Skip to content
OpenAdvisories

Archive

5 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /5 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-20303 Public exploit

    Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple inter…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
  • Critical 9.8
    CVE-2026-66747 Public exploit

    ENDLESSDOORS: Zbtlink Router rctl/kworker Phone-Home Root Implant

    Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line. It is the open-source ycsunjane/rctl tool built in as an OpenWrt package (librctl.so), started at boot and run as root un…

    Zbtlink WE5927 Firmware CPE2801 Firmware WG2105 Firmware
  • Critical 9.6
    CVE-2026-70376 Public exploit

    Pluck CMS - CSRF via Spoofable Missing-Referer Bypass Leads to Stored XSS and RCE

    Pluck CMS's admin panel relies solely on a Referer-header comparison (requestedByTheSameDomain in data/inc/functions.admin.php, gating every admin.php action) for CSRF protection, with no per-request anti-CSRF token anywhere in the admin area.

    pluck-cms Pluck CMS