Skip to content
OpenAdvisories

Archive

10 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /10 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-61459 Public exploit

    MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools

    MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name pa…

    Flux159 mcp-server-kubernetes mcp-server-kubernetes mcp-server-kubernetes npm PyPI
  • Critical 9.8
    CVE-2026-15282 Public exploit

    Instant Appointment <= 1.2 - Unauthenticated Arbitrary File Upload

    The Instant Appointment plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'insapp_upload_image_as_attachment' function in all versions up to, and including, 1.2. This makes it possible for unauthenticated …

    tenteeglobal Instant Appointment Web / CMS
  • Critical 9.8
    CVE-2026-14894 Public exploit Scanner template

    Super Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value)

    The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 6.3.313 via the submit_form function. This is due to missing file type validation and the absence of any capability ch…

    WebRehab Super Forms – Drag & Drop Form Builder Web / CMS
  • Critical 9.1
    CVE-2026-51119 Public exploit

    An issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileges via the /SystemUsers/CreateAppUser c…