Skip to content
OpenAdvisories

Archive

2 November 2026

Vulnerabilities first published on this day (UTC), newest first.

← October 2026 2026 / November /2
  1. 1102
  2. 2473
  3. 3780
  4. 4395
  5. 5456
  6. 6465
  7. 7474
  8. 8323
  9. 9525
  10. 102065
  11. 11692
  12. 12386
  13. 1355
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-86596 Public exploit

    s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter

    The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, <= 260927 via the 'item_name' parameter parameter. This is due to insufficient sanitization in strip_php_tags_deep(), which only strips literal '<?'…

    clavaque s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions Web / CMS
  • High 7.5
    CVE-2026-58882 Public exploit

    In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow. This could l…

    Google Android Android
  • Critical 9.8
    CVE-2026-58868 Public exploit

    In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This co…

    Google Android Android
  • Medium 5.4
    CVE-2026-120491 Public exploit

    Wing FTP Server before 8.2.6 Stored XSS via nowpath in Legacy Activity Page

    Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that allows authenticated web-client users to inject script by sending a crafted nowpath parameter to webclient/makethumb.html. Attackers can break out of the directory CDATA se…

    Wing FTP Software Wing FTP Server
  • High 7.2
    CVE-2026-120318 Public exploit

    Product Gallery Slider for WooCommerce 2.3.23 before 2.3.26 Missing Authorization via Codestar AJAX

    Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vulnerability in Codestar backup AJAX actions csf-export, csf-import and csf-reset. Shop Managers can read the csf_backup_nonce from the…

    Codeixer Product Gallery Slider & Additional Variation Images for WooCommerce Web / CMS
  • Critical 9.3
    CVE-2026-116606 Exploited Public exploit Scanner template

    Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway

    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modifi…

    Barracuda Networks Barracuda Email Security Gateway (ESG)
    KEV Nov 10, 2026