Skip to content
OpenAdvisories

Archive

26 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /26 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-57978

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • Medium 4.3
    CVE-2026-17459

    perwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink

    A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/ExternalResourceHandler.jav of the component SparkJava. Executing a manipulation can l…

    perwendel spark
  • Medium 6.3
    CVE-2026-17458

    mf-yang openclaw-cn Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgery

    A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.ts of the component Browser Control HTTP API. Performing a manipulation results in server-side request forgery.…

    mf-yang openclaw-cn
  • Medium 4.3
    CVE-2026-17457

    mf-yang openclaw-cn Scheme navigation-guard.ts assertBrowserNavigationAllowed information disclosure

    A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserNavigationAllowed of the file src/browser/navigation-guard.ts of the component Scheme Handler. Such manipulation of the argument url leads t…

    mf-yang openclaw-cn
  • Medium 6.3
    CVE-2026-17434

    nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization

    A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component add_mcp_server. Executing a manipulation can lead to improper authorization. The attack may be la…

    nanocoai nanoclaw
  • Medium 5.3
    CVE-2026-17433

    nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization

    A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. …

    nanocoai nanoclaw
  • Medium 5.0
    CVE-2026-17432

    NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control

    A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/simplex/adapter.py of the component SimpleX Gateway Authorization. The manipulation of th…

    Nous Research hermes-agent