Critical (9.8) in Micro Focus Operation Bridge Reporter (OBR). In CISA KEV since 2021-11-03. EPSS 97% chance of exploitation in the next 30 days.
Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.
Severity
CVSS 3.1
9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
97% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)