Skip to content
OpenAdvisories

Archive

24 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /24 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

87 results · Clear filters · Feed

  • Medium 5.8
    CVE-2026-78205

    BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address Space

    BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space (100.64.0.0/10, CGNAT). In versions 1.4.19 through 1.4.39, an una…

    bentoml BentoML
  • Medium 6.3
    CVE-2026-78160

    Dolibarr ERP User Notes note.php authorization

    A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing of the file /user/note.php of the component User Notes Handler. The manipulation of the argument ID leads to authorization bypass. The attac…

    Dolibarr ERP
  • Medium 6.3
    CVE-2026-78158

    Open5GS AMF UEContextReleaseRequest Path improper authorization

    A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseRequest Path Handler. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely.

  • Medium 6.1
    CVE-2022-30983

    A cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows re…

  • Medium 6.5
    CVE-2026-75370

    An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC so…

  • Medium 6.2
    CVE-2026-71832

    Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc, which allows a remote…

    aria2 aria2 Debian Ubuntu
  • Medium 4.7
    CVE-2026-56136

    In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attac…

    ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux