Skip to content
OpenAdvisories

Archive

26 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /26 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-48710 Exploited Public exploit Scanner template EPSS 70%

    Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

    Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuil…

    Kludex starlette starlette starlette Debian Ubuntu Alpine PyPI
    KEV Sep 2, 2026
  • Medium 5.9
    CVE-2026-44788 Public exploit

    SharpCompress: Directory traversal via directory entries in WriteToDirectory (zip slip variant)

    SharpCompress is a fully managed C# library to deal with many compression types and formats. In 0.47.4 and earlier, a path traversal vulnerability in IArchive.WriteToDirectory() allows a malicious archive to create directories outside the intended extraction …

    adamhathcock sharpcompress SharpCompress NuGet
  • High 8.9
    CVE-2026-9560 Public exploit

    Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute…

    OpenVPN OpenVPN Connect
  • High 8.5
    CVE-2026-44706 Public exploit

    Chatwoot: SQL Injection in Conversation/Contact Filter API via Custom Attribute Values

    Chatwoot is a customer engagement suite. From 2.2.0 to before 4.11.2, a SQL injection vulnerability exists in the conversation and contact filter APIs. When filtering by a custom attribute of type date or number using the is_greater_than or is_less_than opera…

    chatwoot chatwoot
  • High 7.6
    CVE-2026-44680 Public exploit

    MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys

    MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to @mikro-orm/knex 6.6.14 and @mikro-orm/sql 7.0.14, MikroORM's identifier-quoting helper (Platform.quoteIdentifier and the postgres/mssql overrides) …

    mikro-orm mikro-orm sql knex npm
  • High 8.6
    CVE-2026-35223 Public exploit EPSS 13%

    Joomla! Core - [20260508] - Improper access check in com_config webservice endpoints

    An improper access check allows unauthorized access to com_config webservice endpoints.

    Joomla! Project Joomla! CMS Web / CMS
  • Medium 6.5
    CVE-2026-40564 Public exploit

    Apache Flink Kubernetes Operator: Server-Side Request Forgery and local file access in Kubernetes Operator

    Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob jarURI is currently not validated so that it points to user-owned files or addresses.  This lets a u…

    Apache Software Foundation Apache Flink Kubernetes Operator
  • Critical 9.8
    CVE-2026-45247 Exploited Public exploit EPSS 26%

    Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection

    Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. A…

    Mirasvit Full Page Cache Warmer for Magento 2 Web / CMS
    KEV Jun 3, 2026
  • High 8.8
    CVE-2026-46368 Public exploit

    luci-app-https-dns-proxy Authenticated Command Injection via setInitAction

    luci-app-https-dns-proxy through 2025.12.29-5 — an optional LuCI web UI add-on for the https-dns-proxy package, distributed through the OpenWrt community packages feed and not installed by default — contains a command injection vulnerability in the setInitAct…

    mossdef-org luci-app-https-dns-proxy
  • Critical 9.0
    CVE-2026-4480 Public exploit Scanner template EPSS 29%

    Samba: samba: remote code execution in printing subsystem via unescaped job description

    A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacke…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine
  • Medium 4.3
    CVE-2026-36239 Public exploit

    PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality