Skip to content
OpenAdvisories

Archive

8 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /8 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30639
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-83991 Public exploit

    Windows Cloud Files Mini Filter Driver Tampering Vulnerability

    Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Medium 6.5
    CVE-2026-73321 Public exploit

    XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser

    XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause persistent denial of service by submitting a post with deeply nested BBCode tags. Attackers can craft a single malicious p…

    XenForo XenForo
  • Medium 6.1
    CVE-2026-73320 Public exploit

    XenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl Endpoint

    XenForo before 2.3.13 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private unfurl records by supplying predictable auto-increment primary key IDs to the unfurl endpoint. Attackers can enume…

    XenForo XenForo
  • Medium 6.1
    CVE-2026-73319 Public exploit

    XenForo < 2.3.13 XSS via Dynamic Redirect Handler

    XenForo before 2.3.13 contains a cross-site scripting vulnerability in the dynamic redirect handler that allows unauthenticated attackers to execute arbitrary JavaScript in the board origin by crafting a malicious javascript: URI that bypasses host validation…

    XenForo XenForo
  • Medium 6.8
    CVE-2026-73313 Public exploit

    XenForo < 2.3.13 MFA Bypass via Passkey TFA Provider

    XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete login as another user by submitting their own registered passkey credential during the WebAuthn ass…

    XenForo XenForo
  • Medium 5.9
    CVE-2026-73310 Public exploit

    XenForo < 2.3.13 OAuth2 Authorization Code Token Theft via redirect_uri Bypass

    XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoint that allows attackers controlling any allowlisted redirect URI to bypass redirect URI binding by submitting a different allowlisted URI than the one recorded at authorization ti…

    XenForo XenForo
  • Medium 5.4
    CVE-2026-52307 Public exploit

    An authenticated stored cross-site scripting (XSS) vulnerability in the Column Management component of ClassCMS 1CMS v5…

  • Medium 6.5
    CVE-2026-78838 Public exploit

    A reflected cross-site scripting (XSS) vulnerability in the grid_datasource.php component of AppNitro MachForm v30 allo…