Skip to content
OpenAdvisories

Archive

26 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /26 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Low 3.7
    CVE-2025-11989

    Missing Authorization in GitLab

    GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to execute unauthorized quick actions by including malicious commands in…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 10.0
    CVE-2025-12285

    Missing Initial Password Change

    Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

    Azure Access Technology BLU-IC2 BLU-IC4
  • Medium 6.9
    CVE-2025-12284

    Lack of Input Validation

    Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

    Azure Access Technology BLU-IC2 BLU-IC4
  • Critical 10.0
    CVE-2025-12275

    Mail Configuration File Manipulation + Command Execution

    Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

    Azure Access Technology BLU-IC4 BLU-IC2
  • Medium 6.9
    CVE-2025-12278

    Logout Functionality not Working

    Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

    Azure Access Technology BLU-IC4 BLU-IC2
  • High 7.3
    CVE-2025-8709

    SQL Injection in langchain-ai/langchain

    A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite store implementation. The affected version is langgraph-checkpoint-sqlite 2.0.10. The vulnerability arises from improper handling of filter o…

    langchain-ai langchain-ai/langchain langgraph-checkpoint-sqlite PyPI