Skip to content
OpenAdvisories

Archive

24 April 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-41472 Public exploit

    CyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboard

    CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/callback endpoint lacks authentication and allows unauthenticated attackers to inject malicious JavaScript by ove…

  • Medium 5.4
    CVE-2026-30368 Public exploit

    A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to …