All 5 CVE vulnerabilities found in coop, with AI-generated Chinese analysis, references, and POCs.
Vendor: roostorg
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-63400 | Coop sessions are not invalidated on password reset CWE-613 | 2.3 | Low | 2026-10-30 |
| CVE-2026-63398 | Coop has SAML cross-tenant authentication bypass CWE-287 | 7.4 | High | 2026-10-30 |
| CVE-2026-63401 | Coop has cross-org IDOR in addAccessibleQueuesForUser / removeAccessibleQueuesForUser CWE-639 | 5.3 | Medium | 2026-10-30 |
| CVE-2026-63396 | Coop has a data leak via unauthenticated GraphQL Query.allOrgs CWE-306 | 8.7 | High | 2026-10-30 |
| CVE-2026-63399 | Coop: Unauthenticated org provisioning via GraphQL Mutation.createOrg CWE-306 | 6.9 | Medium | 2026-10-30 |
All 5 known CVE vulnerabilities affecting coop with full Chinese analysis, references, and POCs where available.