Skip to content
OpenAdvisories

Archive

6 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /6 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-1731 Exploited · Ransomware Public exploit Scanner template EPSS 94%

    Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

    BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to ex…

    BeyondTrust Remote Support(RS) & Privileged Remote Access(PRA)
    KEV Feb 13, 2026
  • Critical 9.8
    CVE-2026-25544 Public exploit

    Payload has an SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters

    Payload is a free and open source headless content management system. Prior to 3.73.0, when querying JSON or richText fields, user input was directly embedded into SQL without escaping, enabling blind SQL injection attacks. An unauthenticated attacker could e…

    Payload CMS payload @payloadcms/drizzle npm
  • Critical 10.0
    CVE-2026-25632 Public exploit

    EPyT-Flow has unsafe JSON deserialization (__type__)

    EPyT-Flow is a Python package designed for the easy generation of hydraulic and water quality scenario data of water distribution networks. Prior to 0.16.1, EPyT-Flow’s REST API parses attacker-controlled JSON request bodies using a custom deserializer (my_lo…

    WaterFutures EPyT-Flow epyt-flow PyPI
  • Critical 9.1
    CVE-2026-25643 Public exploit

    Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape

    Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to 0.16.4, a critical Remote Command Execution (RCE) vulnerability has been identified in the Frigate integration with go2rtc. The application does not saniti…

    blakeblackshear frigate
  • Critical 9.4
    CVE-2025-69212 Public exploit

    OpenSTAManager has an OS Command Injection in P7M File Processing

    OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a…

    devcode-it openstamanager devcode-it/openstamanager Packagist
  • Critical 9.1
    CVE-2026-21643 Exploited Public exploit Scanner template EPSS 98%

    An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet Forti…

    Fortinet FortiClientEMS Network devices
    KEV Apr 13, 2026