Skip to content
OpenAdvisories

Archive

3 November 2026

Vulnerabilities first published on this day (UTC), newest first.

← October 2026 2026 / November /3
  1. 1102
  2. 2473
  3. 3780
  4. 4395
  5. 5456
  6. 6465
  7. 7474
  8. 8323
  9. 9525
  10. 102065
  11. 11692
  12. 12388
  13. 13615
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.1
    CVE-2026-114550 Public exploit

    libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability

    libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to expl…

    libwebsockets libwebsockets libwebsockets libwebsockets Debian Ubuntu
  • High 7.8
    CVE-2026-115878 Public exploit

    Stanza: RCE via pickle deserialization in the lemmatizer

    Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. From 1.14.0 until 1.15.0, loading an attacker-supplied lemmatizer checkpoint can execute arbitrary code because stanza/models/lemma/trai…

    Stanford NLP stanza stanza PyPI
  • High 8.1
    CVE-2026-54161 Public exploit

    upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD execution

    Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.8.3 to 2.8.5, upsmon in clients/upsmon.c inserts the server-supplied ups.alarm value into shell commands executed…

    networkupstools nut nut nut Debian Ubuntu
  • High 7.5
    CVE-2026-115290 Public exploit

    Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

    Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An unauthenticated attacker with network access to the remote cluster server interface of a node can send a specially crafted…

    Elastic Elasticsearch ruby4.0-elasticsearch ruby3.3-elasticsearch Wolfi
  • High 8.8
    CVE-2026-107441 Public exploit

    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 co…

    Zyxel GS1900-48 firmware GS1900-8 firmware GS1900-8HP firmware Network devices
  • High 7.1
    CVE-2026-106991 Public exploit

    hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control. Any registered user can delete, lock, or st…