Skip to content
OpenAdvisories

Archive

11 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /11 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-73034 Public exploit Scanner template

    DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header

    DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the user_id HTTP header of the Python file-upload endpoi…

    eosphoros-ai DB-GPT
  • Critical 9.1
    CVE-2026-71362 Exploited Public exploit Scanner template EPSS 92%

    Adobe Commerce | Incorrect Authorization (CWE-863)

    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user in…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
    KEV Sep 24, 2026
  • Critical 9.8
    CVE-2026-62878 Public exploit

    Windows DNS Server Remote Code Execution Vulnerability

    Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  • Critical 10.0
    CVE-2026-58115 Public exploit

    A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4-1 running I…

    Siemens SIMATIC IoT2050 Basic (6ES7647-0BA00-0YA2) SIMATIC IoT2050 SM (6ES7647-0CA00-1AA2) SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) ICS / OT
  • Critical 9.8
    CVE-2026-72550 Public exploit

    Friendica Friendica - SQL Injection

    An SQL injection vulnerability in Friendica through the 2026.08-dev branch allows unauthenticated remote attackers to execute arbitrary SQL statements via the photo-view order parameter. The parameter is concatenated unescaped into a SHOW COLUMNS query via a …

    Friendica Friendica
  • Critical 10.0
    CVE-2026-58231 Public exploit

    Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

    SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise …

    SAP SAP Commerce Cloud (Data Hub Adapter)
  • Critical 9.1
    CVE-2026-19516 Public exploit

    CVE-2026-19516 CVE Record

    A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafana_api_request tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configur…

    Grafana Grafana MCP Server mcp-grafana Web / CMS
  • Critical 9.8
    CVE-2026-34265 Public exploit

    Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform

    SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leadin…

    SAP SAP NetWeaver and ABAP Platform