Skip to content
OpenAdvisories

Archive

10 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /10 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-72867 Public exploit Scanner template

    Dokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.ts)

    Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.3 until 0.29.13, the incomplete fix for CVE-2026-45628 leaves packages/server/src/db/schema/compose.ts branch fields without server-side validation, allowing a direct compose.update requ…

    Dokploy dokploy
  • Critical 10.0
    CVE-2026-72898 Exploited Public exploit Scanner template EPSS 98%

    Metabase SQL injection via password reset endpoint

    Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.

    metabase metabase
    KEV Aug 11, 2026
  • Critical 9.8
    CVE-2026-28672 Public exploit

    Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder

    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger. This issue affects Apache Ranger: from 0.6 through 2.8.

    Apache Software Foundation Apache Ranger org.apache.ranger:ranger Maven
  • Critical 9.8
    CVE-2026-19089 Public exploit Scanner template

    Product Input Fields for WooCommerce < 2.0.2 - Unauthenticated Arbitrary File Upload

    The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left empty, which its own documentation advertises as accepting all files, allowing unauthenticated attackers to up…

    Web / CMS