Skip to content
OpenAdvisories

Archive

9 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /9 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.1
    CVE-2026-50181 Public exploit

    Langroid: Path traversal in the file tools allows read/write outside configured current directory

    Langroid is a framework for building large-language-model-powered applications. Prior to version 0.64.0, Langroid's `ReadFileTool` and `WriteFileTool` appear to treat `curr_dir` as the intended working-directory boundary for file operations. However, the tool…

    langroid langroid langroid PyPI
  • High 7.2
    CVE-2026-61343 Public exploit

    LibreBooking path traversal

    LibreBooking's email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. …

    LibreBooking LibreBooking
  • High 8.8
    CVE-2026-59734 Public exploit

    Coolify: OS Command Injection in Health Check Configuration Allows Remote Code Execution

    Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, Coolify's app/Jobs/ApplicationDeploymentJob.php generate_healthcheck_commands() function directly interpolated the health_check_host, …

    coollabsio coolify
  • High 7.5
    CVE-2025-63579 Public exploit

    Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The sec…

  • High 8.1
    CVE-2025-45422 Public exploit

    Incorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass normal restrictions and ma…