Skip to content
OpenAdvisories

Archive

23 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /23 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-58041

    Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions

    Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. …

    WONKO Smolder
  • Critical 10.0
    CVE-2026-23693 Scanner template

    ElementsKit Elementor Addons < 3.7.9 Unauthenticated Mailchimp REST Endpoint

    ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (elementskit-lite) WordPress plugin versions prior to 3.7.9 expose the REST endpoint /wp-json/elementskit/v1/widget/mailchimp/subscribe without authentication. The endpoint accep…

    roxnor ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor Web / CMS
  • Critical 9.3
    CVE-2025-41002

    SQL injection in Infoticketing

    SQL injection vulnerability in Infoticketing. This vulnerability allows an unauthenticated attacker to retrieve, create, update, and delete the database by sending a POST request using the 'code' parameter in '/components/cart/cartApplyDiscount.php'.

    MANANTIAL DE IDEAS Infoticketing
  • Critical 9.1
    CVE-2026-23552 Public exploit

    Apache Camel: Camel-Keycloak: Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy

    Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy Apache Camel Keycloak component.  The Camel-Keycloak KeycloakSecurityPolicy does not validate the iss (issuer) claim of JWT tokens against the configured realm. A token issued by one Keycloak realm…

    Apache Software Foundation Apache Camel org.apache.camel:camel-keycloak Maven
  • Critical 9.8
    CVE-2026-24494

    SQL injection vulnerability in Order Up Online Ordering System

    SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id parameter in a POST request.

    Order Up Online Ordering System
  • Critical 9.8
    CVE-2025-61144

    libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

    tiff tiff qtwebengine-opensource-src libtiff Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2025-70327

    TOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument injection vulnerability in the setDiagnosisCfg handler of …

  • Critical 9.1
    CVE-2025-70043

    An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. The application …