Skip to content
OpenAdvisories

Archive

13 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /13 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.9
    CVE-2026-73570 Exploited Public exploit Scanner template EPSS 77%

    A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp…

    Zimbra Collaboration
    KEV Aug 21, 2026
  • High 8.1
    CVE-2026-70463 Public exploit

    rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing

    rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name co…

    RsyncProject rsync rsync rsync Debian Ubuntu Azure Linux Alpine
  • High 7.2
    CVE-2026-6471 Public exploit

    PostgreSQL logical decoding can dlopen arbitrary file

    Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary cod…

    postgresql-15 postgresql-9.3 postgresql-17 postgresql-18 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.8
    CVE-2026-14669 Public exploit

    PostgreSQL to_char heap buffer overflow executes arbitrary code

    Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.6, 17.11, 16.15, …

    postgresql-15 postgresql-9.3 postgresql-17 postgresql-18 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.8
    CVE-2026-14662 Public exploit

    PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound

    Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating s…

    postgresql-15 postgresql-9.3 postgresql-17 postgresql-18 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2026-13610 Public exploit

    KiviCare < 4.5.2 - Unauthenticated Privilege Escalation via Registration

    The KiviCare WordPress plugin before 4.5.2 does not restrict the roles assignable through its unauthenticated registration endpoint, allowing unauthenticated attackers to create an active, privileged clinic-staff (doctor) account with full access to patient r…

    Web / CMS