Medium severity5.3NVD Advisory· Published Sep 19, 2026· Updated Oct 2, 2026
CVE-2026-93984
CVE-2026-93984
Description
OpenPanel tracking API through 2.3.0 fails to verify client secret cryptographic hash before authorizing revenue events and bot filtering. Attackers with only a public client ID can supply arbitrary dummy secrets to inject forged revenue metrics and bypass bot detection filters.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=2.3.0
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.