Skip to content
OpenAdvisories

Archive

17 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /17 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

344 results · Feed

  • Critical 9.8
    CVE-2026-50772

    An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload …

  • Critical 9.8
    CVE-2026-67967

    Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code. This is an i…

  • Critical 9.8
    CVE-2026-67965

    An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login func…

  • Critical 9.8
    CVE-2026-67854

    SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code

  • Critical 9.8
    CVE-2026-67917

    zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality.…

  • Critical 9.8
    CVE-2026-67926

    An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot A…

  • Medium 6.1
    CVE-2026-67925

    Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the endp…

  • High 7.8
    CVE-2026-67961

    An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke…

  • High 7.5
    CVE-2026-67918

    Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information vi…

  • Critical 9.8
    CVE-2026-67678

    File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code

  • Critical 9.8
    CVE-2026-67960

    An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController…

  • Critical 9.8
    CVE-2026-67966

    Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daem…

  • Critical 9.8
    CVE-2026-67868

    A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateM…

  • Critical 9.8
    CVE-2026-67919 Public exploit

    An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri …

  • Critical 9.8
    CVE-2026-39254

    Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code vi…

  • Critical 9.8
    CVE-2026-39255

    Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code vi…

  • Critical 9.8
    CVE-2026-38165 Public exploit

    A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.…

  • High 7.5
    CVE-2026-68005

    An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request h…

    mini-httpd mini-httpd Debian Ubuntu
  • Critical 9.8
    CVE-2026-68004 Public exploit

    An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP pu…

  • Critical 9.8
    CVE-2026-42164

    Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a cer…

  • Critical 9.8
    CVE-2026-42163

    Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interope…

  • Critical 9.1
    CVE-2026-42162

    Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances whe…

  • Critical 9.1
    CVE-2026-51346

    SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute ar…

  • Critical 9.1
    CVE-2026-51977

    An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker …