Skip to content
OpenAdvisories

Archive

20 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /20 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-53595 Public exploit Scanner template

    FreeScout vulnerable to anonymous account takeover via /user-setup empty invite_hash on MySQL

    FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the public endpoint `POST /user-setup/{hash}/{invite_sent_at}` (`OpenController@userSetupSave`) selects the target account solely by its `invite_hash`…

    freescout-help-desk freescout
  • Critical 9.8
    CVE-2026-63766 Public exploit

    GPT-SoVITS 20250606v2pro OS Command Injection via webui.py

    GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5 functions interpolate unsanitized Gradio textbox values directly into shell commands executed with shell=True. Attackers can inject…

    RVC-Boss GPT-SoVITS
  • Critical 10.0
    CVE-2026-61424 Public exploit

    Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2

    Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE.

    dj-extensions.com DJ-Classifieds extension for Joomla Web / CMS
  • Critical 9.8
    CVE-2026-62183 Public exploit

    Apache Syncope: User self-service privilege escalation

    Improper Privilege Management vulnerability in Apache Syncope. When: * the all-Java user workflow adapter is configured, or * the Flowable user workflow adapter is configured, bearing a BPMN definition not requiring admin approval for user self registration o…

    Apache Software Foundation Apache Syncope
  • High 7.3
    CVE-2026-12080 Public exploit

    Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys

    A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass o…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2026-9833 Public exploit Scanner template

    Tag Groups < 2.2.0 - Reflected XSS via 'tag_groups_task' Parameter

    The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters before reflecting it in the response body served with an HTML content type, allowing unauthenticated attackers …

    Web / CMS
  • Medium 5.4
    CVE-2026-13156 Public exploit

    MailerSend - Official SMTP Integration < 1.0.8 - Settings Deletion and Plugin Deactivation via CSRF

    The MailerSend WordPress plugin before 1.0.8 does not perform a nonce check on its configuration-delete action (it verifies the manage_options capability but ignores the nonce), so an attacker can trick a logged-in administrator into visiting a crafted page t…

    Web / CMS
  • High 8.6
    CVE-2026-11349 Public exploit

    Modern Events Calendar (Lite & Pro) < 7.34.0 - Unauthenticated SQL Injection via mec_list_load_more

    The Modern Event Calendar Pro WordPress plugin before 7.34.0, Modern Events Calendar Lite WordPress plugin before 7.34.0 do not sanitise and escape a request parameter before using it in a SQL statement, through an AJAX action available to unauthenticated use…

    Web / CMS
  • Critical 9.8
    CVE-2026-52656 Public exploit

    An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based v.1.4C and before allows an …

  • High 7.5
    CVE-2026-51031 Public exploit

    FlareSolverr before version 3.4.7 contains a server-side request forgery (SSRF) vulnerability in the /v1 API endpoint. …

  • Medium 6.9
    CVE-2026-51385 Public exploit

    An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code …

  • Low 3.7
    CVE-2026-26080 Public exploit

    HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAPr…

    HAProxy HAProxy haproxy Debian