Skip to content
OpenAdvisories

Archive

26 August 2026

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.1
    CVE-2026-43621 Public exploit

    Simple Machines Forum < 2.1.7 Authorization Confusion via Profile::load()

    Simple Machines Forum (SMF) through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows authenticated low-privileged users to gain administrator access by supplying multiple values for the …

  • High 8.7
    CVE-2026-65647 Public exploit

    Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as …

  • High 7.8
    CVE-2026-80521 Public exploit

    af_unix: Unlink scc_entry in unix_del_edge().

    In the Linux kernel, the following vulnerability has been resolved: af_unix: Unlink scc_entry in unix_del_edge(). Kyle Zeng reported that GC could free a dead SCC partially. The scenario is as follows: 1) Create two SCCs: X -. A <-> B ^--' 2) Run the followin…

  • High 7.5
    CVE-2026-16444 Public exploit

    Improper Validation of File Paths in TeamViewer Desktop Clients

    Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipbo…

  • High 7.5
    CVE-2026-36851 Public exploit

    Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration.