Skip to content
OpenAdvisories

Archive

May 2026

Vulnerabilities first published in this month (UTC), newest first.

← April 2026 2026 / May June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-46817 Exploited Public exploit EPSS 12%

    Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versi…

    Oracle Oracle Payments
    KEV Jul 15, 2026
  • Critical 9.8
    CVE-2026-45247 Exploited Public exploit EPSS 26%

    Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection

    Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. A…

    Mirasvit Full Page Cache Warmer for Magento 2 Web / CMS
    KEV Jun 3, 2026
  • Critical 10.0
    CVE-2026-34910 Exploited Public exploit Scanner template EPSS 90%

    A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS…

    Ubiquiti Express 7 UniFi OS Server UDM Network devices
    KEV Jun 23, 2026
  • Critical 10.0
    CVE-2026-34908 Exploited Public exploit Scanner template EPSS 89%

    A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS d…

    Ubiquiti Express 7 UniFi OS Server UDM-Pro Network devices
    KEV Jun 23, 2026
  • Critical 10.0
    CVE-2026-48172 Exploited Public exploit EPSS 18%

    LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild …

    LiteSpeed Technologies cPanel Plugin WHM Plugin
    KEV May 26, 2026
  • Critical 9.8
    CVE-2026-9082 Exploited Public exploit Scanner template EPSS 89%

    Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection. This issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before 10.6.9, fr…

    Drupal Drupal core drupal/core Web / CMS Packagist
    KEV May 22, 2026
  • Critical 10.0
    CVE-2026-20182 Exploited Public exploit EPSS 91%

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The secti…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
    KEV May 14, 2026
  • Critical 9.0
    CVE-2026-41901 Exploited Public exploit

    Thymeleaf: Improper recognition of unauthorized syntax patterns in sandboxed Thymeleaf expressions

    Thymeleaf is a server-side Java template engine for web and standalone environments. Prior to 3.1.5.RELEASE, a security bypass vulnerability exists in the expression execution mechanisms of Thymeleaf. Although the library provides mechanisms to avoid the exec…

    thymeleaf thymeleaf org.thymeleaf:thymeleaf-spring5 org.thymeleaf:thymeleaf Maven
  • Critical 9.6
    CVE-2026-45321 Exploited · Ransomware Public exploit

    Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

    On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/r…

    TanStack react-start start-server-core solid-start npm
    KEV May 27, 2026
  • Critical 9.3
    CVE-2026-42208 Exploited Public exploit Scanner template EPSS 89%

    LiteLLM: SQL injection in Proxy API key verification

    LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing i…

    BerriAI litellm airflow-3 litellm Wolfi PyPI
    KEV May 8, 2026