Skip to content
OpenAdvisories

Archive

2 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /2 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-34835 Public exploit

    Rack: `Rack::Request` accepts invalid Host characters, enabling host allowlist bypass.

    Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Request parses the Host header using an AUTHORITY regular expression that accepts characters not permitted in RFC-compliant hostnames, in…

    rack rack logstash-9.3-iamguarded-compat logstash-9.3 Debian Ubuntu Wolfi RubyGems
  • Medium 4.2
    CVE-2026-35414 Public exploit

    OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list …

    OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux
  • Medium 6.1
    CVE-2026-30252 Public exploit

    Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l Ze…

  • Medium 6.1
    CVE-2026-30251 Public exploit

    A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenS…