Skip to content
OpenAdvisories

Archive

19 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /19 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-34234 Public exploit Scanner template

    CtrlPanel: Unauthenticated RCE using installer script

    CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, the web-based installer (public/installer/index.php) is vulnerable to unauthenticated Remote Code Execution (RCE) because it performs the install.lock check only aft…

    Ctrlpanel-gg panel
  • Critical 9.1
    CVE-2026-2586 Public exploit

    GlassFish's Administration Console is Vulnerable to RCE

    An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of t…

    Eclipse Foundation Eclipse Glassfish org.glassfish.main.admingui:console-common org.glassfish.jsftemplating:jsftemplating Maven
  • Critical 9.6
    CVE-2026-2587 Public exploit

    GlassFish's gadget handler is vulnerable to RCE

    A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The application processes .xml files and evaluates user-supplied values within a context where Expression…

    Eclipse Foundation Eclipse Glassfish org.glassfish.jsftemplating:jsftemplating org.glassfish.main.admingui:admingui Maven
  • Critical 9.8
    CVE-2026-47323 Public exploit EPSS 20%

    Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering

    Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilt…

    Apache Software Foundation Apache Camel org.apache.camel:camel-cxf-rest Maven
  • Critical 9.8
    CVE-2026-4883 Public exploit Scanner template

    Piotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File Upload

    The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'piotnetforms_ajax_form_builder' function in all versions up to, and including, 2.1.40. The plugin uses an incomplete extension blacklist …

    Piotnet Piotnet Forms Web / CMS
  • Critical 9.8
    CVE-2026-4885 Public exploit

    Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload

    The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'pafe_ajax_form_builder' function in all versions up to, and including, 7.1.70. The plugin uses an incomplete extension…

    Piotnet Piotnet Addons For Elementor Pro Web / CMS