Skip to content
OpenAdvisories

Archive

15 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /15 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.5
    CVE-2026-45401 Public exploit

    Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints

    Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the validate_url() function in backend/open_webui/retrieval/web/utils.py only validates the initial URL submitted by the caller. The HTTP client…

    open-webui open-webui open-webui PyPI
  • High 7.5
    CVE-2026-44714 Public exploit

    bitcoinj: ScriptExecution P2PKH/P2WPKH Verification Bypass

    The bitcoinj library is a Java implementation of the Bitcoin protocol. Prior to 0.17.1, ScriptExecution.correctlySpends() contains two fast-path verification bugs for standard P2PKH and native P2WPKH spends in core/src/main/java/org/bitcoinj/script/ScriptExec…

    bitcoinj bitcoinj org.bitcoinj:bitcoinj-core Maven
  • High 8.1
    CVE-2026-35194 Public exploit

    Apache Flink: Remote code execution via SQL injection in code generation

    Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers via maliciously crafted SQL queries. The vulnerability affe…

    Apache Software Foundation Apache Flink org.apache.flink:flink-table-planner_2.12 org.apache.flink:flink-table-runtime Maven
  • High 7.1
    CVE-2026-46333 Public exploit

    ptrace: slightly saner 'get_dumpable()' logic

    In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally about the memory image of the task - the concept comes from whether it can core dump or not - and ma…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux