Skip to content
OpenAdvisories

Archive

25 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /25 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

125 results · Clear filters · Feed

  • Medium 6.0
    CVE-2026-8658

    OS Command Injection in Rapid7 InsightConnect Tcpdump Plugin

    OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the options or filter parameters due to insufficient input sanitization in shell command construction.

    Rapid7 InsightConnect Tcpdump Plugin
  • Medium 6.0
    CVE-2026-8664

    OS Command Injection in Rapid7 InsightConnect Finger Plugin

    OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameters due to insufficient input validation in shell command construction.

    Rapid7 InsightConnect Finger Plugin
  • Medium 6.5
    CVE-2026-9153

    Arbitrary File Read in Rapid7 InsightConnect Sed Plugin

    Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation.

    Rapid7 InsightConnect Sed Plugin
  • Medium 6.0
    CVE-2026-8659

    OS Command Injection in Rapid7 InsightConnect SQLmap Plugin

    OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the api_host or api_port parameters during connection configuration due to insufficient input validation.

    Rapid7 InsightConnect SQLmap Plugin
  • Medium 6.1
    CVE-2025-60465

    A use-after-free in the gf_filter_pid_inst_swap function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.0…

    gpac gpac Debian Ubuntu