Skip to content
OpenAdvisories

Archive

2 September 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-19219 Public exploit

    DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX

    In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders t…

  • High 8.1
    CVE-2026-80467 Public exploit

    Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action

    The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not restrict the role submitted through its front-end user forms to the roles the form actually offers, and its safeguard against privileged roles is incomplete, allowing unauthenticate…