Patch Tuesday — June 2026
2026-06-09 · 1731 CVEs
CVEs published or modified the week of 2026-06-09, partitioned by vendor.
Microsoft (318 CVEs)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48303 | Critical | 10.0 | — | 2026-06-09 | Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47643 | Critical | 9.8 | — | 2026-06-09 | External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network. |
CVE-2026-47291 | Critical | 9.8 | — | 2026-06-09 | Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network. |
CVE-2026-45657 | Critical | 9.8 | — | 2026-06-09 | Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network. |
CVE-2026-44815 | Critical | 9.8 | — | 2026-06-09 | Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-26142 | Critical | 9.8 | — | 2026-06-09 | Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network. |
CVE-2026-12027 | Critical | 9.6 | — | 2026-06-11 | Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-47281 | Critical | 9.6 | — | 2026-06-09 | Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-42904 | Critical | 9.6 | — | 2026-06-09 | Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network. |
CVE-2026-11697 | Critical | 9.6 | — | 2026-06-09 | Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11671 | Critical | 9.6 | — | 2026-06-09 | Use after free in Navigation in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11651 | Critical | 9.6 | — | 2026-06-09 | Use after free in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2026-11638 | Critical | 9.6 | — | 2026-06-09 | Use after free in Printing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11634 | Critical | 9.6 | — | 2026-06-09 | Use after free in Gamepad in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-34691 | Critical | 9.3 | — | 2026-06-09 | Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. |
CVE-2026-45602 | Critical | 9.1 | — | 2026-06-09 | No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network. |
CVE-2026-12035 | High | 8.8 | — | 2026-06-11 | Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2026-12018 | High | 8.8 | — | 2026-06-11 | Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149.0.7827.115 allowed a local attacker to perform OS-level privilege escalation via a malicious file. |
CVE-2026-12007 | High | 8.8 | — | 2026-06-11 | Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
CVE-2026-47653 | High | 8.8 | — | 2026-06-09 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-47289 | High | 8.8 | — | 2026-06-09 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-45648 | High | 8.8 | — | 2026-06-09 | Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
CVE-2026-45504 | High | 8.8 | — | 2026-06-09 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-45484 | High | 8.8 | — | 2026-06-09 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-42985 | High | 8.8 | — | 2026-06-09 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-40371 | High | 8.8 | — | 2026-06-09 | Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a network. |
CVE-2026-32193 | High | 8.8 | — | 2026-06-09 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally. |
CVE-2026-11688 | High | 8.8 | — | 2026-06-09 | Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2026-11683 | High | 8.8 | — | 2026-06-09 | Use after free in WebCodecs in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2026-11680 | High | 8.8 | — | 2026-06-09 | Use after free in Media in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2026-11674 | High | 8.8 | — | 2026-06-09 | Use after free in Guest View in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2026-11673 | High | 8.8 | — | 2026-06-09 | Use after free in InterestGroups in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2026-11670 | High | 8.8 | — | 2026-06-09 | Use after free in PDF in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. |
CVE-2026-11664 | High | 8.8 | — | 2026-06-09 | Use after free in Payments in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2026-11662 | High | 8.8 | — | 2026-06-09 | Type Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2026-11650 | High | 8.8 | — | 2026-06-09 | Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2026-11649 | High | 8.8 | — | 2026-06-09 | Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2026-11648 | High | 8.8 | — | 2026-06-09 | Use after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2026-11646 | High | 8.8 | — | 2026-06-09 | Use after free in ViewTransitions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2026-11645 | High | 8.8 | KEV | 2026-06-09 | Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2026-11630 | High | 8.8 | — | 2026-06-09 | Use after free in File Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2026-11629 | High | 8.8 | — | 2026-06-09 | Use after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2026-47907 | High | 8.6 | — | 2026-06-09 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47906 | High | 8.6 | — | 2026-06-09 | Dreamweaver Desktop versions 21.7 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47635 | High | 8.4 | — | 2026-06-09 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45641 | High | 8.4 | — | 2026-06-09 | Access of resource using incompatible type ('type confusion') in Windows Hyper-V allows an unauthorized attacker to execute code locally. |
CVE-2026-45607 | High | 8.4 | — | 2026-06-09 | Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally. |
CVE-2026-45482 | High | 8.4 | — | 2026-06-09 | Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-45474 | High | 8.4 | — | 2026-06-09 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45472 | High | 8.4 | — | 2026-06-09 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45463 | High | 8.4 | — | 2026-06-09 | Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45461 | High | 8.4 | — | 2026-06-09 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45458 | High | 8.4 | — | 2026-06-09 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45456 | High | 8.4 | — | 2026-06-09 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-44810 | High | 8.4 | — | 2026-06-09 | Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-41098 | High | 8.4 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an authorized attacker to perform spoofing over a network. |
CVE-2026-12031 | High | 8.3 | — | 2026-06-11 | Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-12029 | High | 8.3 | — | 2026-06-11 | Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-12016 | High | 8.3 | — | 2026-06-11 | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-12014 | High | 8.3 | — | 2026-06-11 | Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local network segment to potentially perform a sandbox escape via malicious network traffic. |
CVE-2026-12011 | High | 8.3 | — | 2026-06-11 | Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-12008 | High | 8.3 | — | 2026-06-11 | Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11700 | High | 8.3 | — | 2026-06-09 | Use after free in Tracing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11692 | High | 8.3 | — | 2026-06-09 | Use after free in Read Anything in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11679 | High | 8.3 | — | 2026-06-09 | Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11663 | High | 8.3 | — | 2026-06-09 | Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11661 | High | 8.3 | — | 2026-06-09 | Use after free in Views in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11660 | High | 8.3 | — | 2026-06-09 | Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11656 | High | 8.3 | — | 2026-06-09 | Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. |
CVE-2026-11652 | High | 8.3 | — | 2026-06-09 | Use after free in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11642 | High | 8.3 | — | 2026-06-09 | Use after free in Web Apps in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11640 | High | 8.3 | — | 2026-06-09 | Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11631 | High | 8.3 | — | 2026-06-09 | Use after free in Aura in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-47652 | High | 8.2 | — | 2026-06-09 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
