Skip to content
OpenAdvisories

Archive

3 August 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-67599 Public exploit

    ClearOS 7.9 OS Command Injection via Log Viewer filter parameter

    ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute arbitrary commands by submitting unsanitized input through the filter parameter, which is interpolated directly into a shell …

  • High 7.4
    CVE-2026-67598 Public exploit

    Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php

    Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows network-adjacent attackers to intercept outbound HTTPS requests to configured LLM providers by presenting arbitrary TLS certificates, a…

  • High 7.0
    CVE-2026-18718 Public exploit

    Ghidra Swift Demangler Analyzer Arbitrary Code Execution via Project State

    Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allows an attacker to execute arbitrary binaries by supplying a malicious Ghidra project with a crafted Swift tool directory path. When a victim opens the attacker-…