Skip to content
OpenAdvisories

Archive

22 May 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-40864 Public exploit

    JupyterHub: Cross-origin form POSTs bypass XSRF

    JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through 5.4.4, XSRF protection (updated in 4.1.0) inappropriately treated requests with Sec-Fetch-Mode: no-cors as same-origin requests, bypassing …

  • Medium 6.5
    CVE-2026-36227 Public exploit

    Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and …

  • Medium 6.1
    CVE-2026-36226 Public exploit

    Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensi…