Skip to content
OpenAdvisories

Archive

29 June 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-56782 Public exploit Scanner template

    Gorse - Unauthenticated Database Dump and Restore via /api/dump and /api/restore Endpoints

    Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_key is empty, which is the default configuration. Remote att…

  • Critical 10.0
    CVE-2026-56290 Exploited Public exploit Scanner template EPSS 31%

    Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0

    Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

    KEV Jul 7, 2026
  • Critical 9.1
    CVE-2026-37637 Public exploit

    An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php compo…