Skip to content
OpenAdvisories

Archive

7 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /7 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-71557 Public exploit

    go-git: Malicious reference names may modify files outside the reference storage

    go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized before being used to construct on-disk paths under the reference storage directory, so a maliciously crafted reference …

    go-git go-git zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • Medium 6.1
    CVE-2026-66492 Public exploit

    Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3

    Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulnerability.

    phoca.cz Phoca Commander extension for Joomla Web / CMS
  • Medium 6.4
    CVE-2026-66493 Public exploit

    Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3

    Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities.

    phoca.cz Phoca Commander extension for Joomla Web / CMS
  • Medium 6.5
    CVE-2026-16265 Public exploit

    WP Maps < 4.9.7 - Subscriber+ Denial of Service

    The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not restrict the operation it dispatches, allowing users with a Subscriber account to trigger uncontrolled recursion that exhausts server resourc…

    Web / CMS