Skip to content
OpenAdvisories

Archive

8 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /8 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.0
    CVE-2025-59470 Public exploit

    This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a ma…

    Veeam Backup and Recovery
  • High 7.3
    CVE-2026-22241 Public exploit

    Open eClass has Unrestricted File Upload that Leads to Remote Code Execution (RCE)

    The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an arbitrary file upload vulnerability in the theme import functionality enables an attacker with administrative privileges to upload arbit…

    gunet openeclass
  • Critical 9.3
    CVE-2026-21876 Public exploit EPSS 17%

    OWASP CRS has multipart bypass using multiple content-type parts

    The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 and 3.3.8, the current rule 922110 has a bug when processing multipart requests with multiple parts. When the …

    coreruleset coreruleset modsecurity-crs modsecurity-crs Debian Ubuntu
  • Critical 10.0
    CVE-2026-21877 Public exploit Scanner template

    n8n is vulnerable to Remote Code Execution via Arbitrary File Write

    n8n is an open source workflow automation platform. In versions 0.121.2 and below, an authenticated attacker may be able to execute malicious code using the n8n service. This could result in full compromise and can impact both self-hosted and n8n Cloud instan…

    n8n-io n8n n8n npm
  • Critical 9.8
    CVE-2025-67325 Public exploit

    Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticate…

  • Critical 9.8
    CVE-2025-61246 Public exploit

    indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/review_action.php via the proId para…

  • High 7.5
    CVE-2025-65518 Public exploit

    Plesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS) condition. The vulnerability …

  • Medium 6.8
    CVE-2025-65731 Public exploit

    An issue was discovered in D-Link Router DIR-605L (Hardware version F1; Firmware version: V6.02CN02) allowing an attack…