Skip to content
OpenAdvisories

Archive

8 October 2026

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.5
    CVE-2026-107406 Public exploit

    Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

    Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements:   * For…

  • Critical 9.4
    CVE-2026-103663 Public exploit

    Path Traversal leading to Remote Code Execution in Ollama

    Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by the `digestToPath` function. An unauthenticated remote attacker can specify a path traversal sequence as a layer digest, causing a malicious …

  • Critical 9.8
    CVE-2026-92555 Public exploit

    Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panel

    Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. AKINSOFT WOLVOX Control Panel allows Pull Data from System Resources. This issue affects AKINSOFT WOLVOX Control Panel: from 26…

  • Critical 9.8
    CVE-2026-85097 Public exploit Scanner template

    Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter

    The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during f…