Skip to content
OpenAdvisories

Archive

10 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /10 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

130 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-23688

    Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services)

    SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted.

    SAP SAP Fiori App (Manage Service Entry Sheets - Lean Services)
  • Medium 4.4
    CVE-2026-23685

    Insecure Deserialization vulnerability in SAP NetWeaver (JMS service)

    Due to a Deserialization vulnerability in SAP NetWeaver (JMS service), an attacker authenticated as an administrator with local access could submit specially crafted content to the server. If processed by the application, this content could trigger unintended…

    SAP SAP NetWeaver (JMS service)
  • Medium 5.9
    CVE-2026-23684

    Race condition vulnerability in SAP Commerce Cloud

    A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker adds products to a cart, it may result in a cart entry being created with erroneous product value which could be checked out. This leads to high impact on data i…

    SAP SAP Commerce Cloud
  • Medium 4.3
    CVE-2026-23681

    Missing Authorization check in a function module in SAP Support Tools Plug-In

    Due to missing authorization check in a function module in SAP Support Tools Plug-In, an authenticated attacker could invoke specific function modules to retrieve information about the system and its configuration. This disclosure of the system information co…

    SAP SAP Support Tools Plug-In
  • Medium 6.1
    CVE-2026-0505

    Multiple vulnerabilities in BSP Applications of SAP Document Management System

    The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This could result in unvalidated redirection to attacker-controlled websites, leading to a low impact on confidentiality and i…

    SAP SAP Document Management System
  • Medium 5.0
    CVE-2026-0486

    Missing Authorization Check in ABAP based SAP systems

    In ABAP based SAP systems a remote enabled function module does not perform necessary authorization checks for an authenticated user resulting in disclosure of system information.This has low impact on confidentiality. Integrity and availability are not impac…

    SAP ABAP based SAP systems
  • Medium 6.5
    CVE-2026-0484

    Missing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA

    Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specific transaction code and modify the text data in the system. This vulnerability has a high impact on integrity of the ap…

    SAP SAP NetWeaver Application Server ABAP and SAP S/4HANA
  • Medium 5.3
    GHSA-8grv-jq2g-cfhw

    amphp/http-server affected by HTTP/2 DDoS vulnerability

    Versions of `amphp/http-server` prior to `3.4.4` for the 3.x release branch and prior to `2.1.10` for the 2.x release branch are vulnerable to the HTTP/2 "MadeYouReset" DoS attack described by CVE-2025-8671 and https://kb.cert.org/vuls/id/767506. In versions …

    amphp/http-server Packagist
  • Medium 5.5
    CVE-2024-54192

    An issue inTcpreplay v4.5.1 allows a local attacker to cause a denial of service via a crafted file to the tcpedit_dlt_…

    tcpreplay Ubuntu
  • Medium 5.5
    CVE-2025-70347

    An issue in mquickjs before commit 74b7e (2026-01-15) allows a local attacker to cause a denial of service via a crafte…