Skip to content
OpenAdvisories

Archive

6 May 2026

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • High 8.7
    CVE-2026-0300 Exploited Public exploit EPSS 42%

    PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal

    A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls…

    KEV May 6, 2026
  • High 8.8
    CVE-2026-7899 Public exploit

    Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitra…

  • High 7.5
    CVE-2026-23870 Public exploit

    Facebook React has a Denial of Service Vulnerability in React Server Components

    A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-do…

  • High 7.8
    CVE-2026-43074 Public exploit

    eventpoll: defer struct eventpoll free to RCU grace period

    In the Linux kernel, the following vulnerability has been resolved: eventpoll: defer struct eventpoll free to RCU grace period In certain situations, ep_free() in eventpoll.c will kfree the epi->ep eventpoll struct while it still being used by another concurr…

  • High 7.5
    CVE-2026-34473 Public exploit

    Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, …

  • High 7.5
    CVE-2026-34474 Public exploit EPSS 25%

    Sensitive data exposure leading to admin/WLAN credential leak in ZTE ZXHN H298A 1.1 and H108N 2.6. A crafted request to…