Skip to content
OpenAdvisories

Archive

9 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /9 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-59827 Public exploit

    Metabase: Unsafe Deserialization of H2 Query Results

    Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4, Metabase instances with an H2 database connection, including the default sample database, deserialize arbitrary Java objects retur…

    metabase metabase
  • Critical 10.0
    CVE-2026-59726 Public exploit Scanner template

    Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment

    Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoints without authentication, allowing an unauthenticated network attacker to invoke…

    ruvnet ruflo
  • Critical 9.2
    CVE-2026-56292 Public exploit Scanner template

    Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1

    Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1 - A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was discovered. Exploiting this flaw can lead to unauthorized database access and data leakage.

    Datasolution acymailing.com AcyMailing extension for Joomla Web / CMS
  • Critical 10.0
    CVE-2026-56291 Exploited Public exploit Scanner template EPSS 15%

    Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1

    Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

    balbooa.com balbooa.com Balbooa Forms extension for Joomla Web / CMS
    KEV Jul 10, 2026