Skip to content
OpenAdvisories

Archive

13 September 2026

Vulnerabilities first published on this day (UTC), newest first.

44 results · Clear filters · Feed

  • High 7.5

    The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which a…

  • High 7.7

    CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a p…

  • High 7.4

    Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra…

  • High 8.1

    CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different v…