Skip to content
OpenAdvisories

Archive

5 February 2026

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.2
    CVE-2026-1953 Public exploit

    Stored Cross Site Scripting(XSS) in Nukegraphic CMS V3.1.2

    Nukegraphic CMS v3.1.2 contains a stored cross-site scripting (XSS) vulnerability in the user profile edit functionality at /ngc-cms/user-edit-profile.php. The application fails to properly sanitize user input in the name field before storing it in the databa…

  • High 8.8
    CVE-2025-69906 Public exploit

    Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin. The application relies …

  • High 8.8
    CVE-2025-68722 Public exploit

    Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability …

  • Critical 9.0
    CVE-2025-68723 Public exploit

    Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS) vulnerabilities in the WebAdmin i…

  • High 8.1
    CVE-2025-68721 Public exploit

    Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delega…