Skip to content
OpenAdvisories

Archive

24 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /24 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-77635 Public exploit

    CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver

    CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lines, FunctionsBuilder::jsonValue() with PostgresDriver is vulnerable to SQL injection when user-controlled data is supplied to the json…

    cakephp cakephp cakephp/database cakephp/cakephp Debian Ubuntu Packagist
  • Critical 9.8
    CVE-2026-78329 Public exploit

    Apache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes

    Improper input validation vulnerability in Apache Camel Undertow component. This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. UndertowEndpoint defaulted its headerFilterStrategy field to the base…

    Apache Software Foundation Apache Camel org.apache.camel:camel-undertow Maven
  • Critical 9.8
    CVE-2026-71300 Public exploit

    Apache Camel: Camel-Atmosphere-Websocket: WebSocket dispatch header injection

    Improper input validation vulnerability in Apache Camel Atmosphere Websocket component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-atmosphere-websocket producer selects which conn…

    Apache Software Foundation Apache Camel org.apache.camel:camel-atmosphere-websocket Maven
  • Critical 9.1
    CVE-2026-66906 Public exploit

    Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir

    Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure S…

    Apache Software Foundation Apache Camel org.apache.camel:camel-azure-storage-blob Maven
  • Critical 9.8
    CVE-2026-76071 Public exploit

    Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter

    Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. …

    Netis NC63
  • Critical 9.8
    CVE-2026-76070 Public exploit

    Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password Parameter

    Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi.…

    Netis NC63
  • Critical 9.1
    CVE-2026-19874 Public exploit

    Konami's Metal Gear Online 3 contains a heap-based buffer overflow

    A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affected function processes a list of kicked player identifiers using the lobby data ke…

    Konami Metal Gear Online 3