Skip to content
OpenAdvisories

Archive

26 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /26 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-22408

    In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free. This …

    Google Android Android
  • Critical 9.8
    CVE-2025-22403

    In sdp_snd_service_search_req of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after…

    Google Android Android
  • Critical 9.8
    CVE-2025-0075

    In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use aft…

    Google Android Android
  • Critical 9.8
    CVE-2025-0074

    In process_service_attr_rsp of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after f…

    Google Android Android
  • Critical 9.2
    CVE-2025-7775 Exploited Public exploit EPSS 21%

    Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service

    Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC an…

    NetScaler ADC Gateway
    KEV Aug 26, 2025
  • Critical 9.8
    CVE-2025-41702

    egOS WebGUI Hard-Coded JWT Secret Enables Authentication Bypass

    The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key.

    Welotec EG503L_4GB EG804W EG500Mk2-A11001-000201
  • Critical 9.1
    CVE-2024-39335

    Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclose…

  • Critical 9.1
    CVE-2025-55443

    Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details …

  • Critical 9.1
    CVE-2025-55526

    n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function …

  • Critical 9.8
    CVE-2025-52353

    Badaso CMS file upload vulnerability

    An arbitrary code execution vulnerability in Badaso CMS 2.9.11. The Media Manager allows authenticated users to upload files containing embedded PHP code via the file-upload endpoint, bypassing content-type validation. When such a file is accessed via its URL…

    badaso/core Packagist