Skip to content
OpenAdvisories

Archive

30 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /30 August 2026 →
  1. 1377
  2. 2278
  3. 3181
  4. 472
  5. 588
  6. 6199
  7. 7184
  8. 8365
  9. 9281
  10. 10354
  11. 1180
  12. 1263
  13. 13346
  14. 141016
  15. 15280
  16. 16248
  17. 17294
  18. 1881
  19. 19464
  20. 20266
  21. 211479
  22. 22201
  23. 23376
  24. 24208
  25. 25285
  26. 2616
  27. 27443
  28. 28250
  29. 29279
  30. 30662
  31. 31192
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2026-67206 Public exploit

    Wolf CMS 0.8.3.1 Authenticated RCE via FileManagerController File Upload

    Wolf CMS through 0.8.3.1 contains a remote code execution vulnerability in FileManagerController that allows authenticated attackers to create arbitrary PHP files by exploiting missing file extension validation in the create_file() and save() functions. Attac…

    wolfcms wolfcms
  • High 8.8
    CVE-2026-58222 Public exploit

    Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes

    A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • High 8.1
    CVE-2026-17544 Public exploit

    Out-of-bounds write in bccomp() via crafted operand and scale

    Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

    PHP Group PHP php8.4 php84 Debian Ubuntu Alpine
  • High 8.1
    CVE-2026-17543 Public exploit

    SQL injection in ext-pgsql via E'...' backslash breakout

    Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2026-58043 Public exploit

    A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Un…

    Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.0
    CVE-2026-47858 Public exploit

    live information startup mode is vulnerable for remote code execution

    Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier S…

    Spring Spring Tools for Eclipse Spring Tools for VSCode / Cursor / Theia