Skip to content
OpenAdvisories

Archive

24 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /24 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

43 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-24420

    phpMyFAQ: Attachment download allowed without dlattachment right (broken access control)

    phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below allow an authenticated user without the dlattachment permission to download FAQ attachments due to a incomprehensive permissions check. The presence of a right key is improperly validat…

    thorsten phpMyFAQ thorsten/phpmyfaq phpmyfaq/phpmyfaq Packagist
  • Medium 6.5
    CVE-2026-24421 Public exploit

    phpMyFAQ missing authorization exposes /api/setup/backup to any authenticated user

    phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below have flawed authorization logic which exposes the /api/setup/backup endpoint to any authenticated user despite their permissions. SetupController.php uses userIsAuthenticated() but does…

    thorsten phpMyFAQ thorsten/phpmyfaq phpmyfaq/phpmyfaq Packagist
  • Medium 6.5
    CVE-2026-24401

    Avahi has Uncontrolled Recursion in lookup_handle_cname function

    Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAM…

    avahi avahi avahi avahi Debian Ubuntu Azure Linux Alpine Wolfi