Skip to content
OpenAdvisories

Archive

25 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /25 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-2636 Public exploit

    Denial of Service in Microsoft OS

    This vulnerability is caused by a CWE‑159: "Improper Handling of Invalid Use of Special Elements" weakness, which leads to an unrecoverable inconsistency in the CLFS.sys driver. This condition forces a call to the KeBugCheckEx function, allowing an unprivileg…

    Microsoft Windows OS Windows
  • Medium 5.2
    CVE-2025-5781 Public exploit

    Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager

    Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00…

    Hitachi Hitachi Device Manager Hitachi Configuration Manager Hitachi Ops Center API Configuration Manager
  • Medium 6.8
    CVE-2026-27621 Public exploit

    TypiCMS Core has Stored Cross-Site Scripting (XSS) via SVG File Upload

    TypiCMS is a multilingual content management system based on the Laravel framework. A Stored Cross-Site Scripting (XSS) vulnerability exists in the file upload module of TypiCMS prior to version 16.1.7. The application allows users with file upload permission…

    TypiCMS Core typicms/core Packagist
  • Medium 4.8
    CVE-2026-26717 Public exploit

    OpenFUN Richie Observable Timing Discrepancy in its sync_course_run_from_request function

    An issue in OpenFUN Richie (LMS) in src/richie/apps/courses/api.py. The application used the non-constant time == operator for HMAC signature verification in the sync_course_run_from_request function. This allows remote attackers to forge valid signatures and…

    richie PyPI