Skip to content
OpenAdvisories

Archive

14 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /14 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-44212 Public exploit

    PrestaShop: Stored XSS executable in customer service view

    PrestaShop is an open source e-commerce web application. Prior to 8.2.6 and 9.1.1, there is a stored Cross-Site Scripting (XSS) vulnerability in the PrestaShop back-office Customer Service view. An unauthenticated attacker can submit the public Contact Us for…

    PrestaShop PrestaShop prestashop/prestashop Web / CMS Packagist
  • Critical 9.2
    CVE-2026-27886 Public exploit Scanner template

    Strapi may leak sensitive data via relational filtering due to lack of query sanitization

    Strapi is an open source headless content management system. Strapi versions starting in 4.0.0 and prior to 5.37.0 did not sufficiently sanitize query parameters when filtering content via relational fields. An unauthenticated attacker could use the `where` q…

    strapi strapi @strapi/strapi npm
  • Low 2.1
    CVE-2026-22706 Public exploit

    Strapi: Password Reset Does Not Revoke Existing Refresh Sessions

    Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, changing or resetting a user's password did not invalidate the user's existing refresh-token sessions by default. The refresh-token invalidation step in the users…

    strapi strapi @strapi/plugin-users-permissions @strapi/admin npm
  • Critical 9.3
    CVE-2026-22599 Public exploit

    Strapi Vulnerable to SQL Injection in Content Type Builder

    Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x branch prior to 5.33.2, a database-query injection vulnerability existed in the Strapi Content-Type Builder write API. An authenticated a…

    strapi strapi @strapi/content-type-builder @strapi/content-type-builder npm
  • High 8.1
    CVE-2026-42897 Exploited Public exploit EPSS 71%

    Microsoft Exchange Server Spoofing Vulnerability

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

    Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server Subscription Edition RTM Microsoft Exchange Server 2019 Cumulative Update 14
    KEV May 15, 2026
  • High 8.6
    CVE-2026-20224 Public exploit

    Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability

    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does not need to have valid user credentials. …

    Cisco Cisco Catalyst SD-WAN Manager Network devices
  • Critical 10.0
    CVE-2026-20182 Exploited Public exploit EPSS 91%

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The secti…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
    KEV May 14, 2026
  • Critical 9.2
    CVE-2026-42281 Public exploit Scanner template

    MagicMirror²: Unauthenticated SSRF via /cors endpoint

    MagicMirror² is an open source modular smart mirror platform. Prior to 2.36.0, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability in the /cors endpoint allows any remote attacker to force the MagicMirror² server to perform arbitrary HTTP requ…

    MagicMirrorOrg MagicMirror magicmirror npm
  • Critical 9.8
    CVE-2026-42589 Public exploit Scanner template

    Gotenberg: Unauthenticated RCE via ExifTool Metadata Key Injection

    Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg's /forms/pdfengines/metadata/write HTTP endpoint accepts a JSON metadata object and passes its keys directly to ExifTool via the go-exiftool library. No validation is perfor…

    gotenberg gotenberg github.com/gotenberg/gotenberg/v8 github.com/gotenberg/gotenberg/v7 Go
  • High 8.8
    CVE-2026-42559 Public exploit

    RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport

    RMCP is an official Rust SDK for the Model Context Protocol. Prior to version 1.4.0, the rmcp crate's Streamable HTTP server transport (crates/rmcp/src/transport/streamable_http_server/) did not validate the incoming Host header. This allowed a malicious publ…

    Model Context Protocol rust-sdk zed nushell Wolfi npm crates.io
  • High 8.8
    CVE-2026-6475 Public exploit

    PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice

    Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case that starting the server after t…

    postgresql15 postgresql-15 postgresql16 postgresql-9.3 Debian Ubuntu Azure Linux Alpine
  • Medium 5.3
    CVE-2026-6145 Public exploit

    User Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action' Parameter

    The User Registration & Membership plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.1.5. This is due to the is_admin_creation_process() method relying solely on the presence of action=createuser in the $_REQU…

    WPEverest User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder Web / CMS
  • Critical 9.8
    CVE-2026-8181 Public exploit Scanner template EPSS 15%

    Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover

    The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1. This is due to incorrect return-value handling in the `is_mainwp_authenticated…

    burstbv Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) Web / CMS