Skip to content
OpenAdvisories

Archive

13 February 2026

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.2
    CVE-2026-1844 Public exploit

    PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored Cross-Site Scripting

    The PixelYourSite PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter and the 'pys_landing_page' parameter in all versions up to, and including, 12.4.0.2 due to insufficient input sanitization and output …

  • High 7.7
    CVE-2026-25991 Public exploit

    Tandoor Recipes affected by Blind SSRF with Internal Network Access via Recipe Import

    Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, there is a Blind Server-Side Request Forgery (SSRF) vulnerability in the Cookmate recipe import feature of Tandoor Recipes. The application fa…

  • High 8.8
    CVE-2026-2441 Exploited Public exploit EPSS 54%

    Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code insid…

    KEV Feb 17, 2026
  • High 8.1
    CVE-2026-26268 Public exploit

    Cursor sandbox escape via Git hooks

    Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in versions prior to 2.5. A malicious agent (ie prompt injection) could write to improperly protected .git settings, including git hooks, which m…

  • High 7.8
    CVE-2026-23111 Public exploit

    netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() nft_map_catchall_activate() has an inverted element activity check compared to its non-catchall counterpart nft…