Skip to content
OpenAdvisories

Archive

4 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /4 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-64633 Public exploit

    A vulnerability allowing remote unauthenticated code execution on the agent host.

    Veeam One
  • Critical 9.5
    CVE-2026-58073 Public exploit

    A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent a…

    Veeam Service Provider Console
  • Critical 9.4
    CVE-2026-69254 Public exploit

    Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

    Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, executeJavaScriptCode() accepted caller-provided nodeVMOptions and merged them over the default NodeVM security settings in packages/components/src/utils.…

    FlowiseAI Flowise flowise flowise-components npm
  • Critical 9.8
    CVE-2026-69098 Public exploit

    kotaemon 0.12.0 Unauthenticated Remote Code Execution via Insecure Deserialization

    kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the check_connection endpoint that allows unauthenticated attackers to instantiate arbitrary Python classes by supplying crafted YAML/JSON input with a __type__ field. Attackers can…

    Cinnamon kotaemon
  • Critical 9.8
    CVE-2026-61515 Public exploit

    Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell

    Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a crafted JSON payload to the DebugShell interface exposed on…

    Puwell Technology IP Camera
  • Critical 9.8
    CVE-2026-64564 Public exploit

    sctp: don't free the ASCONF's own transport in DEL-IP processing

    In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asconf->transport (== chunk->transport, se…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux