Skip to content
OpenAdvisories

Archive

29 April 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.7
    CVE-2026-42249 Public exploit

    Remote Code Execution in Ollama via Update Mechanism

    Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers. When downloading updates, the application constructs local file paths using values derived from HT…

  • High 7.7
    CVE-2026-42248 Public exploit

    Missing Signature Verification for Updates in Ollama

    Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables. Unlike other platforms, the Windows implementation of the update verification routine unconditionally returns success so no digital signature or trust…