Skip to content
OpenAdvisories

Archive

10 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /10 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-20253 Exploited Public exploit Scanner template EPSS 97%

    Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

    In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service endpo…

    Splunk Splunk Enterprise
    KEV Jun 18, 2026
  • Critical 9.8
    CVE-2025-6254 Public exploit

    Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation

    The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreat_process_registration() function not properly restricting the roles that a user can register with. This makes …

    AmentoTech Doctreat Core Web / CMS
  • Critical 9.1
    CVE-2026-9067 Public exploit

    Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload

    The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint's intended media type, allowing u…

    Web / CMS