Skip to content
OpenAdvisories

Archive

8 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /8 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2026-11645 Exploited Public exploit

    Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitr…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV Jun 9, 2026
  • High 8.7
    CVE-2026-46490 Public exploit

    samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions

    samlify is a Node.js library for SAML single sign-on. Prior to version 2.13.0, samlify’s template substitution only escapes attribute contexts. Values inserted into element text (e.g., <saml:AttributeValue>) are not escaped. A normal user can inject XML marku…

    tngan samlify samlify npm
  • High 8.8
    CVE-2026-11553 Public exploit

    Tenda HG7/HG9/HG10 formPPPEdit stack-based overflow

    A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formPPPEdit of the file /boaform/formPPPEdit. The manipulation of the argument encodename results in stack-based buffer overflow. The attack can be launched remo…

    Tenda HG10 HG9 HG7
  • High 8.8
    CVE-2026-25856 Public exploit

    OpenBullet2 0.3.2 Authenticated RCE via Job Configuration Interface

    OpenBullet2 through version 0.3.2 contains an authenticated remote code execution vulnerability that allows authenticated users to execute arbitrary C# code on the server host by creating or modifying job configurations. Attackers can leverage the plain C# ex…

    openbullet openbullet2
  • High 7.5
    CVE-2026-49975 Public exploit EPSS 33%

    Apache HTTP Server: mod_http2 denial of service

    Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2026-42536 Public exploit

    Apache HTTP Server: mod_xml2enc heap overflow

    Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine