Skip to content
OpenAdvisories

Archive

8 November 2026

Vulnerabilities first published on this day (UTC), newest first.

← October 2026 2026 / November /8
  1. 1102
  2. 2473
  3. 3780
  4. 4395
  5. 5456
  6. 6465
  7. 7474
  8. 8323
  9. 9525
  10. 102065
  11. 11692
  12. 12384
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-124552 Public exploit

    Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgi

    Webmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall and Shorewall6 modules' list.cgi, which renders table fields and COMMENT lines unescaped. Authenticated users with table edit permission can store JavaScript via savecm…

    Webmin Webmin
  • Critical 9.9
    CVE-2026-124450 Public exploit

    OpenEMR before 8.3.0 Arbitrary File Read/Write via disposeDocument

    OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sms module disposeDocument action via an unvalidated file_path parameter. Authenticated low-privilege users can read sqlconf.php to recover database credentials …

    Open-Emr openemr