Skip to content
OpenAdvisories

Archive

12 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /12 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19444
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-109566 Public exploit

    Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeeder

    Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the …

    zofe rapyd-admin
  • Medium 4.3
    CVE-2026-108924 Public exploit

    getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization

    A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the component Dynamic Option Generation. The manipulation leads to authorization bypass…

    getkirby kirby
  • High 8.7
    CVE-2026-109372 Public exploit

    ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confusion

    ZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an authentication bypass in the SAML identity-provider intent callback, which verifies the assertion signature using the provider named in the request URL but resolves the user from the login intent wi…

    zitadel zitadel
  • Medium 6.8
    CVE-2026-109255 Public exploit

    FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length

    FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Attackers can send a crafted SERVER_LICENSE_REQUEST with a large sc…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • High 7.8
    CVE-2026-98385 Public exploit

    sched/cache: Decouple sched_cache_group from mm to fix UAF

    In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group from mm to fix UAF Currently the sched cache grouping is by mm and the scheduling statistics sched_cache_stat lives in the mm structure. This ties the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2026-87690 Public exploit

    Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution

    The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or …

    Rapid7 Metasploit Framework