Skip to content
OpenAdvisories

Archive

3 June 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-8888 Public exploit

    CVE-2026-8888

    Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server-provided patterns as JavaScript regular expressions via new RegExp() without complexity validation. An on-path attacker can inject specific patterns to cause cat…

  • High 8.6
    CVE-2026-20230 Exploited Public exploit EPSS 89%

    Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

    A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks thr…

    KEV Jun 25, 2026