OpenReplay — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• CVE-2026-55879: Critical XSS Vulnerability in OpenReplay Leads to Account Takeover

  CVE-2026-55879 is a critical vulnerability affecting OpenReplay versions 1.24.0 to 1.25.0, allowing unauthenticated attackers to execute stored XSS in the dashboard. The flaw arises from the OpenReplay tracking SDK's…

  3 articles · Updated July 11, 2026

Recent Intelligence Reports

• CVE-2026-55879 - OpenReplay: Unauthenticated stored XSS leads to dashboard account takeover Latest High/Critical Vulnerabilitiy Feed / 18h CVE ID : CVE-2026-55879 Published : July 10, 2026, 9:16 p.m. 10 hours, 30 minutes ago Description : OpenReplay is a self-hosted session replay suite. From 1.24.0 before 1.25.0, the OpenReplay tracking SDK accepts custom event names and captured page URLs from any visitor using a public project key, stores them in ClickHouse without output encoding, and later — cvefeed.io · July 11, 2026
• CVE-2026-55879 - Exploits & Severity — Feedly · July 11, 2026

Related Entities