CVE-2026-45476 | High | 8.2 | — | 2026-06-09 | Use after free in Linux MANA Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-44822 | High | 8.2 | — | 2026-06-09 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
CVE-2026-12012 | High | 8.1 | — | 2026-06-11 | Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. |
CVE-2026-47631 | High | 8.1 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-45635 | High | 8.1 | — | 2026-06-09 | Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network. |
CVE-2026-45599 | High | 8.1 | — | 2026-06-09 | Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network. |
CVE-2026-45503 | High | 8.1 | — | 2026-06-09 | Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network. |
CVE-2026-42987 | High | 8.1 | — | 2026-06-09 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. |
CVE-2026-42981 | High | 8.1 | — | 2026-06-09 | Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. |
CVE-2026-42974 | High | 8.1 | — | 2026-06-09 | Integer overflow or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. |
CVE-2026-42835 | High | 8.1 | — | 2026-06-09 | Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network. |
CVE-2026-11693 | High | 8.1 | — | 2026-06-09 | Inappropriate implementation in Plugins in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. |
CVE-2026-11689 | High | 8.1 | — | 2026-06-09 | Insufficient policy enforcement in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. |
CVE-2026-11643 | High | 8.1 | — | 2026-06-09 | Use after free in Proxy in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via malicious network traffic. |
CVE-2026-34693 | High | 8.0 | — | 2026-06-09 | Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-47298 | High | 8.0 | — | 2026-06-09 | Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-45644 | High | 8.0 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Live Share Canvas SDK allows an authorized attacker to elevate privileges over a network. |
CVE-2026-48578 | High | 7.9 | — | 2026-06-09 | Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally. |
CVE-2026-48576 | High | 7.9 | — | 2026-06-09 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-48575 | High | 7.9 | — | 2026-06-09 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-48573 | High | 7.9 | — | 2026-06-09 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-48570 | High | 7.9 | — | 2026-06-09 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-48568 | High | 7.9 | — | 2026-06-09 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-47656 | High | 7.9 | — | 2026-06-09 | Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally. |
CVE-2026-45654 | High | 7.9 | — | 2026-06-09 | Improper access control in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-45588 | High | 7.9 | — | 2026-06-09 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-47965 | High | 7.8 | — | 2026-06-12 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-45175 | High | 7.8 | — | 2026-06-11 | Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent validation processes. |
CVE-2026-45176 | High | 7.8 | — | 2026-06-11 | Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within high-privileged agent components. |
CVE-2026-47959 | High | 7.8 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47955 | High | 7.8 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47952 | High | 7.8 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47921 | High | 7.8 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47920 | High | 7.8 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47919 | High | 7.8 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47918 | High | 7.8 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47917 | High | 7.8 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47916 | High | 7.8 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47915 | High | 7.8 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47914 | High | 7.8 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47913 | High | 7.8 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47912 | High | 7.8 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47911 | High | 7.8 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47908 | High | 7.8 | — | 2026-06-09 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-50512 | High | 7.8 | — | 2026-06-09 | Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-50511 | High | 7.8 | — | 2026-06-09 | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-48293 | High | 7.8 | — | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-34708 | High | 7.8 | — | 2026-06-09 | InCopy versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-34707 | High | 7.8 | — | 2026-06-09 | InCopy versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-34706 | High | 7.8 | — | 2026-06-09 | InCopy versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-34702 | High | 7.8 | — | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-34701 | High | 7.8 | — | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-34700 | High | 7.8 | — | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-34699 | High | 7.8 | — | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-34698 | High | 7.8 | — | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-34697 | High | 7.8 | — | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-34696 | High | 7.8 | — | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-34695 | High | 7.8 | — | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-49161 | High | 7.8 | — | 2026-06-09 | Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally. |
CVE-2026-48583 | High | 7.8 | — | 2026-06-09 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-48574 | High | 7.8 | — | 2026-06-09 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
CVE-2026-48565 | High | 7.8 | — | 2026-06-09 | Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. |
CVE-2026-47292 | High | 7.8 | — | 2026-06-09 | Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-45658 | High | 7.8 | — | 2026-06-09 | Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally. |
CVE-2026-45656 | High | 7.8 | — | 2026-06-09 | Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally. |
CVE-2026-45645 | High | 7.8 | — | 2026-06-09 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45643 | High | 7.8 | — | 2026-06-09 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-45638 | High | 7.8 | — | 2026-06-09 | Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-45637 | High | 7.8 | — | 2026-06-09 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-45636 | High | 7.8 | — | 2026-06-09 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-45605 | High | 7.8 | — | 2026-06-09 | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-45600 | High | 7.8 | — | 2026-06-09 | Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-45593 | High | 7.8 | — | 2026-06-09 | Use after free in Windows SDK allows an authorized attacker to elevate privileges locally. |
CVE-2026-45592 | High | 7.8 | — | 2026-06-09 | Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally. |
CVE-2026-45586 | High | 7.8 | — | 2026-06-09 | Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally. |
CVE-2026-45490 | High | 7.8 | — | 2026-06-09 | Improper authorization in .NET allows an authorized attacker to elevate privileges locally. |
CVE-2026-45487 | High | 7.8 | — | 2026-06-09 | Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-45486 | High | 7.8 | — | 2026-06-09 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-45475 | High | 7.8 | — | 2026-06-09 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45471 | High | 7.8 | — | 2026-06-09 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-45469 | High | 7.8 | — | 2026-06-09 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-45457 | High | 7.8 | — | 2026-06-09 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-44824 | High | 7.8 | — | 2026-06-09 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-44823 | High | 7.8 | — | 2026-06-09 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-44820 | High | 7.8 | — | 2026-06-09 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-44819 | High | 7.8 | — | 2026-06-09 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-44817 | High | 7.8 | — | 2026-06-09 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-44813 | High | 7.8 | — | 2026-06-09 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-44812 | High | 7.8 | — | 2026-06-09 | Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. |
CVE-2026-44811 | High | 7.8 | — | 2026-06-09 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-44809 | High | 7.8 | — | 2026-06-09 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-44808 | High | 7.8 | — | 2026-06-09 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-44807 | High | 7.8 | — | 2026-06-09 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-44804 | High | 7.8 | — | 2026-06-09 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-44803 | High | 7.8 | — | 2026-06-09 | Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. |
CVE-2026-44802 | High | 7.8 | — | 2026-06-09 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-42991 | High | 7.8 | — | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
CVE-2026-42989 | High | 7.8 | — | 2026-06-09 | Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally. |
CVE-2026-42986 | High | 7.8 | — | 2026-06-09 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-42983 | High | 7.8 | — | 2026-06-09 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-42980 | High | 7.8 | — | 2026-06-09 | Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-42979 | High | 7.8 | — | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
CVE-2026-42978 | High | 7.8 | — | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
CVE-2026-42977 | High | 7.8 | — | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
CVE-2026-42916 | High | 7.8 | — | 2026-06-09 | Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-42910 | High | 7.8 | — | 2026-06-09 | Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-42905 | High | 7.8 | — | 2026-06-09 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-42902 | High | 7.8 | — | 2026-06-09 | Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally. |
CVE-2026-42837 | High | 7.8 | — | 2026-06-09 | Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-42829 | High | 7.8 | — | 2026-06-09 | Improper access control in Windows Administrator Protection allows an authorized attacker to bypass a security feature locally. |
CVE-2026-42828 | High | 7.8 | — | 2026-06-09 | Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-41092 | High | 7.8 | — | 2026-06-09 | Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally. |
CVE-2026-40409 | High | 7.8 | — | 2026-06-09 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
CVE-2026-40404 | High | 7.8 | — | 2026-06-09 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
CVE-2026-33828 | High | 7.8 | — | 2026-06-09 | Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally. |
CVE-2026-47937 | High | 7.7 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-1220 | High | 7.5 | — | 2026-06-10 | Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially exploit type confusion via a crafted HTML page. |
CVE-2026-34711 | High | 7.5 | — | 2026-06-09 | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability. |
CVE-2026-49160 | High | 7.5 | — | 2026-06-09 | Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network. |
CVE-2026-48563 | High | 7.5 | — | 2026-06-09 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-47654 | High | 7.5 | — | 2026-06-09 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-45639 | High | 7.5 | — | 2026-06-09 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-45591 | High | 7.5 | — | 2026-06-09 | Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-45583 | High | 7.5 | — | 2026-06-09 | Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-44801 | High | 7.5 | — | 2026-06-09 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-44799 | High | 7.5 | — | 2026-06-09 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-42993 | High | 7.5 | — | 2026-06-09 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-42992 | High | 7.5 | — | 2026-06-09 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-42913 | High | 7.5 | — | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-42909 | High | 7.5 | — | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-42908 | High | 7.5 | — | 2026-06-09 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-40376 | High | 7.5 | — | 2026-06-09 | Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-11694 | High | 7.5 | — | 2026-06-09 | Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2026-11667 | High | 7.5 | — | 2026-06-09 | Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the GPU process to potentially exploit heap corruption via a crafted HTML page. |
CVE-2026-11641 | High | 7.5 | — | 2026-06-09 | Use after free in Bluetooth in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. |
CVE-2026-11636 | High | 7.5 | — | 2026-06-09 | Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. |
CVE-2026-11632 | High | 7.5 | — | 2026-06-09 | Use after free in TabStrip in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. |
CVE-2026-47634 | High | 7.3 | — | 2026-06-09 | Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-45481 | High | 7.3 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-48569 | High | 7.1 | — | 2026-06-09 | Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-47288 | High | 7.1 | — | 2026-06-09 | Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network. |
CVE-2026-45649 | High | 7.1 | — | 2026-06-09 | Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally. |
CVE-2026-47648 | High | 7.0 | — | 2026-06-09 | Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-47293 | High | 7.0 | — | 2026-06-09 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. |
CVE-2026-45653 | High | 7.0 | — | 2026-06-09 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-45640 | High | 7.0 | — | 2026-06-09 | Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-45603 | High | 7.0 | — | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-45601 | High | 7.0 | — | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-45598 | High | 7.0 | — | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-45597 | High | 7.0 | — | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (uiamanager.dll) allows an authorized attacker to elevate privileges locally. |
CVE-2026-45596 | High | 7.0 | — | 2026-06-09 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-44818 | High | 7.0 | — | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-42984 | High | 7.0 | — | 2026-06-09 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-42912 | High | 7.0 | — | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-42911 | High | 7.0 | — | 2026-06-09 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-42836 | High | 7.0 | — | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally. |
CVE-2026-41108 | High | 7.0 | — | 2026-06-09 | Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-34335 | High | 7.0 | — | 2026-06-09 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-50507 | Medium | 6.8 | — | 2026-06-09 | Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
CVE-2026-45608 | Medium | 6.8 | — | 2026-06-09 | Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally. |
CVE-2026-11628 | Medium | 6.8 | — | 2026-06-09 | Use after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a local attacker to potentially exploit heap corruption via physical access to the device. |
CVE-2026-45173 | Medium | 6.5 | — | 2026-06-11 | Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validation flaw within its internal web-page verification routines. |
CVE-2026-12024 | Medium | 6.5 | — | 2026-06-11 | Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker to bypass same origin policy via a crafted HTML page. |
CVE-2026-50508 | Medium | 6.5 | — | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-47287 | Medium | 6.5 | — | 2026-06-09 | Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network. |
CVE-2026-47284 | Medium | 6.5 | — | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network. |
CVE-2026-45501 | Medium | 6.5 | — | 2026-06-09 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. |
CVE-2026-45454 | Medium | 6.5 | — | 2026-06-09 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-42907 | Medium | 6.5 | — | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network. |
CVE-2026-42903 | Medium | 6.5 | — | 2026-06-09 | Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a network. |
CVE-2026-11658 | Medium | 6.5 | — | 2026-06-09 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. |
CVE-2026-11653 | Medium | 6.5 | — | 2026-06-09 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. |
CVE-2026-47910 | Medium | 6.3 | — | 2026-06-09 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. |
CVE-2026-47909 | Medium | 6.3 | — | 2026-06-09 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. |
CVE-2026-45491 | Medium | 6.2 | — | 2026-06-09 | Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally. |
CVE-2026-45500 | Medium | 6.1 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-34657 | Medium | 5.5 | — | 2026-06-09 | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary file system write. |
CVE-2026-47961 | Medium | 5.5 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. |
CVE-2026-47926 | Medium | 5.5 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. |
CVE-2026-47925 | Medium | 5.5 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. |
CVE-2026-47924 | Medium | 5.5 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. |
CVE-2026-47923 | Medium | 5.5 | — | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. |
CVE-2026-34705 | Medium | 5.5 | — | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. |
CVE-2026-34704 | Medium | 5.5 | — | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. |
CVE-2026-34703 | Medium | 5.5 | — | 2026-06-09 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. |
CVE-2026-48566 | Medium | 5.5 | — | 2026-06-09 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
CVE-2026-45647 | Medium | 5.5 | — | 2026-06-09 | Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally. |
CVE-2026-45634 | Medium | 5.5 | — | 2026-06-09 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally. |
CVE-2026-45606 | Medium | 5.5 | — | 2026-06-09 | Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally. |
CVE-2026-45604 | Medium | 5.5 | — | 2026-06-09 | Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally. |
CVE-2026-45594 | Medium | 5.5 | — | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally. |
CVE-2026-44821 | Medium | 5.5 | — | 2026-06-09 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-44814 | Medium | 5.5 | — | 2026-06-09 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
CVE-2026-44805 | Medium | 5.5 | — | 2026-06-09 | Use after free in Windows Network Controller (NC) Host Agent allows an authorized attacker to deny service locally. |
CVE-2026-42973 | Medium | 5.5 | — | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
CVE-2026-42972 | Medium | 5.5 | — | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose information locally. |
CVE-2026-42971 | Medium | 5.5 | — | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
CVE-2026-42970 | Medium | 5.5 | — | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
CVE-2026-42969 | Medium | 5.5 | — | 2026-06-09 | Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally. |
CVE-2026-42968 | Medium | 5.5 | — | 2026-06-09 | Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally. |
CVE-2026-42915 | Medium | 5.5 | — | 2026-06-09 | Incorrect calculation of buffer size in Windows VMSwitch allows an authorized attacker to deny service locally. |
CVE-2026-42906 | Medium | 5.5 | — | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally. |
CVE-2026-48560 | Medium | 5.4 | — | 2026-06-09 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-47639 | Medium | 5.4 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-47636 | Medium | 5.4 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-45595 | Medium | 5.4 | — | 2026-06-09 | Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-45465 | Medium | 5.4 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-45464 | Medium | 5.4 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-45453 | Medium | 5.4 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-33113 | Medium | 5.4 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-11701 | Medium | 5.4 | — | 2026-06-09 | Inappropriate implementation in Guest View in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform UI spoofing via a crafted HTML page. |
CVE-2026-11666 | Medium | 5.4 | — | 2026-06-09 | Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform UI spoofing via a crafted HTML page. |
CVE-2026-12033 | Medium | 5.3 | — | 2026-06-11 | Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive information from process memory via a crafted HTML page. |
CVE-2026-12025 | Medium | 5.3 | — | 2026-06-11 | Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. |
CVE-2026-12015 | Medium | 5.3 | — | 2026-06-11 | Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. |
CVE-2026-45655 | Medium | 5.3 | — | 2026-06-09 | Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
CVE-2026-42914 | Medium | 5.3 | — | 2026-06-09 | Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network. |
CVE-2026-11696 | Medium | 5.3 | — | 2026-06-09 | Uninitialized Use in Video in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. |
CVE-2026-11678 | Medium | 5.3 | — | 2026-06-09 | Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. |
CVE-2026-45502 | Medium | 5.0 | — | 2026-06-09 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network. |
CVE-2026-34694 | Medium | 4.8 | — | 2026-06-09 | Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form… |
CVE-2026-45460 | Medium | 4.7 | — | 2026-06-09 | Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-48562 | Medium | 4.6 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-47641 | Medium | 4.6 | — | 2026-06-09 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-47640 | Medium | 4.6 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-47638 | Medium | 4.6 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-47637 | Medium | 4.6 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-45483 | Medium | 4.6 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Project Server allows an authorized attacker to perform spoofing over a network. |
CVE-2026-45479 | Medium | 4.6 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-45468 | Medium | 4.6 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-45467 | Medium | 4.6 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-45462 | Medium | 4.6 | — | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-45650 | Medium | 4.3 | — | 2026-06-09 | User interface (ui) misrepresentation of critical information in Microsoft Bing allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-11695 | Medium | 4.3 | — | 2026-06-09 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2026-11665 | Medium | 4.3 | — | 2026-06-09 | Out of bounds read in Dawn in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2026-45642 | Low | 3.9 | — | 2026-06-09 | Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack. |
CVE-2026-45485 | Low | 3.3 | — | 2026-06-09 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-45466 | Low | 3.3 | — | 2026-06-09 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-45459 | Low | 3.3 | — | 2026-06-09 | Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-45455 | Low | 3.3 | — | 2026-06-09 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-12017 | Low | 3.1 | — | 2026-06-11 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. |
CVE-2026-11691 | Low | 3.1 | — | 2026-06-09 | Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. |
CVE-2026-11684 | Low | 3.1 | — | 2026-06-09 | Insufficient policy enforcement in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the utility process to leak cross-origin data via a crafted HTML page. |
CVE-2026-11675 | Low | 3.1 | — | 2026-06-09 | Out of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. |
Other vendors (1413 CVEs across 344 vendors)
Adobe · 77 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47938 | Critical | 10.0 | — | 2026-06-09 | Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. |
CVE-2026-47928 | Critical | 9.6 | — | 2026-06-09 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47932 | High | 8.8 | — | 2026-06-09 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current use… |
CVE-2026-47931 | High | 8.4 | — | 2026-06-09 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47929 | High | 8.4 | — | 2026-06-09 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47930 | High | 8.1 | — | 2026-06-09 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. |
CVE-2026-48292 | High | 7.8 | — | 2026-06-09 | Format Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48291 | High | 7.8 | — | 2026-06-09 | Format Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48306 | High | 7.8 | — | 2026-06-09 | Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48305 | High | 7.8 | — | 2026-06-09 | Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-34710 | High | 7.8 | — | 2026-06-09 | Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-34709 | High | 7.8 | — | 2026-06-09 | Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-34713 | High | 7.5 | — | 2026-06-09 | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. |
CVE-2026-34712 | High | 7.5 | — | 2026-06-09 | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. |
CVE-2026-47960 | High | 7.4 | — | 2026-06-09 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. |
CVE-2026-47905 | Medium | 6.2 | — | 2026-06-09 | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. |
CVE-2026-47904 | Medium | 6.2 | — | 2026-06-09 | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. |
CVE-2026-47903 | Medium | 6.2 | — | 2026-06-09 | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. |
CVE-2026-47902 | Medium | 6.2 | — | 2026-06-09 | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. |
CVE-2026-48304 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-48301 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-48300 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-48299 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-48297 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-48280 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48271 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48268 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48266 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48265 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48264 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48258 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48256 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48251 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48250 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-47993 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-47990 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47989 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-47987 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-47986 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-47985 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-47983 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-47982 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-47981 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47980 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47978 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47977 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47975 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47974 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47973 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47972 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47970 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47966 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47962 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47958 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47957 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47956 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47954 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47953 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47951 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47950 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47949 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47948 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47947 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-47946 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-47945 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47944 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47943 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47942 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47941 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47939 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47936 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fie… |
CVE-2026-47935 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-34692 | Medium | 5.4 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-47933 | Medium | 4.8 | — | 2026-06-09 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. |
CVE-2026-47991 | Medium | 4.3 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Redirect (Open Redirect) vulnerability that could lead to account takeover. |
CVE-2026-48289 | Low | 3.5 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. |
CVE-2026-48288 | Low | 3.5 | — | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. |
Linux · 65 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46325 | Critical | 9.8 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE The current implementation incorrectly handles memory regions (MRs) with page sizes different from the… |
CVE-2026-46289 | Critical | 9.8 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extract_kvec_to_sg Patch series "Fix bugs in extract_iter_to_sg()", v3. |
CVE-2026-46316 | Critical | 9.3 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() a… |
CVE-2026-46317 | High | 8.8 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nested_mmus array behind mmu_lock kvm->arch.nested_mmus[] is walked under kvm->mmu_lock, including from the MMU notifier path (kvm_unmap_gfn_range()… |
CVE-2026-46326 | High | 8.4 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mprls0025pa: fix spi_transfer struct initialisation Make sure that the spi_transfer struct is zeroed out before use. |
CVE-2026-46288 | High | 8.4 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix use-after-free in of_unittest_changeset() The variable 'parent' is assigned the value of 'nchangeset' earlier in the function, meaning both point to th… |
CVE-2026-46307 | High | 8.3 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent reports: > The ath5k driver seems to do an array-index-out-of-bounds access as > shown by the UBSAN kernel message: > UBSAN… |
CVE-2026-46303 | High | 8.2 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_continue() reads rs->cont_extent verbatim from the Rock Ridge CE record and passes it to sb_br… |
CVE-2026-46332 | High | 8.0 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: greybus: gb-beagleplay: bound bootloader receive buffering cc1352_bootloader_rx() appends each serdev chunk into the fixed rx_buffer before parsing bootloader packets. |
CVE-2026-0271 | High | 7.8 | — | 2026-06-10 | A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with elevated privileges. |
CVE-2026-52907 | High | 7.8 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: fix off by one bugs Change these comparisons from > vs >= to avoid accessing one element beyond the end of the arrays. |
CVE-2026-46330 | High | 7.8 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" This reverts commit d7cd421da9da2cc7b4d25b8537f66db5c8331c40. |
CVE-2026-46327 | High | 7.8 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dm_suspended_md The function dm_blk_report_zones tests if the device is suspended with the "dm_suspended_md" call. |
CVE-2026-46324 | High | 7.8 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink hooks nft_netdev_unregister_hooks and __nft_unregister_flowtable_net_hooks need to use list_del_rcu(), this list can b… |
CVE-2026-46323 | High | 7.8 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags between the source and GRO skb, without checking the zerocopy status, and in particular the S… |
CVE-2026-46319 | High | 7.8 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only release RCU read lock after ct_ft When looking up a flow table in act_ct in tcf_ct_flow_table_get(), rhashtable_lookup_fast() internally opens an… |
CVE-2026-46311 | High | 7.8 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr mapping Use drm_exec to take both locks i.e vm root bo and wptr_obj bo to access the mapping data properly. |
CVE-2026-46308 | High | 7.8 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legacy() In scpsys_get_bus_protection_legacy(), of_find_node_with_property() returns a device node wi… |
CVE-2026-46301 | High | 7.8 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue before releasing the DMA buffers on driver unbind |
CVE-2026-46294 | High | 7.8 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using Claude) found a buffer overflow in dm-ioctl in the function retrieve_status: 1. |
CVE-2026-46285 | High | 7.8 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3_release() In docg3_release(), the docg3 pointer is obtained from cascade->floors[0]->priv before the loop that calls doc_release_… |
CVE-2026-46281 | High | 7.8 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vrealloc_node_align() Commit 4c5d3365882d ("mm/vmalloc: allow to set node and align in vrealloc") added the ability to force a new alloca… |
CVE-2026-46280 | High | 7.8 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: lib: test_hmm: evict device pages on file close to avoid use-after-free Patch series "Minor hmm_test fixes and cleanups". |
CVE-2026-46279 | High | 7.8 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: mm/alloc_tag: clear codetag for pages allocated before page_ext initialization Due to initialization ordering, page_ext is allocated and initialized relatively late duri… |
CVE-2026-46277 | High | 7.8 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: mm/zone_device: do not touch device folio after calling ->folio_free() The contents of a device folio can immediately change after calling ->folio_free(), as the folio m… |
CVE-2026-46275 | High | 7.8 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Vulnerabilities leading to Use-After-Free (UAF) and Null Pointer Dereference (NPD) conditions w… |
CVE-2026-46274 | High | 7.8 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: io-wq: check that the predecessor is hashed in io_wq_remove_pending() io_wq_remove_pending() needs to fix up wq->hash_tail[] if the cancelled work was the tail of its ha… |
CVE-2026-52906 | High | 7.7 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: 9p: fix access mode flags being ORed instead of replaced Since commit 1f3e4142c0eb ("9p: convert to the new mount API"), v9fs_apply_options() applies parsed mount flags… |
CVE-2026-0270 | High | 7.5 | — | 2026-06-10 | A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-… |
CVE-2026-46306 | High | 7.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: flow_dissector: do not dissect PPPoE PFC frames RFC 2516 Section 7 states that Protocol Field Compression (PFC) is NOT RECOMMENDED for PPPoE. |
CVE-2026-46304 | High | 7.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free nvmet_tcp_release_queue_work() runs on nvmet-wq and can drop the final controller reference through nvmet_cq_put… |
CVE-2026-46320 | High | 7.4 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tap_get_user_xdp() tap_get_user_xdp() rejects a frame shorter than ETH_HLEN with -EINVAL, and returns -ENOMEM when build_skb() fails. |
CVE-2026-46328 | High | 7.3 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step beyond setting the rlimit. |
CVE-2026-46322 | High | 7.1 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: tun: free page on build_skb failure in tun_xdp_one() When build_skb() fails in tun_xdp_one(), the function sets ret to -ENOMEM and jumps to the out label, which returns… |
CVE-2026-46321 | High | 7.1 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: tun: free page on short-frame rejection in tun_xdp_one() tun_xdp_one() returns -EINVAL on a frame shorter than ETH_HLEN without freeing the page that vhost_net_build_xdp… |
CVE-2026-46293 | High | 7.1 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: clk: microchip: mpfs-ccc: fix out of bounds access during output registration UBSAN reported an out of bounds access during registration of the last two outputs. |
CVE-2026-46309 | High | 7.0 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise Add validation in xe_vm_madvise_ioctl() to reject PAT indices with XE_COH_NONE coherency mode whe… |
CVE-2026-46299 | High | 7.0 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix held lock freed on hfsplus_fill_super() hfsplus_fill_super() calls hfs_find_init() to initialize a search structure, which acquires tree->tree_lock. |
CVE-2026-52905 | Medium | 5.5 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow non-power of two min_region_sz on damon_start() Commit d8f867fa0825 ("mm/damon: add damon_ctx->min_sz_region") introduced a bug that allows unali… |
CVE-2026-52904 | Medium | 5.5 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix nvkm_device leak on aperture removal failure When aperture_remove_conflicting_pci_devices() fails during probe, the error path returns directly without… |
CVE-2026-46329 | Medium | 5.5 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: erofs: handle end of filesystem properly for file-backed mounts I/O requests beyond the end of the filesystem should be zeroed out, similar to loopback devices and that… |
CVE-2026-46318 | Medium | 5.5 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: Revert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare" This reverts commit ea52cb24cd3f ("mm/hugetlbfs: update hugetlbfs to use mmap_prepare") with conflict resolut… |
CVE-2026-46315 | Medium | 5.5 | — | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copying it to userspace IORING_OP_WAITID stores its result fields in struct io_waitid::info and later copies them to userspace… |
CVE-2026-46314 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject empty multisync extension to prevent infinite loop v3d_get_extensions() walks a userspace-provided singly-linked list of ioctl extensions without any bou… |
CVE-2026-46313 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix error pointer dereference In a error path isp->psys is confirmed to be an error pointer not NULL so this condition is true and the error pointer i… |
CVE-2026-46312 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap vb2_dma_contig sets VMA flags VM_DONTEXPAND and VM_DONTDUMP and I do not see a reason why vb2_dma_sg should behave dif… |
CVE-2026-46310 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: media: renesas: vsp1: Fix NULL pointer deref on module unload When unloading the module on gen 4, we hit a NULL pointer dereference. |
CVE-2026-46305 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc The return value of kzalloc_flex() is used without ensuring that the allocation succeeded, a… |
CVE-2026-46302 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: selinux: allow multiple opens of /sys/fs/selinux/policy Currently there can only be a single open of /sys/fs/selinux/policy at any time. |
CVE-2026-46297 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: net: libwx: use request_irq for VF misc interrupt Currently, request_threaded_irq() is used with a primary handler but a NULL threaded handler, while also setting the IR… |
CVE-2026-46296 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fix NULL-deref on driver unbind A change moving DMA channel allocation from probe() back to s3c64xx_spi_prepare_transfer() failed to remove the correspondi… |
CVE-2026-46295 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty Fall back to apic_find_highest_vector() when PID.ON is set but PIR turns out to be empty, to correctl… |
CVE-2026-46292 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd If a device is attached to a PM domain through genpd_dev_pm_attach_by_id(), genpd calls pm_runtime_enab… |
CVE-2026-46291 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hash_digest_key Use print_hex_dump_devel() for dumping sensitive HMAC key bytes in hash_digest_key() to avoid leaking secrets… |
CVE-2026-46290 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: x86/efi: Fix graceful fault handling after FPU softirq changes Since commit d02198550423 ("x86/fpu: Improve crypto performance by making kernel-mode FPU reliably usable… |
CVE-2026-46287 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix RTNL assertion warning when remove module For the copper NIC with external PHY, the driver called phylink_connect_phy() during probe and phylink_disconne… |
CVE-2026-46286 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: leds: qcom-lpg: Check for array overflow when selecting the high resolution When selecting the high resolution values from the array, FIELD_GET() is used to pull from a… |
CVE-2026-46284 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix early boot crash on parameters without '=' separator If hugepages, hugepagesz, or default_hugepagesz are specified on the kernel command line without the… |
CVE-2026-46283 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() tpm_dev_release() uses plain kfree() to free chip->auth, which contains sensitive cryptographic mate… |
CVE-2026-46282 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: iio: frequency: admv1013: fix NULL pointer dereference on str When device_property_read_string() fails, str is left uninitialized but the code falls through to strcmp(st… |
CVE-2026-46278 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix segfault when updating ftrace mask Fix invalid data access by passing right data for debugfs entry. |
CVE-2026-46276 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix zero-size GDS range init on RDNA4 RDNA4 (GFX 12) hardware removes the GDS, GWS, and OA on-chip memory resources. |
CVE-2025-71315 | Medium | 5.5 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Convert to DRM's vblank timer Replace vkms' vblank timer with the DRM implementation. |
CVE-2026-46298 | Medium | 4.7 | — | 2026-06-08 | In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Fix race with interrupt handler While executing ->ioctl handler or ->release handler, if an interrupt fires on the same cpu, then we can enter into… |
CVE-2026-0268 | Medium | 4.4 | — | 2026-06-10 | A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffic outside the VPN tunnel. |
N/a · 65 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-38581 | Critical | 9.8 | — | 2026-06-11 | SQL Injection vulnerability in damasac thaipalliative_lte through version 3.0 allows remote attackers to execute arbitrary SQL commands via the idFormMain parameter to /substudy/ezform.php (line 14) and the id parameter (line 49). |
CVE-2026-36721 | Critical | 9.8 | — | 2026-06-09 | A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token. |
CVE-2026-30141 | Critical | 9.8 | — | 2026-06-09 | An issue was discovered in bitbank2 AnimatedGIF v2.2.0. |
CVE-2026-38615 | Critical | 9.8 | — | 2026-06-09 | DedeCMS V5.7.118 is vulnerable to Command Execution in file_manage_control.php. |
CVE-2026-36727 | Critical | 9.1 | — | 2026-06-09 | An insecure authentication vulnerability in the /api/social-sign-in endpoint of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token. |
CVE-2026-36723 | High | 8.8 | — | 2026-06-09 | An unrestricted file rename vulnerability in the /api/create-user component of bookcars v8.3 allows authenticated attackers to leverage directory traversal sequences to move arbitrary files from temporary storage to arbitrary locations on… |
CVE-2026-11572 | High | 8.8 | — | 2026-06-09 | Versions of the package degit before 2.8.6, from 3.0.0 and before 3.3.1 are vulnerable to Command Injection due to improper sanitisation of user input for git shell commands directly invoked with exec() method by _cloneWithGit() and fetchR… |
CVE-2023-29146 | High | 8.2 | — | 2026-06-09 | The utility functions used by Malwarebytes EDR 1.0.11 on Linux for calculating a cryptographic hash of data bytes truncate the hashed data if it exceeds 4GB. |
CVE-2026-36720 | High | 8.1 | — | 2026-06-09 | Insecure permissions in bookcars v8.3 allows authenticated attackers to escalate privileges from user to admin via modifying their user type. |
CVE-2026-39169 | High | 7.5 | — | 2026-06-09 | SEMCMS 5.0 is vulnerable to unauthorized access in SEMCMS_copy.php. |
CVE-2026-36823 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAuthUserInfo parameter of the formAddWebAuthUser function. |
CVE-2026-36822 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the macAddr parameter of the formDelStaState function. |
CVE-2026-36821 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. |
CVE-2026-36820 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function. |
CVE-2026-36819 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the bindMACAddr parameter of the fromSetDhcpRules function. |
CVE-2026-36818 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the wewifiWhiteUserInfo parameter of the formAddWewifiWhiteUser function. |
CVE-2026-36817 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function. |
CVE-2026-36816 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the wewifiWhiteUserInfo parameter of the formAddWewifiWhiteUser function. |
CVE-2026-36815 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the hostname parameter of the formSetNetCheckTools function. |
CVE-2026-36813 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. |
CVE-2026-36811 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picName parameter of the formDelwebAuthPic function. |
CVE-2026-36810 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the gotoUrl parameter of the formPortalAuth function. |
CVE-2026-36809 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthWhiteID parameter of the formModifyWebAuthWhiteUser function. |
CVE-2026-36808 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserInfo parameter of the formAddWebAuthUser function. |
CVE-2026-36807 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserPwd parameter of the formAddWebAuthUser function. |
CVE-2026-36806 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserPwd parameter of the formModifyWebAuthUser function. |
CVE-2026-36805 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple buffer overflows in the Saveqqlist function via the qqStr and markStr parameters. |
CVE-2026-36803 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda PW201A v1.0.5 was discovered to contain a buffer overflow in the page parameter of the qossetting function. |
CVE-2026-36802 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda PW201A v1.0.5 was discovered to contain a buffer overflow in the page parameter of the SafeMacFilter function. |
CVE-2026-36801 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the IPMacBindRule parameter of the formIPMacBindAdd function. |
CVE-2026-36800 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the IPMacBindIndex parameter of the formIPMacBindDel function. |
CVE-2026-36799 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a buffer overflow in the portalAuth parameter of the formPortalAuth function. |
CVE-2026-36797 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the IPMacBindRuleIp parameter of the formIPMacBindModify function. |
CVE-2026-36796 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the picCropName parameter of the formCropAndSetWewifiPic function. |
