Skip to content
OpenAdvisories

Archive

3 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /3 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

313 results · Feed

  • High 8.7
    CVE-2026-59643

    OpenPGP inline-signature policy failures silently ignored

    In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 2.0.13.

    Legion of the Bouncy Castle BC-JAVA BC-FJA bouncycastle Debian Ubuntu
  • High 8.7
    CVE-2026-59644

    MLS hash-ratchet honours arbitrary 32-bit generation counter from sender

    In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.

    Legion of the Bouncy Castle BC-JAVA bouncycastle bouncycastle Debian Ubuntu
  • High 8.7
    CVE-2026-59645

    OER parser recurses without depth limit on self-referential IEEE 1609.2 schema

    In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcutil-fips 2.0.7 (2.0.X …

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • High 8.7
    CVE-2026-59646

    DTLS handshake reassembler allocates buffer from unchecked 24-bit length

    In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bctls-fips 1.0.24 (1.0.X series…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • Medium 6.9
    CVE-2026-59647

    CRMF/CMP password-MAC honours unbounded iteration count

    In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • Medium 6.9
    CVE-2026-59648

    OpenPGP Argon2 S2K honours attacker-chosen memory and passes

    In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • High 8.7
    CVE-2026-59649

    OpenPGP user-attribute subpacket length bounded only by JVM max memory

    In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), …

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • Critical 9.3
    CVE-2026-59650

    MTI/A0 DH agreement exponentiates unvalidated peer value

    In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA keycloak-26.6-iamguarded-compat Debian Ubuntu Wolfi
  • High 7.1
    CVE-2026-59651

    BKS keystore accepts legacy version with 16-bit integrity MAC key

    In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA bouncycastle Debian Ubuntu
  • Medium 6.9
    CVE-2026-59652

    LDAP filter injection in legacy jdk1.4 LDAPStoreHelper

    In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.

    Legion of the Bouncy Castle BC-JAVA bouncycastle bouncycastle Debian Ubuntu
  • High 7.1
    CVE-2026-12185

    BKS/UBER keystore allocates from untrusted lengths before integrity check

    In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA bouncycastle Debian Ubuntu
  • Critical 9.3
    CVE-2026-8763

    Name Constraints bypass via trailing dot in rfc822Name and URI

    In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu Wolfi Maven
  • Medium 5.3
    CVE-2026-15055

    PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input

    In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • Low 3.3
    CVE-2026-18581

    ggml-org llama.cpp Jinja Minja Template parser.cpp assertion

    A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input {{9|9|{ can lead to re…

    ggml-org llama.cpp llama.cpp llama.cpp Debian Ubuntu
  • High 7.1
    CVE-2026-65875

    BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a user downloads and open…

    baserCMS Users Community BaserCMS
  • High 7.5
    CVE-2026-67970

    Incorrect access control in the DS_SetDestPathCmd() component of NASA cFS v7.0.1 allows attackers to access sensitive c…

  • High 7.5
    CVE-2026-67972

    An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows attackers to contrl where received content and dat…

  • High 7.5
    CVE-2026-67973

    An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via replaying …

  • High 7.5
    CVE-2026-67976

    The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, all…

  • High 7.5
    CVE-2026-67969

    An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force the processor to reset …

  • High 7.5
    CVE-2026-67977

    An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to caus…

  • High 7.5
    CVE-2026-67974

    A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message handling in NASA cFS v…

  • High 7.5
    CVE-2026-67975

    Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new …

  • Medium 4.6
    CVE-2026-67673

    A stack-based buffer overflow vulnerability exists in the cmd_edl function of OreSat Firmware v1.0. The vulnerability i…

  • High 7.5
    CVE-2026-67978

    An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via transmitti…

  • Critical 9.8
    CVE-2026-38447

    osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with…

  • Medium 6.1
    CVE-2026-38444 Public exploit

    osTicket v1.18.3 is vulnerable to Stored Cross-Site Scripting (XSS) via the email From-header display name. The value i…

  • Medium 6.1
    CVE-2026-38446

    A stored cross-site scripting (XSS) vulnerability exists in osTicket 1.18.3 due to improper sanitization of the thread …

  • Medium 5.4
    CVE-2026-52520

    Emlog CMS <= 2.6.14 contains a stored cross-site scripting (XSS) vulnerability in the article publishing module (/admin…

  • Critical 9.8
    CVE-2026-52102 Public exploit

    An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to ex…

  • High 8.1
    CVE-2026-52521

    A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via t…

  • Critical 9.8
    CVE-2026-51190

    The "s init" command in Serverless-Devs @serverless-devs/s <= 3.1.11 passes unsanitized user input to child_process.spa…

  • Critical 9.8
    CVE-2026-51775

    SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the applicat…