Skip to content
OpenAdvisories

Archive

12 October 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-108924 Public exploit

    getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization

    A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the component Dynamic Option Generation. The manipulation leads to authorization bypass…

  • Medium 6.8
    CVE-2026-109255 Public exploit

    FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length

    FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Attackers can send a crafted SERVER_LICENSE_REQUEST with a large sc…