Skip to content
OpenAdvisories

Archive

7 November 2026

Vulnerabilities first published on this day (UTC), newest first.

← October 2026 2026 / November /7
  1. 1102
  2. 2473
  3. 3780
  4. 4395
  5. 5456
  6. 6465
  7. 7474
  8. 8323
  9. 9525
  10. 102065
  11. 11692
  12. 12388
  13. 13771
  14. 1464
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-121265 Public exploit

    SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update

    SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update. With the array_datatypes option off, which is the default, insert(), update() and values() treat an arrayref column value as literal SQL. It…

    libsql-abstract-perl libsql-abstract-perl perl-sql-abstract Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2026-123218 Exploited Public exploit

    IBM Aspera Faspex Authorization Bypass

    IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass user authorization and gain full administrative privileges.

    IBM Aspera Faspex
    KEV Nov 9, 2026
  • Critical 9.8
    CVE-2026-19803 Public exploit

    Printcart Store <= 2.13.2 - Unauthenticated Arbitrary File Upload via nbu_crop_image 'url' Parameter

    The Printcart Store – Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.13.2. This is due to the `nbu_crop_image` AJAX handler accepting a user-supplied `url` para…

    printcart Printcart Store – Web to Print Product Designer for WooCommerce Web / CMS