CVE-2026-34020 | Apache OpenMeetings up to 8.x REST Login Endpoint username/password information disclosure

A vulnerability was found in Apache OpenMeetings up to 8.x and classified as problematic. Affected by this vulnerability is an unknown functionality of the component REST Login Endpoint. The manipulation of the argument username/password results in information disclosure.

This vulnerability was named CVE-2026-34020. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.