Skip to content
OpenAdvisories

Archive

2 February 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-22226 Public exploit

    Command Injection Vulnerability on TP-Link Archer BE230 and AX73

    A command injection vulnerability may be exploited after the admin's authentication in the VPN server configuration module on TP-Link Archer BE230 v1.2 and Archer AX73 v2. Successful exploitation could allow an attacker to gain full administrative control of …

  • High 8.0
    CVE-2025-9974 Public exploit

    Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product

    The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated a…