Skip to content
OpenAdvisories

Archive

22 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /22 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.6
    CVE-2026-34413 Public exploit Scanner template

    Xerte Online Toolkits Missing Authentication via connector.php

    Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php where an HTTP redirect to unauthenticated callers does not call exit() or die(), allowing P…

    thexerteproject xerteonlinetoolkits
  • High 7.1
    CVE-2026-34414 Public exploit

    Xerte Online Toolkits Path Traversal via connector.php

    Xerte Online Toolkits versions 3.15 and earlier contain a relative path traversal vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php where the name parameter in rename commands is not sanitized for path traversal sequences.…

    thexerteproject xerteonlinetoolkits
  • High 7.8
    CVE-2026-31525 Public exploit

    bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN

    In the Linux kernel, the following vulnerability has been resolved: bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN The BPF interpreter's signed 32-bit division and modulo handlers use the kernel abs() macro on s32 operands. The abs() macro d…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2026-41651 Public exploit

    PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root

    PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) rac…

    PackageKit PackageKit packagekit packagekit Debian Ubuntu
  • High 7.5
    CVE-2026-6857 Public exploit

    Camel-infinispan: camel-infinispan: remote code execution via unsafe deserialization

    A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code ex…

    Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat JBoss Enterprise Application Platform 8 Red Hat Fuse 7 Maven
  • High 7.8
    CVE-2026-31431 Exploited Public exploit EPSS 98%

    crypto: algif_aead - Revert to operating out-of-place

    In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux Alpine
    KEV May 1, 2026
  • High 8.1
    CVE-2026-6023 Public exploit

    Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX

    In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state if the state is exposed to the client. If an attacker tampers with this state, a server-side…

    Progress Software Telerik UI for ASP.NET AJAX