Skip to content
OpenAdvisories

Archive

23 February 2026

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.1
    CVE-2025-68930 Public exploit

    Traccar Missing Origin Validation in WebSockets

    Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability in the `/api/socket` endpoint. The application fails to validate the `Origin` header during the WebSocket handsha…

  • High 8.5
    CVE-2025-67733 Public exploit

    Valkey Affected by RESP Protocol Injection via Lua error_reply

    Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampe…

  • High 8.8
    CVE-2026-25747 Public exploit

    Apache Camel LevelDB: Deserialization of Untrusted Data in Camel LevelDB

    Deserialization of Untrusted Data vulnerability in Apache Camel LevelDB component. The Camel-LevelDB DefaultLevelDBSerializer class deserializes data read from the LevelDB aggregation repository using java.io.ObjectInputStream without applying any ObjectInput…

  • High 7.4
    CVE-2025-63946 Public exploit

    A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables…

  • High 7.4
    CVE-2025-63945 Public exploit

    A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a l…