CVE-2026-24777 — OpenProject is an open-source, web-based project management software. Prior to 17.0.2, users with the Manage Users permission can lock and unlock users. This functionality should only be possible for — CVE Database · The Intelligence Room