Skip to content
OpenAdvisories

Archive

9 June 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-25860 Public exploit

    OpenClinic GA 5.351.19 Reflected XSS via DICOM Image Upload Handler

    OpenClinic GA 5.351.19 contains a reflected cross-site scripting vulnerability in the DICOM image upload handler that allows attackers to execute arbitrary JavaScript in a victim's browser by embedding malicious payloads in DICOM file metadata fields. Attacke…

  • Medium 6.8
    CVE-2026-50507 Public exploit

    Windows BitLocker Security Feature Bypass Vulnerability

    Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

  • Medium 5.9
    CVE-2026-41710 Public exploit

    Cache Exhaustion in Stateful Retries leads to Denial of Service

    An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects any further updates, causing all later stateful retries and ci…