Schorschii vulnerabilities

Products

• Oco-server 3

Newest

• schorschii oco-server OCO-Server: MDM /profile endpoint accepts self-signed PKCS#7 signatures (PKCS7_NOVERIFY): device MDM identity (certificate + private key) disclosure and device-record hijack CVE-2026-114611 9.1 CriticalOctober 22, 2026
• schorschii oco-server OCO-Server: Self-Service Portal uninstall-job authorization bypass CVE-2026-114515 6.5 MediumOctober 22, 2026
• schorschii oco-server OCO-Server: Stored XSS through agent hostnames in command buttons CVE-2026-61791 7.4 HighOctober 22, 2026