Skip to content
OpenAdvisories

Archive

31 December 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.9
    CVE-2025-69286 Public exploit

    RAGFlow has Predictable Token Generation Leading to Authentication Bypass Vulnerability

    RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.22.0, the use of an insecure key generation algorithm in the API key and beta (assistant/agent share auth) token generation process allows these tokens to be mutuall…

  • High 7.1
    CVE-2025-2026 Public exploit

    The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attack…

  • High 7.8
    CVE-2025-15276 Public exploit

    FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

    FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnera…