Skip to content
OpenAdvisories

Archive

26 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /26 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-60004 Exploited Public exploit Scanner template EPSS 24%

    Gitea: Remote Code Execution via diffpatch Git Hook Installation

    Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

    Gitea Gitea code.gitea.io/gitea gitea Alpine Wolfi Go
    KEV Aug 25, 2026
  • Critical 9.8
    CVE-2026-80428 Public exploit

    ILIAS PHP Object Injection via Shibboleth Logout

    ILIAS before versions 9.22, 10.10, and 11.3 contains an unauthenticated PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting serialized objects through the LTI authentication endpoint and triggering d…

    ILIAS-eLearning e.V. ILIAS
  • Critical 9.8
    CVE-2026-80587 Public exploit

    mptcp: avoid combining some incoming suboptions

    In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions Some MPTCP suboptions are mutually exclusive according to the RFC8684, but also because in different places, the code doesn't expect some combi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.6
    CVE-2026-54523 Public exploit

    Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system

    Kyverno is a policy engine designed for cloud native platform engineering teams. From 1.18.0 until 1.18.2, the NamespacedMutatingPolicy CEL compiler exposes the generator library to matchConditions, allowing a namespace-scoped policy to invoke generator.apply…

    kyverno kyverno kyverno-init-container-1.18 github.com/kyverno/kyverno Wolfi Go
  • Critical 9.8
    CVE-2026-18080 Public exploit

    ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment

    The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 1.17.8 via the save_attachments() function. This is due to missing file extension vali…

    wedevs ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce Web / CMS
  • Critical 9.1
    CVE-2026-77542 Public exploit

    A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerabili…

    Ubiquiti UID Enterprise Agent Network devices
  • Critical 9.8
    CVE-2026-18431 Public exploit

    Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write

    The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input val…

    ThemeFusion Avada (Fusion) Builder Avada | Website Builder For WordPress & WooCommerce Web / CMS
  • Critical 9.8
    CVE-2026-19632 Public exploit Scanner template

    TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure

    The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trp_get_translations_regular' AJAX action. This makes it possible f…

    Cozmoslabs TranslatePress – Translate Multilingual sites with AI Translation Web / CMS