Skip to content
OpenAdvisories

Archive

11 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /11 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.3
    CVE-2026-43914 Public exploit

    Vaultwarden: Brute-force protection bypass vulnerability

    Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.4, there is a security vulnerability in Vaultwarden that allows bypassing the login brute-force protection if email 2fa is enabled. If email 2fa is enabled, the unprotected 2fa-functi…

    dani-garcia vaultwarden
  • High 8.2
    CVE-2026-43893 Public exploit

    exiftool-vendored: Argument injection via newline characters in tag names

    exiftool-vendored provides cross-platform Node.js access to ExifTool. Prior to 35.19.0, exiftool-vendored starts ExifTool in -stay_open True -@ - mode, where arguments are read from stdin one per line. In affected versions, several caller-supplied strings wer…

    photostructure exiftool-vendored.js exiftool-vendored npm
  • High 8.8
    CVE-2026-28995 Public exploit

    A logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 a…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 7.3
    CVE-2026-43655 Public exploit

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, mac…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 7.5
    CVE-2026-28990 Public exploit

    The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 …

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 7.3
    CVE-2026-5172 Public exploit

    CVE-2026-5172

    A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record’s end.

    dnsmasq dnsmasq dnsmasq dnsmasq Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.3
    CVE-2026-2291 Public exploit

    CVE-2026-2291

    dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.

    dnsmasq dnsmasq dnsmasq dnsmasq Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.0
    CVE-2026-4802 Public exploit

    Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui

    A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can injec…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  • High 7.8
    CVE-2026-43500 Public exploit EPSS 94%

    rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present

    In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpc_input_call_event() and the RESPONSE handler in rxrpc_verify_response() copy the skb to …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.3
    CVE-2026-6433 Public exploit Scanner template

    Custom CSS JS PHP <= 2.0.7 - Unauthenticated SQL Injection to RCE

    The Custom css-js-php WordPress plugin through 2.0.7 does not properly sanitize user input before using it in a SQL query, and the result is passed to eval(), allowing unauthenticated users to execute arbitrary PHP code on the server.

    Web / CMS