Skip to content
OpenAdvisories

Archive

2 November 2026

Vulnerabilities first published on this day (UTC), newest first.

← October 2026 2026 / November /2
  1. 1102
  2. 2473
  3. 3780
  4. 4395
  5. 5456
  6. 6465
  7. 7474
  8. 8323
  9. 9525
  10. 102065
  11. 11692
  12. 12388
  13. 13771
  14. 1455
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-86596 Public exploit

    s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter

    The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, <= 260927 via the 'item_name' parameter parameter. This is due to insufficient sanitization in strip_php_tags_deep(), which only strips literal '<?'…

    clavaque s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions Web / CMS
  • Critical 9.8
    CVE-2026-58868 Public exploit

    In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This co…

    Google Android Android
  • Critical 9.3
    CVE-2026-116606 Exploited Public exploit Scanner template EPSS 11%

    Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway

    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modifi…

    Barracuda Networks Barracuda Email Security Gateway (ESG)
    KEV Nov 10, 2026