Skip to content
OpenAdvisories

Archive

13 April 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-31048 Public exploit

    An issue in the <code>pickle</code> protocol of Pyro v3.x allows attackers to execute arbitrary code via supplying a cr…

  • Critical 9.8
    CVE-2026-31283 Public exploit

    In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address…

  • Critical 9.8
    CVE-2026-31282 Public exploit

    Totara LMS v19.1.5 and before is vulnerable to Incorrect Access Control. The login page code can be manipulated to reve…