Skip to content
OpenAdvisories

Archive

20 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /20 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19444
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-101678 Public exploit

    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is a…

    Oracle MySQL Connectors mysql-5.5 mysql-5.7 Ubuntu
  • Medium 4.8
    CVE-2026-107692 Public exploit

    War Thunder Account Impersonation

    The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after the TCP handshake, using only LZ4 compression rather than encryption. An attacker positioned on the network path can passively intercept and d…

    Gaijin Entertainment War Thunder
  • Medium 6.1
    CVE-2026-112936 Public exploit

    filelock: ReadWriteLock follows a symlink at the lock path into SQLite

    filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock path and pass it to SQLite without rejecting a final symbolic link, allowing another local user who ca…

    tox-dev filelock filelock python-filelock Debian Ubuntu PyPI
  • Medium 6.9
    CVE-2026-112071 Public exploit

    Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)

    The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any site visitor can set orders that are still awaiting payment to "canceled". This requires a page that contains the…

    TYPO3 Extension "TYPO3 Shop by coding.ms" Web / CMS
  • Medium 6.9
    CVE-2026-113468 Public exploit

    Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)

    The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider. Any site visitor can overwrite the stored payment notification of an order that is still awaiting payment with arbitrary content. Thi…

    TYPO3 Extension "TYPO3 Shop by coding.ms" Web / CMS
  • Medium 5.5
    CVE-2026-86962 Public exploit

    A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS…

    Apple macOS iOS and iPadOS watchOS macOS iOS