Skip to content
OpenAdvisories

Archive

4 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /4 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-25526 Public exploit

    JinJava Bypass through ForTag leads to Arbitrary Java Execution

    JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Prior to versions 2.7.6 and 2.8.3, JinJava is vulnerable to arbitrary Java execution via bypass through ForTag. This allows arbitrary Java class instan…

    HubSpot jinjava com.hubspot.jinjava:jinjava Maven
  • Critical 9.4
    CVE-2026-25512 Public exploit Scanner template EPSS 20%

    Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler

    Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, and 26.0.5, there is a remote code execution (RCE) vulnerability in Group-Office. The endpoint email/message/tnefAttachmentFromTempFile dire…

    Intermesh groupoffice
  • Critical 9.4
    CVE-2026-25053 Public exploit

    n8n is Vulnerable to OS Command Injection in Git Node

    n8n is an open source workflow automation platform. Prior to versions 1.123.10 and 2.5.0, vulnerabilities in the Git node allowed authenticated users with permission to create or modify workflows to execute arbitrary system commands or read arbitrary files on…

    n8n-io n8n n8n npm
  • Critical 9.4
    CVE-2026-25049 Public exploit

    n8n Has an Expression Escape Vulnerability Leading to RCE

    n8n is an open source workflow automation platform. Prior to versions 1.123.17 and 2.5.2, an authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system command execution…

    n8n-io n8n n8n npm
  • Critical 9.8
    CVE-2025-5329 Public exploit

    SQLi in Martcode Software's Delta Course Automation

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Martcode Software Inc. Delta Course Automation allows SQL Injection. This issue affects Delta Course Automation: through 04022026. NOTE: The vendor was conta…

    Martcode Software Delta Course Automation