Skip to content
OpenAdvisories

Archive

2 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /2 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-34838 Public exploit

    Group-Office: Authenticated Remote Code Execution via PHP Insecure Deserialization in `AbstractSettingsCollection`

    Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.156, 25.0.90, and 26.0.12, a vulnerability in the AbstractSettingsCollection model leads to insecure deserialization when these settings are loaded. By in…

    Intermesh groupoffice
  • Critical 9.9
    CVE-2026-34717 Public exploit

    OpenProject: SQL Injection in Cost Reporting =n Operator via parse_number_string

    OpenProject is an open-source, web-based project management software. Prior to version 17.2.3, the =n operator in modules/reporting/lib/report/operator.rb:177 embeds user input directly into SQL WHERE clauses without parameterization. This issue has been patc…

    opf openproject
  • High 7.1
    CVE-2026-34828 Public exploit

    listmonk: Active sessions remain valid after password reset and password change

    listmonk is a standalone, self-hosted, newsletter and mailing list manager. From version 4.1.0 to before version 6.1.0, a session management vulnerability allows previously issued authenticated sessions to remain valid after sensitive account security changes…

    knadh listmonk github.com/knadh/listmonk Go
  • Medium 4.8
    CVE-2026-34835 Public exploit

    Rack: `Rack::Request` accepts invalid Host characters, enabling host allowlist bypass.

    Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Request parses the Host header using an AUTHORITY regular expression that accepts characters not permitted in RFC-compliant hostnames, in…

    rack rack logstash-9.3-iamguarded-compat logstash-9.3 Debian Ubuntu Wolfi RubyGems
  • Medium 4.2
    CVE-2026-35414 Public exploit

    OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list …

    OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-33641 Public exploit

    Glances Vulnerable to Command Injection via Dynamic Configuration Values

    Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.3, Glances supports dynamic configuration values in which substrings enclosed in backticks are executed as system commands during configuration parsing. This behavior occurs…

    nicolargo glances glances glances Debian Ubuntu PyPI
  • High 7.2
    CVE-2026-29782 Public exploit

    OpenSTAManager: Remote Code Execution via Insecure Deserialization in OAuth2

    OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.10.2, the oauth2.php file in OpenSTAManager is an unauthenticated endpoint ($skip_permissions = true). It loads a record from the zz_oauth2 table u…

    devcode-it openstamanager devcode-it/openstamanager Packagist
  • Critical 9.8
    CVE-2026-2699 Public exploit Scanner template EPSS 58%

    EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)

    Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.

    Progress Software ShareFile Storage Zones Controller
  • High 7.4
    CVE-2026-4282 Public exploit

    Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw

    A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an unauthenticated attacker to forge authorization codes. Successful exploitation can lead to the creatio…

    Red Hat Red Hat build of Keycloak 26.4 Red Hat build of Keycloak 26.2 Red Hat build of Keycloak 26.4.11 Wolfi Maven
  • Unscored —
    CVE-2026-23416 Public exploit

    mm/mseal: update VMA end correctly on merge

    In the Linux kernel, the following vulnerability has been resolved: mm/mseal: update VMA end correctly on merge Previously we stored the end of the current VMA in curr_end, and then upon iterating to the next VMA updated curr_start to curr_end to advance to t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-23415 Public exploit

    futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()

    In the Linux kernel, the following vulnerability has been resolved: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() During futex_key_to_node_opt() execution, vma->vm_policy is read under speculative mmap lock and RCU. Concurrently, mbi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 6.1
    CVE-2026-30252 Public exploit

    Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l Ze…

  • Medium 6.1
    CVE-2026-30251 Public exploit

    A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenS…

  • High 7.5
    CVE-2026-30332 Public exploit

    A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allow…

  • Critical 9.9
    CVE-2026-25212 Public exploit

    An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privile…