Skip to content
OpenAdvisories

Archive

2 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /2 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-34838 Public exploit

    Group-Office: Authenticated Remote Code Execution via PHP Insecure Deserialization in `AbstractSettingsCollection`

    Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.156, 25.0.90, and 26.0.12, a vulnerability in the AbstractSettingsCollection model leads to insecure deserialization when these settings are loaded. By in…

    Intermesh groupoffice
  • Critical 9.9
    CVE-2026-34717 Public exploit

    OpenProject: SQL Injection in Cost Reporting =n Operator via parse_number_string

    OpenProject is an open-source, web-based project management software. Prior to version 17.2.3, the =n operator in modules/reporting/lib/report/operator.rb:177 embeds user input directly into SQL WHERE clauses without parameterization. This issue has been patc…

    opf openproject
  • Critical 9.8
    CVE-2026-2699 Public exploit Scanner template EPSS 58%

    EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)

    Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

    Progress Software ShareFile Storage Zones Controller
  • Critical 9.9
    CVE-2026-25212 Public exploit

    An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privile…