Skip to content
OpenAdvisories

Archive

19 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /19 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-26030 Public exploit

    Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution

    Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within the `InMemoryVectorStore` filter functionality. The problem has been fixed in version `python-1.39.4`. Users sh…

    Microsoft semantic-kernel semantic-kernel PyPI
  • Critical 9.8
    CVE-2025-71243 Public exploit Scanner template

    SPIP Saisies Plugin < 5.11.1 Remote Code Execution

    The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 contains a critical Remote Code Execution (RCE) vulnerability. An attacker can exploit this vulnerability to execute arbitrary code on the server. Users should immediately u…

    SPIP Saisies pour formulaire
  • Critical 9.8
    CVE-2026-0926 Public exploit Scanner template

    Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name]

    The Prodigy Commerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'parameters[template_name]' parameter. This makes it possible for unauthenticated attackers to include and read arbitrary files…

    prodigycommerce Prodigy Commerce Web / CMS
  • Critical 9.8
    CVE-2026-1405 Public exploit Scanner template

    Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload

    The Slider Future plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'slider_future_handle_image_upload' function in all versions up to, and including, 1.0.5. This makes it possible for unauthenticated atta…

    franchidesign Slider Future Web / CMS
  • Critical 9.1
    CVE-2025-55853 Public exploit

    SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery (SSRF). The PDF converter function does no…