Skip to content
OpenAdvisories

Archive

1 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /1 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19443
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-104356 Public exploit

    PictShare < 3.7.1 Predictable Delete Code via rand()

    PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString() function uses the non-cryptographic rand() PRNG to generate the delete_code authorization token in src/inc/core.php. Attackers can predict or infer the PRNG st…

    HaschekSolutions PictShare
  • High 8.2
    CVE-2026-104051 Public exploit

    PictShare < 3.7.1 Sensitive Information Disclosure via info API

    PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret delete_code and uploader metadata by calling the API::info() endpoint which returns the complete raw metadata object without a f…

    HaschekSolutions PictShare
  • Critical 9.8
    CVE-2026-104286 Exploited Public exploit

    An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8…

    Fortinet FortiMail Network devices
    KEV Oct 1, 2026
  • High 7.4
    CVE-2026-15911 Public exploit

    Confluent Kafka Python Improper TLS Certificate Validation

    Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation.

    confluent confluent-kafka
  • Critical 9.3
    CVE-2026-103922 Public exploit

    Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

    Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates …

    swift com.capacitorjs ionic-team @capacitor Android iOS npm Maven SwiftURL
  • High 7.5
    CVE-2026-63686 Public exploit

    Apache HTTP Server: mod_xml2enc crash on charset conversion failure

    A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2026-63292 Public exploit

    Apache HTTP Server: mod_vhost_alias stack overflow

    Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header ex…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  • Critical 9.3
    CVE-2026-13043 Public exploit

    WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

    A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to …

    WatchGuard Endpoint Security
  • Medium 6.3
    CVE-2026-103690 Public exploit

    itsourcecode Leave Management System controller.php sql injection

    A flaw has been found in itsourcecode Leave Management System 1.0. This vulnerability affects unknown code of the file /module/leave/controller.php. Executing a manipulation of the argument LEAVEID can lead to sql injection. The attack may be performed from r…

    itsourcecode Leave Management System
  • Critical 9.8
    CVE-2026-103752 Public exploit

    WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability

    Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions.

    Paul Ryan Authorizer
  • High 7.6
    CVE-2026-62059 Public exploit

    WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Blind SQL Injection.This issue affects Ultimate Member: from n/a through 2.13.1.

    Ultimate Member Ultimate Member
  • High 8.6
    CVE-2026-88789 Public exploit

    Apache Camel Quarkus: Camel Quarkus: Forced Xalan TransformerFactory drops upstream external-DTD/stylesheet hardening

    Improper Restriction of XML External Entity Reference in the XSLT support extension (camel-quarkus-support-xalan) in Apache Camel Quarkus from 3.2.0 before 3.33.3 and from 3.34.0 before 3.40.0 on all platforms allows an attacker who supplies the XML document …

    Apache Software Foundation Apache Camel Quarkus
  • Critical 9.8
    CVE-2026-15989 Public exploit

    Super Forms <= 6.3.316 - Unauthenticated Privilege Escalation via 'role' Parameter

    The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's before_email_success_msg() function whitelisting the client-submi…

    WebRehab Super Forms – Drag & Drop Form Builder Web / CMS
  • Critical 9.3
    CVE-2026-76142 Public exploit

    Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface

    Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions

    Genians Genian ZTNA 6.0.46 Release Genian NAC 5.0.75 LTS Release Genian NAC 5.0.86 Release
  • Critical 9.1
    CVE-2026-92966 Public exploit

    Appointment Booking Plugin <= 5.7.0 - Unauthenticated Arbitrary Shortcode Execution via First/Last Name Field

    The The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.7.0. This is due to the software allowing users to execute an acti…

    latepoint Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress Web / CMS