Skip to content
OpenAdvisories

Archive

26 February 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-22722 Public exploit

    VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash

    A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the "Fixed version" column of the 'Response Matrix'

  • Medium 5.3
    CVE-2026-27884 Public exploit

    NetExec vulnerable to arbitrary file write via path traversal in spider_plus module

    NetExec is a network execution tool. Prior to version 1.5.1, the module spider_plus improperly creates the output file and folder path when saving files from SMB shares. It does not take into account that it is possible for Linux SMB shares to have path trave…

  • Medium 5.4
    CVE-2025-56605 Public exploit

    A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php backend script of PuneethReddyHC Event …