OpenReception
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 20 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 6, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →OpenReception: unauthenticated ML-KEM key injection into the staff-crypto recipient directory in any tenant
OpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agent
OpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenants
OpenReception: invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookie
OpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation`
OpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeover
OpenReception vulnerable to unauthenticated staff crypto poisoning that breaks E2E recipient directory
OpenReception: WebAuthn passkey injection allows account takeover
OpenReception: Tenant admin self-promotes to GLOBAL_ADMIN
OpenReception has unauthenticated GLOBAL_ADMIN account creation post-bootstrap
Monitor OpenReception in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.