Skip to content
OpenAdvisories

Archive

10 July 2026

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.3
    CVE-2026-57850 Public exploit

    RustDesk Missing Session Scope Enforcement Allows Out-of-Scope Control Message Injection

    RustDesk before 1.4.9 does not enforce a session's authorized connection scope on the server side, so a peer granted a limited session type (FileTransfer, PortForward, ViewCamera, or Terminal) can send control messages and login options reserved for a full Re…

  • High 8.1
    CVE-2026-59795 Public exploit

    In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

  • High 8.2
    CVE-2026-29519 Public exploit

    Lucee CFML Server Reflected XSS via URL Path Parsing

    Lucee CFML Server versions across the 5.3.x, 6.1.x, 6.2.x, and 7.0.x release lines contain a reflected cross-site scripting vulnerability in URL path parsing that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser by…

  • High 8.4
    CVE-2026-21045 Public exploit

    Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remot…