Skip to content
OpenAdvisories

Archive

17 July 2026

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-14871 Public exploit

    osTicket v1.18.3 - v1.17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosure

    osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization (BOLA) leading to Insecure Direct Object Reference (IDOR) in the AJAX ticket-management subsystem.

  • High 7.7
    CVE-2026-62201 Public exploit

    OpenClaw < 2026.6.6 Network Policy Bypass via exec-server

    OpenClaw versions before 2026.6.6 contain a network policy bypass vulnerability in the sandbox exec-server that allows lower-trust callers to reach internal network destinations blocked by OpenClaw policy. Attackers can send HTTP requests through the exec-ser…

  • High 8.1
    CVE-2025-60357 Public exploit

    AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentE…

  • High 7.5
    CVE-2026-51833 Public exploit

    Xenforo 2.3.8 is vulnerable to SSRF. Attackers that have administrator privileges or are able to add/save RSS feeds can…