Skip to content
OpenAdvisories

Archive

20 January 2026

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-21978 Public exploit

    Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Re…

  • Medium 5.8
    CVE-2026-21636 Public exploit

    A flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass network restrictions when `-…

  • Medium 6.5
    CVE-2026-0622 Public exploit

    Open 5GS WebUI uses a hard-coded JWT signing key

    Open 5GS WebUI uses a hard-coded JWT signing key (change-me) whenever the environment variable JWT_SECRET_KEY is unset

  • Medium 6.1
    CVE-2025-67263 Public exploit

    Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting (XSS) vulnerability in the Clients …

  • Medium 6.5
    CVE-2025-67261 Public exploit

    Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in …