Skip to content
OpenAdvisories

Archive

31 December 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.9
    CVE-2025-69286 Public exploit

    RAGFlow has Predictable Token Generation Leading to Authentication Bypass Vulnerability

    RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.22.0, the use of an insecure key generation algorithm in the API key and beta (assistant/agent share auth) token generation process allows these tokens to be mutuall…

  • High 7.1
    CVE-2025-2026 Public exploit

    The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attack…

  • High 7.8
    CVE-2025-15276 Public exploit

    FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

    FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnera…

  • Medium 4.3
    CVE-2025-14783 Public exploit

    Easy Digital Downloads <= 3.6.2 - Unvalidated Redirect in Password Reset Flow via edd_redirect

    The Easy Digital Downloads plugin for WordPress is vulnerable to Unvalidated Redirect in all versions up to, and including, 3.6.2. This is due to insufficient validation on the redirect url supplied via the 'edd_redirect' parameter. This makes it possible for…