Skip to content
OpenAdvisories

Archive

21 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /21 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.5
    CVE-2026-56819 Public exploit

    Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)

    Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, a remote unauthenticated peer can leak one direct `ByteBuf` per HTTP/2 `DATA` frame i…

    netty netty druid trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  • Medium 6.5
    CVE-2026-61082 Public exploit

    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are aff…

    Oracle MySQL Connectors mysql-connector-java Ubuntu
  • High 7.1
    CVE-2026-60623 Public exploit

    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are aff…

    Oracle MySQL Connectors mysql-connector-java Ubuntu
  • High 7.7
    CVE-2026-60586 Public exploit

    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are aff…

    Oracle MySQL Connectors mysql-connector-java Ubuntu
  • Critical 9.9
    CVE-2026-60206 Public exploit

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle Oracle WebLogic Server
  • High 7.5
    CVE-2026-56852 Public exploit

    Infinite loop on invalid input in golang.org/x/text

    A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

    golang.org/x/text golang.org/x/text/unicode/norm zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • High 8.4
    CVE-2026-64824 Public exploit

    Home Assistant Core < 2026.7.0 Symlink Path Traversal RCE via backup-restore

    Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup-restore function that allows attackers to write files to arbitrary absolute filesystem paths by supplying a crafted tar archive with a SYMTYPE entry containing a benign …

    home-assistant Home Assistant Core
  • High 7.8
    CVE-2026-8933 Public exploit

    snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup

    A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-c…

    Canonical Ubuntu 22.04 LTS Ubuntu 24.04 LTS Ubuntu 26.04 LTS Debian Ubuntu
  • Critical 9.8
    CVE-2026-65008 Public exploit

    Grav before 2.0.7 Remote Code Execution via Blueprint dynamicData

    Grav 2.0.4 (fixed in 2.0.7) contains a remote code execution vulnerability in Blueprint::dynamicData() (system/src/Grav/Common/Data/Blueprint.php), which passes a Class::method callable string and its arguments directly to call_user_func_array() without any a…

    getgrav grav
  • High 7.2
    CVE-2026-6952 Public exploit

    A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-…

    Zyxel AX7501-B1 firmware Network devices
  • Critical 9.8
    CVE-2025-66390 Public exploit

    In Microsoft Azure API Management through 2025-10-17, when self-service signup (username/password Basic Authentication)…