Skip to content
OpenAdvisories

Archive

18 August 2026

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-47627 Public exploit

    NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A succe…

  • Critical 9.1
    CVE-2026-18963 Public exploit Scanner template

    Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass

    A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for a…

  • Critical 9.8
    CVE-2026-74943 Public exploit

    Use-after-free in the Graphics: ImageLib component

    Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Critical 9.8
    CVE-2026-74936 Public exploit

    Use-after-free in the JavaScript: WebAssembly component

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

  • Critical 9.8
    CVE-2026-15748 Public exploit

    Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration

    The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handle_file_upload function. This is due to insufficient file type validation in handle_file_upload, where the dangerous-exte…

  • Critical 9.8
    CVE-2021-43717 Public exploit

    An issue exists in pson EH-TW5350 Epson iProjection.apk v3.2.6. If you identify a projector equipped with an iProjectio…

  • Critical 9.8
    CVE-2021-43716 Public exploit

    Verification Bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Network Updater Ver.1.20. The Epson projector…

  • Critical 9.3
    CVE-2026-67921 Public exploit

    Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions up to 2.25.4 via the CorsConfigurer.java an…