Skip to content
OpenAdvisories

Archive

30 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /30 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19444
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-39732 Public exploit

    WordPress Transliterator plugin <= 2.5.13 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in INTINITUM FORM Transliterator serbian-transliteration allows Blind SQL Injection.This issue affects Transliterator: from n/a through 2.5.13.

    INTINITUM FORM Transliterator
  • Critical 10.0
    CVE-2026-112816 Public exploit

    Improper certificate validation in the HTTPS listener in LXD

    Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed v…

    Canonical LXD lxd Debian
  • Critical 9.5
    CVE-2026-116366 Public exploit Scanner template

    Unauthenticated RCE vulnerability against ClickHouse Server

    An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.

    ClickHouse ClickHouse ClickHouse Cloud clickhouse Debian Ubuntu Wolfi
  • Critical 9.8
    CVE-2026-103039 Public exploit

    Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom Field

    The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom Field whose input type is List. This is due to GFFormsModel::create_post() passing the submitted value to WordPress' unr…

    Gravity Forms Gravity Forms Web / CMS