Skip to content
OpenAdvisories

Archive

22 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /22 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.7
    CVE-2026-13078 Public exploit

    Local File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader

    A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 4.3
    CVE-2026-65650 Public exploit

    Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.

    Elgg Elgg
  • High 8.8
    CVE-2026-65013 Public exploit

    Onlook tRPC Insecure Direct Object Reference via multiple procedures

    Onlook through 0.2.32, fixed in commit 423e2e9, contains a broken object level authorization vulnerability that allows authenticated attackers to access and manipulate other users' resources by supplying arbitrary UUID values to tRPC API procedures including …

    onlook repo
  • Critical 9.8
    CVE-2026-2395 Public exploit

    SQLi in Xpoda Türkiye Informatics Technology's No Code Platform

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection. This issue affects No Code Platform: from 4.1.3 before 4.1.4.

    Xpoda Türkiye Informatics Technology No Code Platform
  • Critical 9.3
    CVE-2026-16232 Exploited Public exploit Scanner template

    Authentication Bypass in the SmartConsole Login Process Using an Application Token

    An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows …

    Check Point Quantum Security Management Multi-Domain Security Management Network devices
    KEV Jul 22, 2026
  • High 8.1
    CVE-2026-13181 Public exploit

    RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX

    In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName processing and trigger unsafe attacker-controlled type resolution, enabling remote code execution in affected deployments.

    Progress Software Telerik UI for ASP.NET AJAX
  • High 7.8
    CVE-2026-65600 Public exploit

    Traefik before v2.11.52 Authentication Bypass via ReplacePathRegex

    Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v3.7.0 <= v3.7.6 contain an authentication bypass via path traversal in the ReplacePathRegex middleware. When ReplacePathRegex is configured with a regex that captures user-controlled path segments wi…

    traefik traefik github.com/traefik/traefik github.com/traefik/traefik/v2 Go
  • High 8.9
    CVE-2026-65591 Public exploit

    n8n before 1.123.64 Sanitizer Bypass Remote Code Execution

    n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator's computed-member handler. An authenticated user with workflow create or modify permissions can craft a malicious expression to bypass the sanitizer and achieve host-level code e…

    n8n-io n8n n8n npm
  • Medium 6.5
    CVE-2026-2406 Public exploit

    IDOR in Universe Software's Online Registration and Workflow Management System

    Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Wor…

    Universe Software Computer Marketing Trade and Industry Online Registration and Workflow Management System
  • High 7.8
    CVE-2026-38765 Public exploit

    An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kern…

  • High 7.8
    CVE-2026-38766 Public exploit

    An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the sub_…

  • Medium 5.5
    CVE-2026-38763 Public exploit

    An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via th…