Skip to content
OpenAdvisories

Archive

22 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /22 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-60372

    Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

    Oracle Oracle Platform Security for Java
  • Critical 9.9
    CVE-2026-60369

    Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

    Oracle Oracle Platform Security for Java
  • Critical 9.8
    CVE-2026-60367

    Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

    Oracle Oracle Platform Security for Java
  • Critical 10.0
    CVE-2026-60366

    Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thir…

    Oracle Oracle Platform Security for Java
  • Critical 9.1
    CVE-2026-64793

    Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions

    Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property overrides to render restricted or unpublished articles or modules. A content auth…

    regularlabs.com Articles Anywhere extension for Joomla Modules Anywhere extension for Joomla Web / CMS
  • Critical 9.8
    CVE-2026-64796

    Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension

    Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free did not require both the article creator and last modifier to be Super Users before executing article PHP. Pro did not consistently enforce configured CSS, JavaS…

    regularlabs.com Sourcerer extension for Joomla Web / CMS
  • Critical 9.1
    CVE-2026-64798

    Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension

    Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.

    regularlabs.com IP Login extension for Joomla Web / CMS
  • Critical 9.6
    CVE-2026-16624

    CVE-2026-16624

    Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on any team via unvalidated teamId injection, then steal booking data, including fields like organizer/attendee emails and custom responses, …

    Cal.com cal.diy
  • Critical 9.1
    CVE-2026-46738

    Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in th…

    Dell PowerProtect Data Manager
  • Critical 9.1
    CVE-2026-40712

    Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in th…

    Dell PowerProtect Data Manager
  • Critical 9.8
    CVE-2026-16606

    Unauthenticated remote code execution (pre-auth RCE) vulnerability in openFT for Linux and Oracle Solaris

    A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution (pre-auth RCE) on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intell…

    Fujitsu Oracle Solaris openFT Linux openFT Linux
  • Critical 9.8
    CVE-2026-2395 Public exploit

    SQLi in Xpoda Türkiye Informatics Technology's No Code Platform

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection. This issue affects No Code Platform: from 4.1.3 before 4.1.4.

    Xpoda Türkiye Informatics Technology No Code Platform
  • Critical 9.1
    CVE-2026-62144

    Management Authentication Bypass and Privilege Escalation

    An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow comman…

    Check Point Quantum Security Management Multi-Domain Security Management Network devices
  • Critical 9.3
    CVE-2026-16232 Exploited Public exploit Scanner template

    Authentication Bypass in the SmartConsole Login Process Using an Application Token

    An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows …

    Check Point Quantum Security Management Multi-Domain Security Management Network devices
    KEV Jul 22, 2026
  • Critical 9.4
    CVE-2026-63048

    Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2

    Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.

    joomlack.fr Page Builder CK extension for Joomla Web / CMS
  • Critical 9.8
    CVE-2025-50329

    An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and exe…