Skip to content
OpenAdvisories

Archive

11 February 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-26215 Public exploit

    manga-image-translator Shared API Unsafe Deserialization RCE

    manga-image-translator version beta-0.3 and prior in shared API mode contains an unsafe deserialization vulnerability that can lead to unauthenticated remote code execution. The FastAPI endpoints /simple_execute/{method} and /execute/{method} deserialize atta…

  • Critical 9.8
    CVE-2026-1357 Public exploit Scanner template EPSS 39%

    Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload

    The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process combined with…