CVE-2021-40612: Opmantek Open-Audit

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in code_igniter/application/controllers/util.php allows an attacker perform command execution without echoes.

Affected products

• Opmantek Open-Audit: from 3.5.0, before 4.3.0 (fixed in 4.3.0)

Published 2021-12-22. Last modified 2026-06-17.