Skip to content
OpenAdvisories

Archive

10 June 2026

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-46645 Public exploit

    SQLAdmin: Authorization Bypass on `ajax_lookup`

    SQLAdmin is a flexible Admin interface for SQLAlchemy models. Prior to version 0.25.1, the ajax_lookup endpoint in application.py bypasses the is_accessible() access control check that all other endpoints enforce. If a developer restricts model access by over…

  • Medium 4.3
    CVE-2026-42568 Public exploit

    Yamcs Vulnerable to LDAP Injection in LdapAuthModule

    Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injection vulnerability exists in `org.yamcs.security.LdapAuthModule` when constructing search filters. The username parameter is inserted directly into the LDAP filter without…

  • Medium 5.7
    CVE-2026-0273 Public exploit

    PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI

    A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS …

  • Medium 6.9
    CVE-2026-29115 Public exploit

    A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially …