Skip to content
OpenAdvisories

Archive

7 November 2026

Vulnerabilities first published on this day (UTC), newest first.

← October 2026 2026 / November /7
  1. 1102
  2. 2473
  3. 3780
  4. 4395
  5. 5456
  6. 6465
  7. 7474
  8. 8323
  9. 9525
  10. 102065
  11. 11692
  12. 12386
  13. 13428
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2026-99273 Public exploit

    ksmbd: reserve space for the UTF-16 terminator in stream info

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: reserve space for the UTF-16 terminator in stream info smb_strtoUTF16() always writes a terminating zero UTF-16 unit after the converted characters, but get_file_stream_info() budgets …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2026-121265 Public exploit

    SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update

    SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update. With the array_datatypes option off, which is the default, insert(), update() and values() treat an arrayref column value as literal SQL. It…

    libsql-abstract-perl libsql-abstract-perl perl-sql-abstract Debian Ubuntu Alpine
  • Medium 5.4
    CVE-2026-122675 Public exploit

    WordPress Wp Social plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Social wp-social allows Cross Site Request Forgery.This issue affects Wp Social: from n/a through 3.2.3.

    Wpmet Wp Social
  • Critical 9.8
    CVE-2026-123218 Exploited Public exploit

    IBM Aspera Faspex Authorization Bypass

    IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass user authorization and gain full administrative privileges.

    IBM Aspera Faspex
    KEV Nov 9, 2026
  • Critical 9.8
    CVE-2026-19803 Public exploit

    Printcart Store <= 2.13.2 - Unauthenticated Arbitrary File Upload via nbu_crop_image 'url' Parameter

    The Printcart Store – Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.13.2. This is due to the `nbu_crop_image` AJAX handler accepting a user-supplied `url` para…

    printcart Printcart Store – Web to Print Product Designer for WooCommerce Web / CMS