Skip to content
OpenAdvisories

Archive

3 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /3 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-41452 Public exploit Scanner template

    Krayin CRM 2.2.4 Missing Authentication via install/api/admin-config-setup

    Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator account by sending a crafted HTTP POST request with the X-Requested-With: XMLHttpR…

    krayin laravel-crm
  • Critical 10.0
    CVE-2026-69084 Public exploit Scanner template

    SiYuan before v3.7.3 SQL Injection via searchEmbedBlock

    SiYuan versions <= v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which passes a client-supplied SQL statement verbatim to the main read-write siyuan.db handle with no single-statement, read-only, or admin restrictions. The endpoint is gated only by…

    siyuan-note siyuan github.com/siyuan-note/siyuan/kernel Go
  • Critical 10.0
    CVE-2026-69083 Public exploit

    SiYuan before v3.7.3 SQL Injection via fullTextSearchAssetContent

    SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish RoleReader tokens. Attackers can execute arbitrary SQL on the read-write asset-content database via u…

    siyuan-note siyuan github.com/siyuan-note/siyuan/kernel Go
  • Critical 9.3
    CVE-2026-18574 Public exploit

    Authentication Bypass in Check Point Security Management Server

    An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the S…

    Check Point Security Management Server Multi-Domain Security Management Server Network devices
  • Critical 9.3
    CVE-2026-58062 Public exploit

    Stapled OCSP response accepted without binding to the checked certificate

    In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) a…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu Wolfi
  • Critical 9.8
    CVE-2026-52102 Public exploit

    An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to ex…