Skip to content
OpenAdvisories

Archive

7 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /7 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19444
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-76268 Public exploit Scanner template

    Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise

    In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Programming Interface (API) on a search head cluster member could execute attacker-controlled …

    Splunk Splunk Enterprise
  • Critical 9.3
    CVE-2026-92414 Public exploit

    Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens

    : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issu…

    Apache Software Foundation Apache Jackrabbit jackrabbit jackrabbit Debian Ubuntu
  • Critical 10.0
    CVE-2026-102255 Public exploit

    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

    SonicWall SMA1000 Network devices
  • Critical 9.8
    CVE-2026-105192 Public exploit

    LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization

    LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. Messages on that socket are msgpack. Extension code 1 is passed to DeviceIPCWrapper.Deserialize, which …

    LMCache LMCache lmcache PyPI
  • Critical 9.3
    CVE-2026-102782 Public exploit Scanner template

    Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0

    Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request para…

    ordasoft.com OrdaSoft Simple Membership extension for Joomla Web / CMS
  • Critical 9.3
    CVE-2026-59346 Public exploit

    VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability

    VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Affected versions: - …

    VMware VMware Fusion VMware Workstation
  • Critical 9.8
    CVE-2026-93674 Public exploit Scanner template EPSS 15%

    Langflow OSS is affected by multiple vulnerabilities

    IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

    IBM Langflow OSS