Skip to content
OpenAdvisories

Archive

24 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /24 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.5
    CVE-2026-16348 Public exploit

    Command Injection Vulnerability in VPN connection of Archer BE800

    An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection.  Successful exploitatio…

    TP-Link Systems Archer BE800 V1 Network devices
  • High 8.7
    CVE-2026-9254 Public exploit

    Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices

    An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can in…

    TP-Link Systems Archer BE3600 v1 Archer BE800 V1 Archer AX75 V1 Network devices
  • High 7.7
    CVE-2026-15469 Public exploit

    Hard-coded Mesh Group Private Key in TP-Link Deco XE75, XE5300, and WE10800

    The use of hard-coded cryptographic key vulnerability has been identified in the mesh functionality of Deco XE75 v3, XE5300 v3.6 and WE10800 v3.6.  A shared RSA-512 mesh group private key is present in the affected firmware and is used by the mesh protocol fo…

    TP-Link Systems Deco XE75 v3 / XE5300 v3.6/ WE10800 v3.6 Network devices
  • High 7.5
    CVE-2026-66908 Public exploit

    Apache Camel: Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a trusted key was accepted

    Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authentica…

    Apache Software Foundation Apache Camel org.apache.camel:camel-platform-http-main Maven
  • High 7.5
    CVE-2026-66907 Public exploit

    Apache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result

    Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-google-storage consumer downloads Google Cloud Storage o…

    Apache Software Foundation Apache Camel org.apache.camel:camel-google-storage Maven
  • High 7.4
    CVE-2026-76844 Public exploit

    zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write

    zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer a…

    zlib zlib zlib zlib Debian Azure Linux npm
  • High 8.5
    CVE-2026-78306 Public exploit

    DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution

    DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacke…

    DJI Mini 3 Pro Mavic 3 Classic Mavic 3