencast is a free, open-source platform to support the management of educational audio and video content
- CVE-2025-61788 MEDIUM 5.4 UPGRADE Opencast is a free, open-source platform to support the management of educational audio and video content
- CVE-2026-32985 CRITICAL 9.8 UPGRADE Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability
- CVE-2025-54380 MEDIUM 6.5 UPGRADE Opencast is a free, open-source platform to support the management of educational audio and video content
- CVE-2025-3986 MEDIUM 4.3 DOWNGRADE A vulnerability was found in Apereo CAS 5.2.6
- CVE-2025-3985 LOW 2.7 DOWNGRADE A vulnerability was found in Apereo CAS 5.2.6
- CVE-2025-3984 MEDIUM 5.0 DOWNGRADE A vulnerability was found in Apereo CAS 5.2.6 and classified as critical
- CVE-2024-52797 MEDIUM 6.5 UPGRADE Opencast is free and open source software for automated video capture and distribution
- CVE-2024-4399 CRITICAL 9.1 MITIGATE The does not validate a parameter before making a request to it, which could allow unauthenticated users to p
- CVE-2024-11209 MEDIUM 6.3 DOWNGRADE A vulnerability was found in Apereo CAS 6.6
- CVE-2024-11208 LOW 3.7 DOWNGRADE A vulnerability was found in Apereo CAS 6.6 and classified as problematic
- CVE-2024-11207 MEDIUM 4.3 DOWNGRADE A vulnerability has been found in Apereo CAS 6.6 and classified as problematic
FAQ
How do I fix apereo vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is apereo being exploited right now?
None of the tracked apereo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which apereo CVE should I patch first?
CVE-2026-32985 currently ranks highest (66/100): Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability.