Skip to content
OpenAdvisories

Archive

9 November 2026

Vulnerabilities first published on this day (UTC), newest first.

← October 2026 2026 / November /9
  1. 1102
  2. 2473
  3. 3780
  4. 4395
  5. 5456
  6. 6465
  7. 7474
  8. 8323
  9. 9525
  10. 102065
  11. 11692
  12. 12388
  13. 13771
  14. 1460
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-123807 Public exploit

    Signal K Server: Unauthenticated path traversal in resources-provider v2 API leads to JWT secret disclosure, admin impersonation and remote code execution

    Signal K Server is a server application that runs on a central hub in a boat. From 2.0.0 until 2.34.0 for Signal K Server and from 1.0.0 until 1.5.3 for @signalk/resources-provider, the v2 REST route GET /signalk/v2/api/resources/:resourceType/:resourceId acc…

    SignalK signalk-server resources-provider
  • Critical 9.3
    CVE-2026-56712 Public exploit

    Replicate Cog through 0.23.1 SSRF via cog.File and cog.Path URL Inputs

    Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the Cog process to make server-side HTTP requests by submitting prediction inputs with attacker-controlled URLs that are not validated against the…

    replicate cog cog Ubuntu
  • Critical 10.0
    CVE-2026-110468 Public exploit

    Remote Code Execution via Unrestricted File Upload in WidzialniCMS

    WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the currentpath parameter, an unauthenticated attacker can upload ar…

    Fundacja Widzialni WidzialniCMS
  • Critical 9.8
    CVE-2026-124079 Public exploit

    rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 RCE via Unauthenticated Redis Queue Poisoning

    rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of untrusted data vulnerability that allows unauthenticated network attackers to execute arbitrary code by pushing a crafted serialized job onto the Redis-backed Laravel H…

    rConfig rConfig Pro rConfig Core
  • Critical 9.1
    CVE-2026-123753 Public exploit

    Apache Axis2/Java: SSRF via WS-Addressing ReplyTo and FaultTo endpoints

    Server-Side Request Forgery (SSRF) vulnerability in Apache Axis2/Java. An unauthenticated caller could supply a non-anonymous WS-Addressing wsa:ReplyTo or wsa:FaultTo address, and Axis2 would open a connection to that address to deliver the response or fault,…

    Apache Software Foundation Apache Axis2/Java
  • Critical 10.0
    CVE-2026-115252 Public exploit

    Confection 0.4.0 - 0.4.7 - Unauthenticated RCE via Write Key Option

    The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks before saving its settings and writing one of them, unmodified, into a standalone PHP file that it then serves, allowing unauthenticated users …

    Web / CMS
  • Critical 9.8
    CVE-2026-68982 Public exploit

    Apache Airflow: CeleryExecutor: forged callback workloads run on Celery workers without workload-token validation

    Apache Airflow's CeleryExecutor ran callback workloads (`ExecuteCallback`, used for deadline-alert callbacks) without validating the workload's authentication token. Anyone able to write to the Celery broker could enqueue a forged callback and execute arbitra…

    Apache Software Foundation Apache Airflow