Skip to content
OpenAdvisories

Archive

15 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /15 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-12087 Public exploit

    Socket versions before 2.041 for Perl have an out-of-bounds heap read

    Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argum…

    PEVANS Socket perl perl Debian Ubuntu Azure Linux Alpine
  • High 8.8
    CVE-2026-48017 Public exploit

    DbGate: Remote Code Execution via functionName injection in loadReader endpoint

    DbGate is cross-platform database manager. In versions 7.1.8 and prior, the POST /runners/load-reader endpoint in DbGate accepts a functionName parameter that is directly interpolated into a JavaScript code template without any sanitization or validation. An …

    dbgate dbgate dbgate-api npm
  • Critical 9.8
    CVE-2026-49105 Public exploit

    WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions.

    CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
  • Critical 9.8
    CVE-2026-49104 Public exploit

    WordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.2.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.2.1 versions.

    CRM Perks Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms
  • Critical 9.8
    CVE-2026-49085 Public exploit

    WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions.

    CRM Perks WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
  • High 7.5
    CVE-2026-49083 Public exploit

    WordPress LatePoint plugin <= 5.5.1 - Privilege Escalation vulnerability

    Contributor Privilege Escalation in LatePoint <= 5.5.1 versions.

    latepoint LatePoint
  • High 7.1
    CVE-2026-40791 Public exploit

    WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions.

    codepeople WP Time Slots Booking Form
  • High 7.5
    CVE-2026-40776 Public exploit

    WordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.8 versions.

    Arraytics WP Event Solution
  • Critical 9.3
    CVE-2026-39492 Public exploit

    WordPress WP Maps plugin <= 4.9.1 - SQL Injection vulnerability

    Unauthenticated SQL Injection in WP Maps <= 4.9.1 versions.

    Flipper Code – WordPress Development Company WP Maps
  • Critical 9.8
    CVE-2026-9691 Public exploit

    WordPress Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 versions.

    CRM Perks Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms
  • Critical 9.1
    CVE-2026-49952 Public exploit Scanner template

    Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

    Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to gain unauthorized access to database backup and restore functionality by exploiting a shared cryptographic key betw…

    Discuz! Discuz! X5.0
  • High 7.5
    CVE-2026-47777 Public exploit

    Mastodon has a consent-check bypass in its remote Collections

    Mastodon is a free, open-source social network server based on ActivityPub. In versions there is a missing condition in the check if remote accounts consented to be featured in a remote Collection could lead to attackers bypassing the check and faking consent…

    mastodon mastodon
  • Medium 6.5
    CVE-2026-20262 Exploited Public exploit EPSS 29%

    Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system. This vulnerability exists because the affect…

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Jun 15, 2026
  • Critical 9.8
    CVE-2026-38812 Public exploit

    RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the code generati…

  • High 8.8
    CVE-2026-36670 Public exploit

    A Time-Based Blind SQL Injection vulnerability in the alias_management module of OpenSIPS Control Panel (opensips-cp) p…

  • High 7.8
    CVE-2026-36213 Public exploit

    An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate privileges via the MemuService.…