Skip to content
OpenAdvisories

Archive

10 February 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-21531 Public exploit

    Azure SDK for Python Remote Code Execution Vulnerability

    Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network.

  • Critical 9.3
    CVE-2026-25993 Public exploit

    EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys

    EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application embeds path / request_path values—derived from the url_key stored in the database—into SQL statements via string concatenation and passes th…