Skip to content
OpenAdvisories

Archive

17 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /17 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low —
    GHSA-chm2-m3w2-wcxm

    OpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch

    ### Summary Google Chat allowlisting supports matching by sender email in addition to immutable sender resource name (`users/<id>`). This weakens identity binding if a deployment assumes allowlists are strictly keyed by immutable principals. ### Affected Pack…

    openclaw clawdbot npm
  • Low 3.8
    CVE-2025-36183

    Privileged User File Upload Vulnerability Leading to Limited Server-Side Execution affects watsonx.data

    IBM watsonx.data 2.2 through 2.2.1 IBM Lakehouse could allow a privileged user to upload malicious files that could be executed server to modify limited files or data.

    IBM watsonx.data
  • Low 3.1
    GHSA-g27f-9qjv-22pm

    OpenClaw log poisoning (indirect prompt injection) via WebSocket headers

    ### Summary In `openclaw` versions prior to `2026.2.13`, OpenClaw logged certain WebSocket request headers (including `Origin` and `User-Agent`) without neutralization or length limits on the "closed before connect" path. If an unauthenticated client can reac…

    openclaw npm
  • Low 3.5
    CVE-2026-2622

    Blossom Article Title ArticleController.java content cross site scripting

    A vulnerability was detected in Blossom up to 1.17.1. This vulnerability affects the function content of the file blossom-backend/backend/src/main/java/com/blossom/backend/server/article/draft/ArticleController.java of the component Article Title Handler. The…

  • Low 3.1
    CVE-2026-0102

    Microsoft Edge (Chromium-based) Defense in Depth Vulnerability

    Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number…

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • Low 3.7
    CVE-2026-2618

    Beetel 777VR1 SSH Service risky encryption

    A vulnerability was determined in Beetel 777VR1 up to 01.00.09. This impacts an unknown function of the component SSH Service. This manipulation causes risky cryptographic algorithm. The attack is possible to be carried out remotely. The attack is considered …

    Beetel 777VR1
  • Low 3.5
    CVE-2024-55271 Public exploit

    A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0. This iss…