OAS Platform - Authentication Bypass (CVE-2022-26833)
Description
An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this vulnerability.
psychologyCrowdSec Analysis
CVE-2022-26833 is an improper authentication vulnerability affecting the Open Automation Software OAS Platform, enabling attackers to bypass controls and gain unauthorized access to REST API functionality.
CrowdSec has been tracking this vulnerability and its exploits since 4th of April 2025.
Insights from the CrowdSec network reveal that the attackers trying to exploit CVE-2022-26833 are composed of a fairly even mix of opportunistic and targeted actors. Some attackers employ preliminary reconnaissance, while others use indiscriminate scanning. In addition, according to the CrowdSec network, attack volume against CVE-2022-26833 has dipped slightly compared to the previous week. Although still commonly targeted, the decline suggests a cooling-off period. Long-term relevance remains, but attention is waning.
Observed exploitation attempts commonly target URLs containing /oasrest/v2/authenticate.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2022-05-25 |
| Rule Released | 2025-04-04 |
| CrowdSec First Seen | 2025-04-07 |