Skip to content
OpenAdvisories

Archive

24 June 2026

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.1
    CVE-2026-52810 Public exploit

    Gogs: Write to readonly repositories using receive-pack + service=git-upload-pack confusion

    Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git smart HTTP authorizes POST …/git-receive-pack using the client-supplied service query string (so ?service=git-upload-pack is evaluated as read access) while routing still runs git receive-pa…

  • High 8.8
    CVE-2026-48732 Public exploit

    Warp: Remote SSH cwd can lead to unauthorized remote command execution

    Warp is an agentic development environment. From 0.2023.03.21.08.02.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection issue in the legacy SSH background command path. Warp used the remote working directory reported by the session…

  • High 8.8
    CVE-2026-53075 Public exploit

    ppp: require CAP_NET_ADMIN in target netns for unattached ioctls

    In the Linux kernel, the following vulnerability has been resolved: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls /dev/ppp open is currently authorized against file->f_cred->user_ns, while unattached administrative ioctls operate on current…

  • High 7.8
    CVE-2026-52943 Public exploit

    net: skbuff: fix missing zerocopy reference in pskb_carve helpers

    In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskb_carve helpers pskb_carve_inside_header() and pskb_carve_inside_nonlinear() both copy the old skb_shared_info header into a new buffer via m…

  • High 7.8
    CVE-2026-52923 Public exploit

    ipc: limit next_id allocation to the valid ID range

    In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request the next SysV IPC id through ids->next_id. ipc_idr_alloc() currently forwards that request t…