Skip to content
OpenAdvisories

Archive

May 2026

Vulnerabilities first published in this month (UTC), newest first.

← April 2026 2026 / May June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-48710 Exploited Public exploit Scanner template EPSS 70%

    Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

    Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuil…

    Kludex starlette starlette starlette Debian Ubuntu Alpine PyPI
    KEV Sep 2, 2026
  • Medium 6.7
    CVE-2026-34926 Exploited Public exploit EPSS 13%

    A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker …

    Trend Micro TrendAI Apex One as a Service TrendAI Apex One
    KEV May 21, 2026
  • Medium 4.0
    CVE-2026-45498 Exploited Public exploit EPSS 63%

    Microsoft Defender Denial of Service Vulnerability

    Microsoft Defender Denial of Service Vulnerability

    Microsoft Microsoft Defender Antimalware Platform
    KEV May 20, 2026