Skip to content
OpenAdvisories

Archive

18 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /18 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 8.7
    CVE-2026-15315 Public exploit

    Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C120 and C200

    Tapo C120 v1 and C200 v5 contain an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weaknesses in challenge parameter validation to bypass normal authentication controls a…

    TP-Link Systems Tapo C200 v5 Tapo C120 v1 Network devices
  • High 7.5
    CVE-2026-50142 Public exploit

    libheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check)

    libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.0, a crafted HEIF sequence accepted by heif_context_read_from_memory() with the msf1 sequence brand can cause unbounded heap allocation. In libheif/sequences/seq_boxes.cc, Box_…

    strukturag libheif libheif libheif Debian Ubuntu Alpine
  • High 7.1
    CVE-2026-17106 Public exploit

    Tar extraction in moby/go-archive can write outside the destination directory via link following

    The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical str…

    Docker moby Docker Desktop Docker Sandboxes Debian Ubuntu Azure Linux Wolfi Go
  • High 8.9
    CVE-2026-73373 Public exploit

    Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2

    Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The default list of dangerous files did not include SHTML files. On servers that executed these files, that could lead to code execution.

    Joomla! Project Joomla! CMS Joomla! Framework Filesystem package Web / CMS
  • High 7.5
    CVE-2026-19500 Public exploit

    SureForms contains an uncontrolled resource consumption vulnerability

    The Entries component in Brainstorm Force SureForms version, less than 2.12.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, pr…

    SureForms SureForms
  • High 8.8
    CVE-2026-19501 Public exploit

    CVE-2026-19501

    CSV export functionality in Brainstorm Force SureForms version, <= 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on …

    SureForms SureForms
  • High 8.5
    CVE-2026-75898 Public exploit

    RAGFlow < 0.26.3 - Server-Side Request Forgery via Agent Invoke Component

    RAGFlow before 0.26.3 contains a server-side request forgery vulnerability in the agent workflow "Invoke" component (agent/component/invoke.py). The component builds an outbound request URL from canvas configuration and runtime template variables and passes i…

    InfiniFlow RAGFlow
  • High 8.8
    CVE-2026-24301 Public exploit

    Microsoft Copilot Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

    Microsoft Copilot Web
  • High 8.8
    CVE-2026-74939 Public exploit

    Privilege escalation in the DOM: Navigation component

    Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • High 8.7
    CVE-2026-75855 Public exploit

    ArcadeDB before 26.8.1 Path Traversal via create/drop database

    ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint's create database and drop database commands, allowing authenticated root users to write and delete arbitrary files outside the configured database directory. …

    ArcadeData arcadedb
  • High 8.8
    CVE-2026-75827 Public exploit

    Grav before 2.0.15 Arbitrary File Write via error_log

    Grav before 2.0.15 contains an arbitrary file write vulnerability in the Blueprint dynamic-data bare-function validation that uses an incomplete denylist instead of a positive allowlist. Attackers with page-edit or blueprint-config access can invoke the error…

    getgrav grav getgrav/grav Packagist
  • High 8.8
    CVE-2026-67920 Public exploit

    An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.Migratio…