Skip to content
OpenAdvisories

Archive

18 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /18 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.7
    CVE-2026-54017 Public exploit

    Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal

    Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the terminal-server reverse proxy in `backend/open_webui/routers/terminals.py` does not fully confine the user-controlled `path` segment before …

    open-webui open-webui open-webui PyPI
  • Critical 9.8
    CVE-2026-54390 Public exploit

    JTL Shop < 5.7.2 Server-Side Template Injection via Smarty Renderer

    JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticated attackers to inject malicious template syntax due to unsanitized user-supplied input passed to the Smarty template engine. Attackers can …

    JTL-Software JTL-Shop
  • High 8.8
    CVE-2026-8461 Public exploit

    Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

    An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution. This vulnerability is associated with the file libavcodec/magic…

    FFmpeg FFmpeg ffmpeg ffmpeg Debian Ubuntu Alpine Wolfi
  • Medium 4.3
    CVE-2026-11784 Public exploit

    Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX Action

    The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.6. This is due to missing or incorrect nonce validation on t…

    Optimole Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization Web / CMS