Skip to content
OpenAdvisories

Archive

25 May 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-48849 Public exploit

    In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored val…

  • High 8.1
    CVE-2026-48842 Public exploit

    Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query…

  • Medium 6.8
    CVE-2026-9490 Public exploit

    Acer Care Center creates a Named Pipe with a weak Security Descriptor

    A security vulnerability has been identified in Acer Care Center where the ACCSvc service creates a Named Pipe with a weak Security Descriptor. This vulnerability allows an authenticated local user to connect and send a specially crafted message (message type…