Skip to content
OpenAdvisories

Archive

13 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /13 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.3
    CVE-2026-42031 Public exploit Scanner template

    CKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`

    CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, a vulnerability in datastore_search_sql allowed attackers to inject SQL in order to gain access to private resources and PostgreSQL syste…

    ckan ckan ckan PyPI
  • High 7.8
    CVE-2026-0257 Exploited · Ransomware Public exploit Scanner template EPSS 96%

    PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

    Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by …

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
    KEV May 29, 2026
  • High 7.5
    CVE-2026-44579 Public exploit

    Next.js: Denial of Service via connection exhaustion in applications using Cache Components

    Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering through the Cache Components feature can be vulnerable to connection exhaustion through crafted POST requests to …

    vercel next.js next npm
  • High 8.6
    CVE-2026-44578 Public exploit Scanner template EPSS 36%

    Next.js: Server-side request forgery in applications using WebSocket upgrades

    Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to server-side request forgery through crafted WebSocket upgrade req…

    vercel next.js next npm
  • High 8.5
    CVE-2026-45033 Public exploit

    GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor

    GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerability has been identified in GitHub Copilot CLI where a malicious bare git repository nested inside a project directory can achieve arbit…

    GitHub copilot-cli @github/copilot rstudio Wolfi npm
  • High 8.1
    CVE-2026-42945 Public exploit EPSS 68%

    NGINX ngx_http_rewrite_module vulnerability

    NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (…

    F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.9
    CVE-2026-21019 Public exploit

    Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to exe…

    Samsung Mobile Samsung Mobile Devices