Skip to content
OpenAdvisories

Archive

6 March 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-30225 Public exploit

    OliveTin: RestartAction always runs actions as guest

    OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authentication context confusion vulnerability in RestartAction allows a low‑privileged authenticated user to execute actions they are not permitted to run…

  • Medium 6.9
    CVE-2026-29059 Public exploit Scanner template

    Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly

    Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to version 1.603.3, an unauthenticated path traversal vulnerability exists in Windmill's get_log_file endpoint "(/api/w/{workspace}/jobs_u/get_log…