Skip to content
OpenAdvisories

Archive

4 June 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.8
    CVE-2026-20245 Exploited Public exploit EPSS 25%

    Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability

    A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute…

    KEV Jun 9, 2026
  • High 7.5
    CVE-2026-28318 Exploited Public exploit EPSS 48%

    SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability

    SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are u…

    KEV Jun 5, 2026
  • Critical 9.6
    CVE-2026-8037 Exploited Public exploit Scanner template EPSS 100%

    OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

    OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints

    KEV Aug 7, 2026