Skip to content
OpenAdvisories

Archive

27 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /27 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

168 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-65448

    WordPress Anti Spam and list cleaner – AcyChecker plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Anti Spam and list cleaner &#8211; AcyChecker <= 1.8.1 versions.

    AcyMailing Newsletter Team Anti Spam and list cleaner &#8211; AcyChecker
  • Medium 6.5
    CVE-2026-65445

    WordPress Ad Invalid Click Protector (AICP) plugin <= 1.3.0 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Ad Invalid Click Protector (AICP) <= 1.3.0 versions.

    iSaumya Ad Invalid Click Protector (AICP)
  • Medium 5.1
    CVE-2026-53669

    React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)

    React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in <Link> and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0.

    remix-run react-router keycloak-26.5-iamguarded-compat keycloak-26.5 Wolfi npm
  • Medium 6.9
    CVE-2026-53668

    React Router: Open redirect can lead to XSS

    React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow open redirects are vulnerable to XSS. An attacker could craft a malicious link that redirects users to an unexpected external site or that …

    remix-run react-router keycloak-26.5 keycloak-26.5-iamguarded-compat Wolfi npm
  • Medium 6.9
    CVE-2026-59240

    IDOR in Prospero Flow CRM allows deletion of other users' notifications

    The vulnerability involves an Insecure Direct Object Reference (IDOR) in the `DeleteNotificationController::delete()` method at endpoint `GET /notification/delete/{id}`. The flaw allows any authenticated user, regardless of company or permissions, to delete n…

    Roskus Prospero Flow CRM
  • Medium 6.9
    CVE-2026-53667

    React Router: Cross-site Scripting is Possible due to Missing RSCErrorHandler Protocol Validation (Incomplete fix for CVE-2026-53667)

    React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if t…

    remix-run react-router vitess-24 vitess-24-compat Wolfi npm
  • Medium 6.1
    CVE-2026-53666

    React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration

    React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was written in a way that allows attacker-supplied input to overwrite certain aspects of errors caught by the SSR process, then it was possible for an attacker to trigge…

    remix-run react-router keycloak-26.5-iamguarded-compat keycloak-26.5 Wolfi npm
  • Medium 6.9
    CVE-2026-66825

    Cross-Site Scripting via Unsafe URL Schemes in Pivotick Property Links

    Pivotick contains a cross-site scripting vulnerability in the sidebar property-list component. Values associated with link-like properties, such as url, uri, href, link, website, or homepage, were rendered as hyperlinks without validating their URL scheme. An…

    pivotick pivotick
  • Medium 5.5
    CVE-2026-43782

    This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS …

    Apple macOS macOS
  • Medium 5.5
    CVE-2026-64776

    The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, …

    Apple macOS macOS
  • Medium 5.5
    CVE-2026-64721

    This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS …

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 5.5
    CVE-2026-20672

    An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.7…

    Apple macOS macOS
  • Medium 5.5
    CVE-2026-43665

    This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma …

    Apple macOS macOS
  • Medium 5.5
    CVE-2026-28900

    A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonom…

    Apple macOS macOS
  • Medium 5.5
    CVE-2026-64741

    A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 2…

    Apple iOS and iPadOS watchOS tvOS iOS
  • Medium 5.5
    CVE-2026-28849

    The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS T…

    Apple macOS macOS
  • Medium 6.5
    CVE-2026-43804

    This issue was addressed through improved state management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.…

    Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  • Medium 5.5
    CVE-2026-43756

    A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8,…

    Apple macOS macOS
  • Medium 5.5
    CVE-2026-64707

    A permissions issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS …

    Apple macOS iOS and iPadOS visionOS macOS iOS
  • Medium 5.5
    CVE-2026-64711

    This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Seq…

    Apple macOS iOS and iPadOS macOS iOS
  • Medium 5.0
    CVE-2026-43767

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8…

    Apple macOS macOS
  • Medium 5.5
    CVE-2026-43819

    An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.6. An app may…

    Apple macOS macOS
  • Medium 6.5
    CVE-2026-43792

    An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.6, macOS Tahoe 26…

    Apple macOS Safari macOS Browsers
  • Medium 6.5
    CVE-2026-64730

    The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.…

    Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  • Medium 4.7
    CVE-2026-43770

    A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14…

    Apple macOS tvOS macOS
  • Medium 4.6
    CVE-2026-43766

    An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS…

    Apple macOS macOS
  • Medium 5.5
    CVE-2026-64710

    A privacy issue was addressed by removing sensitive data. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.…

    Apple macOS macOS
  • Medium 5.5
    CVE-2026-43765

    This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma …

    Apple macOS macOS
  • Medium 5.5
    CVE-2026-64744

    An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10,…

    Apple macOS iOS and iPadOS macOS iOS
  • Medium 6.5
    CVE-2026-43821

    An access issue was addressed with improved access restrictions. This issue is fixed in Safari 26.6, iOS 18.7.10 and iP…

    Apple macOS iOS and iPadOS watchOS macOS iOS Browsers
  • Medium 5.5
    CVE-2026-43817

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, mac…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 5.5
    CVE-2026-43801

    This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPad…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 5.5
    CVE-2026-64699

    A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8,…

    Apple macOS macOS
  • Medium 4.6
    CVE-2026-43753

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, mac…

    Apple macOS iOS and iPadOS macOS iOS
  • Medium 5.5
    CVE-2026-64709

    The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 …

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 5.5
    CVE-2026-64708

    A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonom…

    Apple macOS macOS
  • Medium 5.5
    CVE-2026-43744

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 5.5
    CVE-2026-28932

    A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is …

    Apple macOS macOS
  • Medium 4.6
    CVE-2026-64732

    This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS …

    Apple macOS iOS and iPadOS macOS iOS
  • Medium 5.5
    CVE-2026-43768

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8…

    Apple macOS macOS