Skip to content
OpenAdvisories

Archive

17 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /17 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-65351 Public exploit

    This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadO…

    Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian
  • Medium 6.5
    CVE-2026-65330 Public exploit

    The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequo…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 5.4
    CVE-2026-64788 Public exploit

    The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 6.6
    CVE-2026-65349 Public exploit

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 5.1
    CVE-2026-52886 Public exploit

    Notepad++: session.xml backupFilePath starts_with Bypass

    Notepad++ is a free and open-source source code editor. Prior to 8.9.7, Notepad++ validates the backupFilePath attribute from session.xml with std::wstring::starts_with against the expected backup directory without path normalization, allowing parent-director…

    notepad-plus-plus notepad-plus-plus
  • Medium 6.5
    CVE-2026-59903 Public exploit

    Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite

    Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsHandler setVaryHeader replaces application Vary headers such as Authorization or Cookie with Origin, allowing a…

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • Medium 4.7
    CVE-2026-19971 Public exploit

    LB-Link WR1210M Backup Endpoint backup.cgi main missing authentication

    A flaw has been found in LB-Link WR1210M 1.0.3. This impacts the function main of the file /www/cgi-bin/backup.cgi of the component Backup Endpoint. This manipulation causes missing authentication. The attack is only possible within the local network. The ven…

    LB-LINK WR1210M