[ Vendor · 2 CVEs ]
Liquid-co
CVEs affecting Liquid-co published in the last 30 days, plus any Liquid-co CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-103397 | 30 Sep 2026 | CVSS 5.6 | Liquid-co OpenSaveOpenSave before 2.4.0-beta.1 fails to validate sender identity in WAN relay requests, allowing unpaired room members to impersonate paired devices by… | |
| CVE-2026-103398 | 30 Sep 2026 | CVSS 8.1 | Liquid-co OpenSaveOpenSave through 2.4.0 fails to properly validate save paths supplied by paired peers in the manifest request handler. Attackers can specify… |