Skip to content
OpenAdvisories

Archive

25 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /25 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19444
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-116063 Public exploit

    DedeCMS update_guide.php require_once code injection

    A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of the file dede/update_guide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible. The exploit has bee…

  • High 7.5
    CVE-2026-116191 Public exploit

    Rclone before 1.75.2 Path Traversal via serve webdav MKCOL

    Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, …

    rclone rclone rclone rclone Debian Ubuntu Alpine
  • Low 3.5
    CVE-2026-116004 Public exploit

    onyx-dot-app Onyx PreviewTab.tsx cross site scripting

    A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx. The manipulation leads to cross site scripting. The attack can be initiated remo…

    onyx-dot-app onyx
  • High 7.3
    CVE-2026-116000 Public exploit

    Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery

    A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_from_uri of the file private_gpt/server/ingest/uri_loader.py of the component URI Artifact Loader. Performing a manipulation of the argument…

    Zylon PrivateGPT