Skip to content
OpenAdvisories

Archive

29 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /29 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30642
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.5
    CVE-2026-102425 Public exploit

    Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4

    Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 - Balbooa Forms supports administrator-defined PHP code which runs after a public form submission. The feature also supports form-field shortcodes in…

    balbooa.com Balbooa Forms extension for Joomla Web / CMS
  • Critical 9.3
    CVE-2026-85520 Public exploit

    Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop module

    Google Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated attacker can send a crafted request that controls the output file name, path, extension, and content …

    MyPresta Google Merchant Center Feed
  • Critical 9.1
    CVE-2026-8065 Public exploit

    An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions al…

    Hitachi Energy RTU500 series CMU firmware ICS / OT