Skip to content
OpenAdvisories

Archive

25 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /25 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.2
    CVE-2026-40083 Public exploit

    Cacti: SQL Injection in managers.php

    Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have SQL Injection through unsanitized unserialize+implode in managers.php. At line 756 of managers.php, the application assigns $selected_items by calling cacti_uns…

    Cacti cacti cacti cacti Debian Ubuntu
  • High 8.1
    CVE-2026-11800 Public exploit

    Org.keycloak:keycloak-services: keycloak: authentication bypass via jwt algorithm confusion

    A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Grant flow allows an attacker with valid client credentials to bypass signature verification. By forging an assertion, the attacker can create unauthorized acces…

    Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Keycloak 26.6 Maven
  • High 7.8
    CVE-2026-54917 Public exploit Scanner template

    SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access

    SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables. Prior to 4.30, the S3 API gateway and the Iceberg REST catalog gateway construct their routers with mux.NewRouter().SkipClean(true). With path cleaning disabl…

    seaweedfs seaweedfs github.com/seaweedfs/seaweedfs Go
  • High 8.8
    CVE-2026-56766 Public exploit

    Hydra - Stack Buffer Overflow in NTLM Authentication Handler

    Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. A malicious server can send a…

    vanhauser-thc thc-hydra hydra Ubuntu
  • High 7.3
    CVE-2026-9086 Public exploit

    Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass

    A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with `manage-client` permission or access to client registration endpoints, could bypass client Uniform Resource Identifier (URI) validation. This is achieved b…

    Red Hat Red Hat build of Keycloak 26.6 Red Hat build of Keycloak 26.4 Red Hat build of Keycloak 26.4.13 Maven
  • High 8.8
    CVE-2026-53266 Exploited Public exploit

    netfilter: bridge: make ebt_snat ARP rewrite writable

    In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source address rewrite behind skb_ensure_writable(skb, 0). This is intentional: at the bridge…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Sep 18, 2026
  • High 7.8
    CVE-2026-53264 Public exploit

    net/sched: act_api: use RCU with deferred freeing for action lifecycle

    In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: use RCU with deferred freeing for action lifecycle When NEWTFILTER and DELFILTER are run concurrently it is possible to create a race with an associated action. Let's illu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.7
    CVE-2026-37149 Public exploit

    GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 was discovered to contain a SQL injection vulnerabi…