Skip to content
OpenAdvisories

Archive

20 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /20 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 8.4
    CVE-2026-35570 Public exploit

    OpenClaude has Sandbox Bypass via Early-Exit Logic Flaw that Allows Path Traversal

    OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in `bashToolHasPermission()` inside `src/tools/BashTool/bashPermissions.ts`. When the sandbox auto-allow feature is…

    Gitlawb openclaude @gitlawb/openclaude npm
  • High 8.8
    CVE-2026-41303 Public exploit

    OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands

    OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals. Attackers can send Discord text commands to bypass the channels.discord.execApprovals.appro…

    OpenClaw OpenClaw openclaw npm
  • High 7.5
    CVE-2026-33626 Public exploit Scanner template EPSS 45%

    LMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image Loading

    LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions prior to 0.12.3 have a Server-Side Request Forgery (SSRF) vulnerability in LMDeploy's vision-language module. The `load_image()` function in `lmdeploy/vl/utils.py` f…

    InternLM lmdeploy lmdeploy PyPI
  • Critical 10.0
    CVE-2026-32604 Public exploit

    Spinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths

    Spinnaker is an open source, multi-cloud continuous delivery platform. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2, a bad actor can execute arbitrary commands very simply on the clouddriver pods. This can expose credentials, remove files, …

    spinnaker spinnaker io.spinnaker.clouddriver:clouddriver-artifacts-gitrepo Maven
  • Medium 4.5
    CVE-2026-6060 Public exploit

    Possible DoS via SQL Box

    A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver. will be killed by the systemThis issue affects OTRS:  * 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X befor…

    OTRS OTRS otrs2 znuny Ubuntu
  • High 8.1
    CVE-2026-25524 Public exploit

    OpenMage LTS's Phar Deserialization leads to Remote Code Execution

    Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to version 20.17.0, PHP functions such as `getimagesize(…

    OpenMage magento-lts openmage/magento-lts Web / CMS Packagist
  • Critical 9.8
    CVE-2026-5760 Public exploit

    CVE-2026-5760

    SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is loaded, as the Jinja2 chat templates are rendered using an unsandboxed jinja2.Environment().

    SGLang SGLang
  • Unscored —
    CVE-2026-31429 Public exploit

    net: skb: fix cross-cache free of KFENCE-allocated skb head

    In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated skb head SKB_SMALL_HEAD_CACHE_SIZE is intentionally set to a non-power-of-2 value (e.g. 704 on x86_64) to avoid collisions with generic kmal…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.4
    CVE-2026-6644 Public exploit

    A command injection vulnerability was found in the PPTP VPN Clients on the ADM

    A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability allows an administrative user to break out of the restricted web environment and execute arbitrary code on the underlying operating system. This occurs due to in…

    ASUSTOR ADM
  • High 8.6
    CVE-2026-6643 Public exploit

    A stack-based buffer overflow vulnerability in the VPN Clients on the ADM

    A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stems from the use of unbounded sscanf() and passing user-controlled data directly to printf(). Due to the lack of PIE and Stack Canary protections, an authenticate…

    ASUSTOR ADM
  • Medium 6.5
    CVE-2025-66954 Public exploit

    A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users t…

  • Medium 4.3
    CVE-2026-41285 Public exploit

    In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Di…

    OpenBSD OpenBSD
  • Medium 5.3
    CVE-2026-26399 Public exploit

    A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0. The pwm_start() functio…

    arduino Ubuntu