Skip to content
OpenAdvisories

Archive

22 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /22 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-41177 Public exploit

    Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction

    Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the Squidex Restore API is vulnerable to Blind Server-Side Request Forgery (SSRF). The application fails to validate the URI scheme of the user-s…

    Squidex squidex
  • Medium 5.3
    CVE-2026-41459 Public exploit

    Xerte Online Toolkits Path Disclosure via /setup

    Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the full server-side filesystem path of the application root. Attackers can send a GET request to the /setup page…

    thexerteproject xerteonlinetoolkits
  • Medium 6.5
    CVE-2026-6355 Public exploit

    CVE-2026-6355

    A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references. This could lead to unauthorized access to sensitive information and unauthorized…

    Augmentt Augmentt
  • Medium 6.8
    CVE-2026-22747 Public exploit

    Unauthorized User Impersonation when Using X.509 Client Certificates

    Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an…

    Spring Spring Security apache-nifi apache-nifi-registry Wolfi Maven