Skip to content
OpenAdvisories

Archive

24 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /24 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.8
    CVE-2026-78435

    Faveo Helpdesk Logo SettingsController.php unlink path traversal

    A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler. Such manipulation of the argument data1 leads to path traversal…

    Faveo Helpdesk
  • Low —
    GHSA-4ph6-mjv7-3fq6

    netfoil vulnerable to improper handling of untrusted DoH response data

    ### Summary HTTPS RR data returned from the DoH server was not properly handled. Unverified APLN data (which could contain arbitrary byte sequences) was written directly to the log. It could also cause unnecessary memory usage. The single-byte response code w…

    github.com/tinfoil-factory/netfoil Go
  • Low 2.3
    CVE-2026-75554

    Explicit organization scopes survive token refresh after membership ends

    Insufficient Session Expiration vulnerability in the OAuth token refresh grant in hexpm hexpm allows a user removed from an organization to keep reading its private packages. expand_repositories_scope/3 in lib/hexpm/permissions.ex only rewrites the literal re…

    hexpm hexpm
  • Low 3.5
    CVE-2026-76816

    Netty: MQTT Topic Name and Client ID Validation Bypass

    Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client identifiers, will topics, usernames, and PUBLISH topic names before encoding, allowing prohibited null…

    netty netty netty netty Debian Ubuntu
  • Low 3.1
    CVE-2026-78187

    Piwigo Public Authentication cross site scripting

    A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity lev…