Skip to content
OpenAdvisories

Archive

1 January 2026

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low 3.3

    Open5GS Bearer QoS IE Length types.c ogs_gtp2_parse_bearer_qos denial of service

    A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function ogs_gtp2_parse_bearer_qos in the library lib/gtp/v2/types.c of the component Bearer QoS IE Length Handler. Performing a manipulation results in denial o…

  • Low 3.3

    Open5GS GTPv2-C F-TEID s11-handler.c sgwc_s11_handle_create_session_request denial of service

    A vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwc_s11_handle_create_session_request of the file src/sgwc/s11-handler.c of the component GTPv2-C F-TEID Handler. Such manipulation leads to denial of service. The attack must be…

  • Low 2.4

    xnx3 wangmarket Add Global Variable save.do cross site scripting

    A vulnerability was found in xnx3 wangmarket up to 6.4. This affects an unknown function of the file /siteVar/save.do of the component Add Global Variable Handler. The manipulation of the argument Remark/Variable Value results in cross site scripting. The att…

  • Low 2.0
    CVE-2026-21437 Public exploit

    eopkg vulnerable to package file list integrity bypass

    eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by `eopkg`. This requires the installation of a package from a malicious or compromised source. Files in such pac…