Skip to content
OpenAdvisories

Archive

2 August 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-18577 Exploited Public exploit Scanner template EPSS 15%

    Incomplete patch leads to administrative account takeover

    An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

    KEV Aug 3, 2026
  • High 7.5
    CVE-2026-16540 Public exploit

    Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Appointment Data Disclosure and Mass Deletion via purge Endpoint

    The Simply Schedule Appointments WordPress plugin before 1.6.12.6 does not correctly restrict a bulk appointment operation to the requester's own records, allowing unauthenticated users to retrieve the personal data of all appointments across the site and, on…