Skip to content
OpenAdvisories

Archive

27 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /27 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-28517 Public exploit

    openDCIM <= 23.04 OS Command Injection via dot Configuration Parameter

    openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php. The application retrieves the 'dot' configuration parameter from the database and passes it directly to exec() without validation or san…

    openDCIM openDCIM
  • Critical 9.3
    CVE-2026-28516 Public exploit

    openDCIM <= 23.04 SQL Injection in Config::UpdateParameter

    openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter. The install.php and container-install.php handlers pass user-supplied input directly into SQL statements using string interpolation without pre…

    openDCIM openDCIM
  • Critical 9.3
    CVE-2026-28515 Public exploit

    openDCIM <= 23.04 Missing Authorization in install.php

    openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php. The installer and upgrade handler expose LDAP configuration functionality without enforcing application role checks. Any …

    openDCIM openDCIM
  • High 8.7
    CVE-2026-3304 Public exploit

    Multer vulnerable to Denial of Service via incomplete cleanup

    Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.0 allows an attacker to trigger a Denial of Service (DoS) by sending malformed requests, potentially causing resource exhaustion. Users should up…

    expressjs multer multer npm
  • Critical 9.9
    CVE-2026-2749 Public exploit

    Path traversal in Centreon Open Tickets

    Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7.

    Centreon Centreon Open Tickets on Central Server
  • Medium 5.1
    CVE-2026-1434 Public exploit

    Reflected XSS in Omega-PSIR

    Omega-PSIR is vulnerable to Reflected XSS via the lang parameter. An attacker can craft a malicious URL that, when opened, causes arbitrary JavaScript to execute in the victim’s browser. This issue was fixed in 4.6.7.

    Politechnika Warszawska Omega-PSIR
  • High 7.4
    CVE-2026-28372 Public exploit

    telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service crede…

    GNU Inetutils inetutils inetutils Debian Ubuntu Alpine
  • High 7.9
    CVE-2026-28364 Public exploit

    In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables r…

    OCaml OCaml ocaml ocaml Debian Ubuntu Azure Linux
  • Critical 9.9
    CVE-2026-28363 Public exploit

    OpenClaw's tools.exec.safeBins sort long-option abbreviation bypass can skip exec approval in allowlist mode

    In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compress-prog) in allowlist mode, leading to approval-free execution paths that were intended to require approval. Only an exa…

    OpenClaw OpenClaw openclaw npm