Skip to content
OpenAdvisories

Archive

8 June 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-25555 Public exploit Scanner template

    OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header

    OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attackers to gain admin access by supplying an empty X-Api-Key header value. Attackers can exploit the middl…

  • Critical 9.3
    CVE-2026-50751 Exploited · Ransomware Public exploit Scanner template EPSS 85%

    User Authentication Bypass in VPN Remote Access and Mobile Access

    A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

    KEV Jun 8, 2026
  • Critical 9.8
    CVE-2026-11499 Public exploit

    Tenda HG7/HG9/HG10 formDOMAINBLK stack-based overflow

    A vulnerability was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer overflow. The attack may…