Skip to content
OpenAdvisories

Archive

16 October 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2025-62506 Public exploit

    MinIO vulnerable to privilege escalation via session policy bypass in service accounts and STS

    MinIO is a high-performance object storage system. In all versions prior to RELEASE.2025-10-15T17-29-55Z, a privilege escalation vulnerability allows service accounts and STS (Security Token Service) accounts with restricted session policies to bypass their i…

  • High 8.2
    CVE-2025-22381 Public exploit

    Aggie 2.6.1 has a Host Header injection vulnerability in the forgot password functionality, allowing an attacker to res…