Skip to content
OpenAdvisories

Archive

11 November 2026

Vulnerabilities first published on this day (UTC), newest first.

← October 2026 2026 / November /11
  1. 1102
  2. 2473
  3. 3780
  4. 4395
  5. 5456
  6. 6465
  7. 7474
  8. 8323
  9. 9525
  10. 102065
  11. 11692
  12. 12388
  13. 13771
  14. 1463
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-126170 Public exploit

    A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.…

    Fortinet FortiManager FortiAnalyzer FortiManager Cloud Network devices
  • Critical 9.8
    CVE-2026-126147 Public exploit

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.…

    Fortinet FortiMail Network devices
  • Critical 9.8
    CVE-2026-126148 Public exploit

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …

    Fortinet FortiMail Network devices
  • Critical 9.9
    CVE-2026-110697 Public exploit

    Quay: quay: sql like wildcard injection in robot listing leaks cross-tenant robot tokens

    A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and…

    Red Hat Project Quay mirror registry for Red Hat OpenShift 2 Red Hat Quay 3.10 Ubuntu
  • Critical 9.1
    CVE-2026-126537 Public exploit

    Ninja Forms - File Uploads <= 3.3.36 - Unauthenticated Arbitrary File Deletion via 'files[].data.file_path' Parameter via 'extra.saveProgress'

    The Ninja Forms - File Uploads add-on for WordPress is vulnerable to Arbitrary File Deletion (and arbitrary file read via S3/Dropbox/Google Drive exfiltration) in versions up to, and including, 3.3.36. The flaw spans NF_FU_Fields_Upload::process() in includes…

    Saturday Drive Ninja Forms - File Uploads
  • Critical 10.0
    CVE-2026-78287 Public exploit

    WordPress STAGGS plugin <= 3.3.0 - Remote Code Execution (RCE) vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Staggs STAGGS staggs allows Remote Code Inclusion.This issue affects STAGGS: from n/a through 3.3.0.

    STAGGS STAGGS
  • Critical 9.3
    CVE-2026-112174 Public exploit

    Privilege escalation in Enter’s Iperius Backup

    Local privilege escalation vulnerability in Iperius Backup 8.8.3, due to insufficient separation between the graphical user interface running with elevated privileges and local users with low privileges. When the backup service is configured to run persistent…

    Enter Iperius Backup