Skip to content
OpenAdvisories

Archive

2 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /2 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • None 0.0
    CVE-2025-61638 Public exploit

    Sanitizer::validateAttributes data-XSS

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid. This vulnerability is associated with program files includes/parser/Sanitizer.Php, src/C…

    Wikimedia Foundation MediaWiki Parsoid mediawiki Web / CMS Debian Ubuntu
  • Critical 9.8
    CVE-2026-22778 Public exploit Scanner template EPSS 18%

    vLLM leaks a heap address when PIL throws an error

    vLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to before 0.14.1, when an invalid image is sent to vLLM's multimodal endpoint, PIL throws an error. vLLM returns this error to the client, leaking a heap address. With this l…

    vLLM vLLM vllm PyPI
  • High 8.5
    CVE-2026-22226 Public exploit

    Command Injection Vulnerability on TP-Link Archer BE230 and AX73

    A command injection vulnerability may be exploited after the admin's authentication in the VPN server configuration module on TP-Link Archer BE230 v1.2 and Archer AX73 v2. Successful exploitation could allow an attacker to gain full administrative control of …

    TP-Link Systems Archer BE230 v1.2 Archer AX73 v2 Network devices
  • Medium 6.8
    CVE-2026-1232 Public exploit

    Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows

    A medium-severity vulnerability has been identified in BeyondTrust Privilege Management for Windows versions <=25.7. Under certain conditions, a local authenticated user with elevated privileges may be able to bypass the product’s anti-tamper protections, whi…

    BeyondTrust Privilege management for Windows Windows
  • High 8.0
    CVE-2025-9974 Public exploit

    Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product

    The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated a…

    Nokia Nokia ONT
  • Medium 6.5
    CVE-2026-20404 Public exploit

    In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of servic…

    MediaTek MediaTek chipset
  • Critical 9.8
    CVE-2025-15030 Public exploit

    User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password Reset

    The User Profile Builder WordPress plugin before 3.15.2 does not have a proper password reset process, allowing a few unauthenticated requests to reset the password of any user by knowing their username, such as administrator ones, and therefore gain access t…

    Web / CMS