Skip to content
OpenAdvisories

Archive

7 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /7 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30642
All Critical High Medium Low Exploited only Public exploit

126 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-86241

    liufee FeehiCMS Cookie Validation main-local.php hard-coded key

    A weakness has been identified in liufee FeehiCMS up to 2.1.1. This impacts an unknown function of the file environments/prod/backend/config/main-local.php of the component Cookie Validation. This manipulation of the argument cookieValidationKey causes use of…

    liufee FeehiCMS
  • Medium 4.7
    CVE-2026-86240

    liufee FeehiCMS UEditor Uploader.php catchImage server-side request forgery

    A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchImage of the file backend/widgets/ueditor/Uploader.php of the component UEditor. The manipulation of the argument source[] results in server-side request forger…

    liufee FeehiCMS
  • Medium 5.3
    CVE-2026-86239

    liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload

    A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remot…

    liufee FeehiCMS
  • Medium 4.3
    CVE-2026-86238

    projectworlds Online Examination System Feedback Form feedback.php cross site scripting

    A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site sc…

    Project Worlds Online Examination System
  • Medium 5.3
    CVE-2026-86237

    openagents-org openagents http.py test_default_model server-side request forgery

    A vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20. Impacted is the function test_default_model of the file sdk/src/openagents/sdk/transports/http.py. Performing a manipulation of the argument base_url results in server-side requ…

    openagents-org openagents
  • Medium 6.3
    CVE-2026-86236

    itsourcecode Sales and Inventory System pro_transac.php add sql injection

    A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/pro_transac.php?action=add. Such manipulation of the argument Name leads to sql injection. The attack can be launched …

    itsourcecode Sales and Inventory System