Skip to content
OpenAdvisories

Archive

20 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /20 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19444
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-92162 Public exploit

    Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured (most common on Fedora systems), a malicious local user in an active local ses…

    Flatpak Flatpak flatpak flatpak Debian Ubuntu
  • High 7.5
    CVE-2026-93300 Public exploit

    EventON - Subscriber <= 1.4.5 - Unauthenticated SQL Injection via 'email' Parameter

    The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email' parameter in all versions up to, and including, 1.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the ex…

    EventON EventON - Subscriber Web / CMS
  • High 7.1
    CVE-2026-113386 Public exploit

    Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated a…

    Roundcube Webmail roundcube roundcube Debian Ubuntu