Skip to content
OpenAdvisories

Archive

19 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /19 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-26189 Public exploit

    Trivy Action has a script injection via sourced env file in composite action

    Trivy Action runs Trivy as GitHub action to scan a Docker container image for vulnerabilities. A command injection vulnerability exists in `aquasecurity/trivy-action` versions 0.31.0 through 0.33.1 due to improper handling of action inputs when exporting envi…

    Aqua Security trivy-action aquasecurity/trivy-action GitHub Actions
  • Medium 4.3
    CVE-2026-27472 Public exploit

    SPIP < 4.4.9 Blind Server-Side Request Forgery via Syndicated Sites

    SPIP before 4.4.9 allows Blind Server-Side Request Forgery (SSRF) via syndicated sites in the private area. When editing a syndicated site, the application does not verify that the syndication URL is a valid remote URL, allowing an authenticated attacker to m…

    SPIP SPIP spip spip Debian Ubuntu
  • Medium 5.3
    CVE-2026-26744 Public exploit

    A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible …