Skip to content
OpenAdvisories

Archive

4 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /4 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.1
    CVE-2026-22038 Public exploit

    AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks

    AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.46, the AutoGPT platform's Stagehand integration blocks log API keys and authe…

    Significant-Gravitas AutoGPT
  • High 7.8
    CVE-2026-25546 Public exploit

    Godot MCP is vulnerable to Command Injection via unsanitized projectPath

    Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g…

    Coding-Solo godot-mcp @coding-solo/godot-mcp npm
  • High 8.3
    CVE-2026-25513 Public exploit

    FacturaScripts has SQL Injection vulnerability in API ORDER BY Clause

    FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.81, FacturaScripts contains a critical SQL injection vulnerability in the REST API that allows authenticated API users to execute arbitrary SQL queries t…

    NeoRazorX facturascripts facturascripts/facturascripts Packagist
  • High 8.7
    CVE-2026-25514 Public exploit

    FacturaScripts has SQL Injection vulnerability in Autocomplete Actions

    FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.81, FacturaScripts contains a critical SQL injection vulnerability in the autocomplete functionality that allows authenticated attackers to extract sensi…

    NeoRazorX facturascripts facturascripts/facturascripts Packagist
  • High 8.7
    CVE-2025-69215 Public exploit

    OpenSTAManager has an SQL Injection in the Stampe Module

    OpenSTAManager is an open source management software for technical assistance and invoicing. In version 2.9.8 and prior, there is a SQL Injection vulnerability in the Stampe Module. At time of publication, no known patch exists.

    devcode-it openstamanager devcode-it/openstamanager Packagist
  • High 8.7
    CVE-2025-69213 Public exploit

    OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)

    OpenSTAManager is an open source management software for technical assistance and invoicing. In version 2.9.8 and prior, a SQL Injection vulnerability exists in the ajax_complete.php endpoint when handling the get_sedi operation. An authenticated attacker can…

    devcode-it openstamanager devcode-it/openstamanager Packagist
  • High 7.0
    CVE-2026-20980 Public exploit

    Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary command…

    Samsung Mobile Samsung Mobile Devices