Skip to content
OpenAdvisories

Archive

21 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /21 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-6960

    BookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom Field

    The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'bookingpress_validate_submitted_booking_form_func' function in all versions up to, and including, 5.6. This makes it possible for una…

    Repute InfoSystems BookingPress Appointment Booking Pro Web / CMS
  • Critical 9.4
    CVE-2026-8134

    Concrete CMS 9.5.0 and below is vulnerable to Authenticated RCE via Composer customTemplate Path Traversal leading to PHP File Inclusion

    Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTemplate field when saving page type composer form layouts. An authenticated rogue administrator with composer form editing rights can exploit t…

    Concrete CMS Concrete CMS concrete5/concrete5 Packagist
  • Critical 9.8
    CVE-2026-48207

    Apache Fory: PyFory ReduceSerializer Incomplete Policy Enforcement

    Deserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializer could bypass documented DeserializationPolicy validation hooks during reduce-state restoration and global-name resolution. An application is vulnerable if it deserializes attac…

    Apache Software Foundation Apache Fory pyfory PyPI
  • Critical 9.3
    CVE-2026-39531

    WordPress WP Directory Kit plugin <= 1.5.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wp Directory Kit WP Directory Kit allows Blind SQL Injection. This issue affects WP Directory Kit: from n/a through 1.5.0.

    Wp Directory Kit WP Directory Kit
  • Critical 9.8
    CVE-2025-71211

    A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code a…

    Trend Micro TrendAI Apex One as a Service TrendAI Apex One
  • Critical 9.8
    CVE-2025-71210

    A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code a…

    Trend Micro TrendAI Apex One TrendAI Apex One as a Service
  • Critical 9.8
    CVE-2026-43501 Public exploit

    ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

    In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows ipv6_rpl_srh_rcv() decompresses an RFC 6554 Source Routing Header, swaps the next segment into ipv6_hdr->daddr, recompresses, t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2026-5118 Public exploit

    Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

    The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'role' parameter from POST data during user registration without validating it agai…

    Divi Engine Divi Form Builder Web / CMS
  • Critical 9.1
    CVE-2026-5433

    Improper sanitization

    Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface. An attacker could exploit this vulnerability via command delimiters, potentially resulting in Remote Code Execution (RCE).  Honeywell recommends updating to …

    Honeywell International Control Network Module (CNM) ICS / OT
  • Critical 9.9
    CVE-2026-44050

    Heap buffer overflow in CNID daemon comm_rcv()

    A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code with escalated privileges or cause a denial of service.

    Netatalk Netatalk netatalk netatalk Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2026-6279 Public exploit Scanner template

    Avada (Fusion) Builder <= 3.15.2 - Unauthenticated Remote Code Execution via PHP Function Injection via 'render_logics' Shortcode Attribute via Widget AJAX Handler

    The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP Function Injection in versions up to and including 3.15.2. This is due to the `wp_conditional_tags` case in `Fusion_Builder_Conditional_Rend…

    ThemeFusion Avada (Fusion) Builder Web / CMS
  • Critical 10.0
    CVE-2026-9152

    Unauthenticated SOAP Endpoint in Altium 365 SearchService Allows Cross-Tenant Data Exfiltration and Index Destruction

    A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring authentication, session tokens, or any form of identity verification. An unauthenticated network attacker w…

    Altium Altium 365
  • Critical 10.0
    CVE-2026-48172 Exploited Public exploit EPSS 18%

    LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild …

    LiteSpeed Technologies cPanel Plugin WHM Plugin
    KEV May 26, 2026