Skip to content
OpenAdvisories

Archive

11 January 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2025-68493 Public exploit Scanner template EPSS 50%

    Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component

    Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Struts: from 2.2.1 through 6.1.0. Users are recommended to upgrade to version 6.1.1, which fixes the issue.

  • Medium 6.3
    CVE-2026-0842 Public exploit

    Flycatcher Toys smART Sketcher Bluetooth Low Energy missing authentication

    A flaw has been found in Flycatcher Toys smART Sketcher up to 2.0. This affects an unknown part of the component Bluetooth Low Energy Interface. This manipulation causes missing authentication. The attack can only be done within the local network. The exploit…