Skip to content
OpenAdvisories

Archive

27 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /27 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-42082

    free5GC: Missing Concurrent NAS SMC Validation During NGAP Handover

    free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the AMF in Free5GC does not enforce the concurrent security procedure rules defined in 3GPP TS 33.501 §6.9.5.1. The AMF does not check for ongoing N2 handover procedures before i…

    free5gc free5gc github.com/free5gc/amf Go
  • Low 3.7
    CVE-2026-44474

    Ella Core: Handover failures during concurrent Security Mode Command

    Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core didn't enforce security rules on concurrent running of security procedures defined in TS 33.501 §6.9.5.1 — it could send a NAS Security Mode Command while an N2 handover was stil…

    ellanetworks core github.com/ellanetworks/core Go
  • Low 2.3
    CVE-2026-45570

    go-git: Improper single-quote escaping in go-git SSH transport

    go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, go-git's SSH transport constructs the remote exec command by wrapping the repository path in single quotes without escaping single quotes embedded inside…

    go-git go-git zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • Low 3.8
    CVE-2026-9712

    Insecure direct object reference

    When creating an export through the pretix API, API clients are returned an UUID value for their export job (a long, random string like 35742818-c375-4d15-839f-d49aecce94d6). Using this UUID, the API client can then request the actual file for download. The s…

    pretix pretix pretix PyPI
  • Low 2.7
    CVE-2024-47272

    Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 an…

    Synology Surveillance Station
  • Low 2.7
    CVE-2024-47270

    Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station bef…

    Synology Surveillance Station
  • Low 2.7
    CVE-2024-47267

    Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Archiving Pull function…

    Synology Surveillance Station
  • Low 2.4
    CVE-2026-9608

    QianFox FoxCMS Administrator Backend edit cross site scripting

    A vulnerability was determined in QianFox FoxCMS up to 1.2.6. The impacted element is an unknown function of the file /Tag/edit of the component Administrator Backend. Executing a manipulation can lead to cross site scripting. It is possible to launch the att…

    QianFox FoxCMS
  • Low 3.7
    CVE-2026-33552

    Northern.tech Mender Enterprise Server before 4.1.1 has Incorrect Access Control.

  • Low 3.1
    CVE-2026-49009 Public exploit

    Northern.tech Mender Server v4.1.0, v4.0.1 and below, and fixed in v4.1.1 and v4.0.2 allows Directory Traversal.