Skip to content
OpenAdvisories

Archive

5 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /5 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-71205 Public exploit

    changedetection.io - No Rate Limiting on /login Enables Unlimited Password Brute-Force

    changedetection.io's /login route checks the submitted password against a single PBKDF2-HMAC-SHA256 hash with no per-IP or per-session rate limiting, failed-attempt counter, or lockout (no rate-limiting library is present in requirements.txt).

    dgtlmoon changedetection.io
  • Medium 6.3
    CVE-2026-71204 Public exploit

    changedetection.io - Omitted Checkbox in /settings Save Silently Disables API Key Enforcement

    changedetection.io's /settings save handler builds an update dict from form.data['application'] and blind-merges it into the stored application settings via .update.

    dgtlmoon changedetection.io
  • Medium 5.3
    CVE-2026-71203 Public exploit

    changedetection.io - Missing Authentication on /api/v1/full-spec Discloses Full OpenAPI Schema

    changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller's x-api-key header, except the Spec resource registered at /api/v1/full-spec (changedetectionio/api/Spec.py), whose get method carries neither @auth.…

    dgtlmoon changedetection.io
  • Medium 6.1
    CVE-2026-17532 Public exploit Scanner template

    Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scripting

    The Seraphinite Accelerator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'seraph_accel_prep' parameter in versions up to, and including, 2.29.15. This is due to the CacheExtractPreparePageParams() function using PHP's loose ine…

    seraphinitesoft Seraphinite Accelerator Web / CMS