Skip to content
OpenAdvisories

Archive

24 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /24 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19444
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-115996

    Unitree Robotics Unitree Go2 chat_go websocket.py WebSocketClient.connect certificate validation

    A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function WebSocketClient.connect of the file websocket.py of the component chat_go. Performing a manipulation results in improper certificate validat…

    Unitree Robotics Unitree Go2
  • Low 2.4
    CVE-2026-115981

    phpIPAM index.php cross site scripting

    A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown functionality of the file upgrade/index.php. Such manipulation of the argument REQUEST_URI leads to cross site scripting. The attack may be launche…

  • Low 3.7
    CVE-2026-116013

    OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsing

    OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_name() that fails to check resource record lengths against the received message. Attackers controlling or spoofing a queried nameserver can …

    openresty lua-resty-dns lua-nginx-dns lua-nginx-dns Debian Ubuntu
  • Low 3.6
    CVE-2026-116012 Public exploit

    Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser

    Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc that stores 64-bit string lengths in 32-bit variables. Attackers can supply a crafted packed stream, such as a malicious .sl…

    National Security Agency ghidra
  • Low 3.7
    CVE-2026-113674

    GeoDirectory < 2.8.194 - Unauthenticated Guest-Submitted Listing Modification

    The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-out users before allowing them to be edited, allowing unauthenticated attackers to modify, unpublish, attach images to, or reassign any guest-…

    Web / CMS