Skip to content
OpenAdvisories

Archive

27 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /27 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High 7.1
    CVE-2026-43813 Public exploit

    A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, mac…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 7.8
    CVE-2026-39875 Public exploit

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sono…

    Apple macOS macOS
  • High 7.8
    CVE-2026-64747 Public exploit

    A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, i…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 7.1
    CVE-2026-64725 Public exploit

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 7.8
    CVE-2026-28912 Public exploit

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.…

    Apple macOS macOS
  • High 8.8
    CVE-2026-65616 Public exploit

    Potential privilege escalation to JFrog administrator privileges

    Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.

    jfrog artifactory
  • High 8.1
    CVE-2026-42016 Exploited Public exploit Scanner template

    Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation

    JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

    jfrog artifactory
    KEV Sep 11, 2026
  • High 7.5
    CVE-2026-66731 Public exploit

    facil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoS

    facil.io 0.7.5 through 0.7.6 contains a denial-of-service vulnerability in the HTTP/1.1 chunked transfer encoding parser that allows unauthenticated remote attackers to crash the server by sending a negative chunk size value. Attackers can send a single POST …

    boazsegev facil.io
  • High 7.5
    CVE-2026-66730 Public exploit

    facil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parser

    facil.io 0.6.0 through 0.7.6 contains a denial-of-service vulnerability in the multipart body parser that allows an unauthenticated remote attacker to permanently freeze worker processes at 100% CPU by sending a multipart/form-data request with a partial clos…

    boazsegev facil.io
  • High 7.5
    CVE-2026-66729 Public exploit

    facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parser

    facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows unauthenticated remote attackers to crash the server process by sending a crafted Content-Disposition header with an empty field name. Attac…

    boazsegev facil.io
  • High 7.0
    CVE-2026-65893 Public exploit

    Arbitrary Code Execution Vulnerability in CP PLUS EZ-P21 IP Camera

    This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execution throu…

    CP-Plus EZ-P21 IP Camera
  • High 7.8
    CVE-2026-64531 Public exploit

    net: openvswitch: reject oversized nested action attrs

    In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbeh…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.2
    CVE-2026-9830 Public exploit

    BookingPress Pro < 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering via Permission Callback Bug

    The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read cus…

    Web / CMS
  • High 8.1
    CVE-2026-13152 Public exploit

    Custom Fields Account Registration For WooCommerce < 1.4 - Unauthenticated Privilege Escalation

    The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registration fields from writing to the user capabilities meta key on sites that use a non-default database table prefix, so an unauthenticated user…

    Web / CMS