Skip to content
OpenAdvisories

Archive

8 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /8 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19443
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.4
    CVE-2026-107720 Public exploit

    fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set

    fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.1, fast-jwt createVerifier accepts an unsigned JWT when key is an empty string or null and algorithms is a non-empty allowlist. Falsy synchronous keys bypass prepareKeyOrSecret, allowedA…

    nearform fast-jwt fast-jwt npm
  • Critical 9.5
    CVE-2026-107406 Public exploit

    Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

    Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements:   * For…

    NetScaler ADC Gateway
  • High 7.8
    CVE-2026-11318 Public exploit

    Deskin 3.3.4.3 XPC Service Privilege Escalation via Unauthenticated Installer

    Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authe…

    Zuler Technology DeskIn
  • Medium 6.5
    CVE-2026-50055 Public exploit

    Zimbra Collaboration Suite Sieve Notify Filter Action Bypasses Mail Forwarding Restriction via Variable Expansion

    A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disabled mail forwarding by using a Sieve notify action to send copies of email content and headers to an arbitrary address.

    Zimbra Zimbra Collaboration Suite
  • Critical 9.4
    CVE-2026-103663 Public exploit

    Path Traversal leading to Remote Code Execution in Ollama

    Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by the `digestToPath` function. An unauthenticated remote attacker can specify a path traversal sequence as a layer digest, causing a malicious …

    Ollama Ollama
  • Critical 9.8
    CVE-2026-92555 Public exploit

    Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panel

    Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. AKINSOFT WOLVOX Control Panel allows Pull Data from System Resources. This issue affects AKINSOFT WOLVOX Control Panel: from 26…

    AKIN Software Computer Import Export Industry and Trade AKINSOFT WOLVOX Control Panel
  • Critical 9.8
    CVE-2026-85097 Public exploit Scanner template

    Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter

    The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during f…

    Bricksforge Bricksforge Web / CMS