Skip to content
OpenAdvisories

Archive

1 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /1 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-14382 Public exploit

    Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker t…

    Google Chrome chromium chromium Browsers Debian Wolfi
  • Critical 9.8
    CVE-2026-58457 Public exploit

    Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp

    Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilter_conf hand…

    Shenzhen Aitemi E Commerce M300 Wi-Fi Repeater
  • Critical 9.8
    CVE-2026-57517 Public exploit

    Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes Parameter

    Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL queries by submitting unsanitized input through the userRes POST parameter at the user endpoint. Attackers c…

    Control Web Panel Control Web Panel
  • Critical 9.8
    CVE-2026-11387 Public exploit Scanner template

    SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset

    The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly valida…

    cozyvision1 SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery Web / CMS
  • Critical 9.8
    CVE-2026-51947 Public exploit

    An issue in Pivotal CRM 6.6.4.08 and systems using patch-ghi-15381-cwe-502-20251225.zip (fixed in Pivotal CRM 6.6.5.10 …