Skip to content
OpenAdvisories

Archive

2 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /2 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-32625

    LibreChat Exfiltrates Server Secrets via MCP Server URL Injection

    LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the Model Context Protocol (MCP) server integration resolves ${VAR} placeholders against the server's process.env during Zod schema validation o…

    danny-avila LibreChat
  • Critical 9.8
    CVE-2026-49448

    authentik: SourceStage bypass via empty POST

    authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can be bypassed by sending an empty POST. This issue has been patched in versions 2025.12.6, 2026.2.4, and 2026.5.1.

    goauthentik authentik
  • Critical 9.3
    CVE-2026-42849

    authentik: Reflected XSS in SFE AutosubmitStage allows IDP account takeover

    authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE (Simple Flow Executor) in order to make the interface more compatible with legacy browsers, it was possible to use an XSS e…

    goauthentik authentik
  • Critical 9.8
    CVE-2026-5076 Public exploit

    ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation

    The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy of the password reset key in the `arm_reset_password_key` user meta field when a us…

    armember ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup Web / CMS
  • Critical 9.8
    CVE-2026-0611

    Spacelabs Healthcare Sentinel 10.5.x < 11.6.0 Unauthenticated RCE via .NET Remoting

    Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthenticated remote code execution vulnerability through a deprecated .NET Remoting HTTP channel exposed on port 8989 that allows attackers to perform arbitrary fi…

    Spacelabs Healthcare Sentinel
  • Critical 9.3
    CVE-2026-42074

    OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input

    OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the dangerouslyDisableSandbox parameter is exposed as part of the BashTool input schema, meaning the LLM (an untrusted principal per …

    Gitlawb openclaude openclaude npm
  • Critical 9.8
    CVE-2026-47117 Public exploit

    OpenMed < 1.5.2 Remote Code Execution via PII Model Loading

    OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The privacy-filter dispatcher used broad substring matching on the user-supplied model_name parameter, allowing a value such as attacker/foo-priv…

    maziyarpanahi openmed openmed PyPI
  • Critical 10.0
    CVE-2026-7312

    CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity

    CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to 15.0.8234, and 15.1.8300 to 15.1.8335, 15.2.8400 to 15.2.8441, 15.3.8500 to 15.3.8531, and 15.4.8600 to 15.4.8630 allows…

    Progress Software Sitefinity
  • Critical 9.8
    CVE-2026-7198

    CWE-284: Improper Access Control in web services in Progress Sitefinity

    CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that should be restricted, resulting in full compromise of confidentiality, integrity, and availabili…

    Progress Software Sitefinity
  • Critical 9.3
    CVE-2026-42684

    WordPress WP Job Portal plugin <= 2.5.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injection. This issue affects WP Job Portal: from n/a through 2.5.1.

    Ahmad WP Job Portal
  • Critical 9.8
    CVE-2025-53209

    WordPress Masteriyo LMS PRO plugin <= 2.20.0 - Privilege Escalation Vulnerability

    Incorrect Privilege Assignment vulnerability in Themeisle Masteriyo LMS PRO allows Privilege Escalation. This issue affects Masteriyo LMS PRO: from n/a through 2.20.0.

    themeisle Masteriyo LMS PRO
  • Critical 9.3
    CVE-2026-34906

    Server-Side Template Injection (SSTI) in Wirtualna Uczelnia

    Server-Side Template Injection (SSTI) in Wirtualna Uczelnia allows an unauthenticated attacker to perform Remote Code Execution (RCE). In the endpoint redirectToUrl and parameter redirectUrlParameter, insufficient input validation permits injection of arbitra…

    Simple Wirtualna Uczelnia
  • Critical 9.8
    CVE-2026-8206 Public exploit

    Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'

    The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions 6.0.0 to 6.0.6. This is due to the plugin accepting an arbitrary email address when a username is u…

    Themeum Kirki – Freeform Page Builder, Website Builder & Customizer Web / CMS
  • Critical 9.8
    CVE-2026-38967

    CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.