Skip to content
OpenAdvisories

Archive

26 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /26 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-49869 Exploited Public exploit

    Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter`

    Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith("/configs") to whitelist the public configuration endpoint from Basic Auth. Because the check is a su…

    kestra-io kestra
    KEV Sep 2, 2026
  • Critical 10.0
    CVE-2026-53576 Public exploit Scanner template

    Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass

    Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API (@Filter("/api/v1/**")) treats any request whose path ends in /configs as the public instance-config endpoint and forwards it…

    kestra-io kestra
  • Critical 10.0
    CVE-2026-54350 Public exploit

    Budibase: Anonymous NoSQL operator injection via published-app query templates

    Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor of any published Budibase app reads every document of the backing MongoDB, CouchDB, Elasticsearch, DynamoDB-PartiQL, or REST-with-JSON-body collection and, where the bu…

    Budibase budibase @budibase/server npm
  • Medium 5.0
    CVE-2026-48770 Public exploit

    Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash

    Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, a local process in the same interactive Windows session can send a malformed WM_COPYDATA message to Notepad++ using the COPYDATA_FULL_CMDLINE path. The handler appears to process COPYDA…

    notepad-plus-plus notepad-plus-plus
  • High 7.8
    CVE-2026-48778 Public exploit

    Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreter

    Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <GUIConfig name="commandLineInterpreter"> tag in config.xml is read by NppXml::value() (Parameters.cpp:6430) and stored in _nppGUI._commandLineInterpreter without any validation, wh…

    notepad-plus-plus notepad-plus-plus
  • High 7.5
    CVE-2026-52885 Public exploit

    Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memory

    Notepad++ is a free and open-source source code editor. Prior to 8.9.6.4, NppCommands.cpp checks the HMAC of the on-disk shortcuts.xml at the moment a user command fires (Time-of-Check). However, the command payload is taken from the in-memory _userCommands v…

    notepad-plus-plus notepad-plus-plus
  • High 7.8
    CVE-2026-48800 Public exploit

    Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand Injection

    Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the <Command> tag text content inside <UserDefinedCommands> in shortcuts.xml is read by NppXml::value(aNode) (Parameters.cpp:3658) in the feedUserCmds() function and stored in UserComma…

    notepad-plus-plus notepad-plus-plus
  • Critical 9.9
    CVE-2026-52782 Public exploit

    OpenProject: IDOR through /projects/<A>/settings/project_storages/<A_ps_id> via PATCH parameter "storages_project_storage[project_folder_id]" leads to Access to Unauthorized Resources

    OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is an IDOR through /projects/<A>/settings/project_storages/<A_ps_id> via PATCH parameter "storages_project_storage[project_folder_id]" leads to Access to Unau…

    opf openproject
  • High 8.1
    CVE-2026-56876 Public exploit

    extract-zip unvalidated symlink path traversal

    extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like '../../../../etc/passwd', extract-zip will extract the symlink without validation, allowing it to p…

    max-mapper extract-zip extract-zip node-extract-zip Debian Ubuntu npm
  • High 7.5
    CVE-2026-0828 Public exploit

    Kernel driver vulnerability in Safetica Endpoint Client

    Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64 , versions 10.5.75.0 and 11.11.4.0, allows unprivileged user to abuse IOCTL path and terminate protected system processes.

    Safetica Endpoint Client
  • High 7.1
    CVE-2026-56011 Public exploit

    WordPress MapPress Maps for WordPress plugin <= 2.97.3 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions.

    chrisvrichardson MapPress Maps for WordPress Web / CMS
  • Medium 6.5
    CVE-2026-8380 Public exploit

    Frontend File Manager Plugin <= 23.6 - Author+ Arbitrary Post Deletion

    The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly verify ownership of every targeted post before permanent deletion, allowing authenticated users with author-level access and above to permanently delete arbitrary posts and pages…

    Web / CMS
  • Medium 5.5
    CVE-2026-39031 Public exploit

    Lansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key array to encrypt cred…