CVE-2026-36794 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain multiple stack overflows in the R7WebsSecurityHandler function via the username and password parameters. |
CVE-2026-36793 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain multiple stack overflows in the formwrlSSIDset function via the mit_ssid and mis_ssid_index parameters. |
CVE-2026-36792 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl_radio parameter of the formWifiRadioSet function. |
CVE-2026-36791 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda O3v3 v1.0.0.5 was discovered to contain a stack overflow in the save_list_data parameter of the formSetCfm function. |
CVE-2026-36784 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the ip parameter of the fromNetToolGet function. |
CVE-2026-36783 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the domain parameter of the fromNetToolGet function. |
CVE-2026-36779 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain multiple stack overflows in the fromVirtualSer function via the puVar2, puVar1, __s2, __s1_00, and puVar3 parameters. |
CVE-2026-36771 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl_radio parameter of the formwrlSSIDset function. |
CVE-2026-36770 | High | 7.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda US_W3V1.0BR v1.0.0.3 was discovered to contain a stack overflow in the Go parameter of the ask_to_reboot function. |
CVE-2026-36719 | High | 7.5 | — | 2026-06-09 | An information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticated attackers to obtain sensitive information, including SHA256 password hashes, via enumerating user IDs. |
CVE-2023-43688 | High | 7.5 | — | 2026-06-09 | An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). |
CVE-2026-36786 | High | 7.5 | — | 2026-06-08 | Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the list1 parameter of the fromDhcpListClient function. |
CVE-2026-36789 | High | 7.5 | — | 2026-06-08 | Shenzhen Tenda Technology Co., Ltd Tenda AC1206 v15.03.06.23 was discovered to contain multiple stack overflows in the fromGstDhcpSetSer function via the username and password parameters. |
CVE-2026-12066 | High | 7.3 | — | 2026-06-12 | A security flaw has been discovered in PbootCMS up to 3.2.12. |
CVE-2026-36798 | Medium | 6.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple stack overflows in the formSetDebugCfgr function via the enable, level, and module parameters. |
CVE-2026-36777 | Medium | 6.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the param_1 parameter of the formSetCfm function. |
CVE-2026-36773 | Medium | 6.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the Go parameter of the ask_to_reboot function. |
CVE-2026-36772 | Medium | 6.5 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl_radio parameter of the formwrlSSIDget function. |
CVE-2026-36724 | Medium | 6.5 | — | 2026-06-09 | An uncaught exception in the /application/job/update/{id} endpoint of FastapiAdmin v2.2.0 allows authenticated attackers with the module_task:job:update permission to cause a Denial of Service (DoS) via manipulating the func field of sched… |
CVE-2026-39170 | Medium | 6.3 | — | 2026-06-09 | SemCms 5.0 is vulnerable to Cross Site Request Forgery (CSRF) via crafted POST request to /admin/semcms_user.php. |
CVE-2023-43686 | Medium | 6.2 | — | 2026-06-09 | An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). |
CVE-2026-36725 | Medium | 6.1 | — | 2026-06-09 | A markdown based cross-site scripting (XSS) vulnerability in the /system/notice/create endpoint of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the notice_content parame… |
CVE-2026-36728 | Medium | 5.4 | — | 2026-06-09 | A markdown based cross-site scripting (XSS) vulnerability in the AI assistant chat function of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a chat message. |
CVE-2026-36722 | Medium | 5.4 | — | 2026-06-09 | An authenticated arbitrary file upload vulnerability in the /api/create-car-image component of bookcars v8.3 allows attackers to execute arbitrary code via uploading a crafted file. |
CVE-2026-36726 | Medium | 5.3 | — | 2026-06-09 | An arbitrary file deletion vulnerability in the /api/delete-temp-license/{file} endpoint of bookcars v8.3 allows unauthenticated attackers to delete arbitrary files via supplying directory traversal sequences. |
CVE-2026-11487 | Medium | 5.3 | — | 2026-06-08 | A flaw has been found in Neovim up to 0.12.2. |
CVE-2026-11500 | Medium | 5.0 | — | 2026-06-08 | A vulnerability was identified in Weaviate up to 1.37.7. |
CVE-2026-36778 | Medium | 4.9 | — | 2026-06-09 | Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the username parameter of the R7WebsSecurityHandler function. |
CVE-2026-11621 | Medium | 4.7 | — | 2026-06-09 | A weakness has been identified in Dcat-Admin up to 2.2.3-beta. |
CVE-2026-11623 | Medium | 4.5 | — | 2026-06-09 | A security vulnerability has been detected in tmux up to 3.6a. |
CVE-2026-11502 | Low | 3.1 | — | 2026-06-08 | A weakness has been identified in JeecgBoot up to 3.9.2. |
Spring · 58 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-40999 | High | 8.6 | — | 2026-06-11 | When WS-Addressing is used with non-anonymous ReplyTo or FaultTo addresses, Spring WS may initiate outbound connections through configured WebServiceMessageSender instances to destinations taken directly from request headers without verify… |
CVE-2026-40998 | High | 8.2 | — | 2026-06-11 | Jaxp13XPathTemplate evaluated XPath expressions for StreamSource and SAXSource inputs using a code path that parsed attacker-controlled XML with the JDK's default DocumentBuilderFactory behavior instead of Spring's hardened parser configur… |
CVE-2026-40994 | High | 8.2 | — | 2026-06-11 | Wss4jSecurityInterceptor initialized its BSP (WS-I Basic Security Profile) compliance flag so that inbound validation disabled WSS4J BSP enforcement on RequestData. |
CVE-2026-41700 | High | 8.1 | — | 2026-06-11 | Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. |
CVE-2026-41699 | High | 8.1 | — | 2026-06-11 | Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. |
CVE-2026-41732 | High | 8.1 | — | 2026-06-10 | JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. |
CVE-2026-41729 | High | 8.1 | — | 2026-06-10 | Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch (application/json-patch+json) requests. |
CVE-2026-41717 | High | 8.1 | — | 2026-06-10 | Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability. |
CVE-2026-41855 | High | 8.1 | — | 2026-06-09 | In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.springframework.jms.support.converter.JacksonJsonMessageConverter allow arbitrary class instantiation, which can lead to una… |
CVE-2026-41003 | High | 7.6 | — | 2026-06-10 | An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters. |
CVE-2026-41856 | High | 7.5 | — | 2026-06-11 | The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type hierarchies. |
CVE-2026-41728 | High | 7.5 | — | 2026-06-10 | Spring Data REST's JSON Patch (application/json-patch+json) implementation does not apply the write-access filter to intermediate path segments when resolving a multi-segment JSON Pointer. |
CVE-2026-40988 | High | 7.5 | — | 2026-06-10 | An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be vulnerable to a denial of service by way of an unbounded writer that inflates the compressed SAML payload into memory. |
CVE-2026-41850 | High | 7.5 | — | 2026-06-09 | Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS). |
CVE-2026-41849 | High | 7.5 | — | 2026-06-09 | An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL). |
CVE-2026-41842 | High | 7.5 | — | 2026-06-09 | Spring MVC and WebFlux applications are vulnerable to Denial of Service (DoS) attacks when resolving static resources. |
CVE-2026-41007 | High | 7.5 | — | 2026-06-09 | Spring HATEOAS maintains an unbounded static cache of StringLinkRelation instances keyed on attacker-supplied strings. |
CVE-2026-41006 | High | 7.5 | — | 2026-06-09 | Spring HATEOAS's internal PropertyUtils.createObjectFromProperties method, used by the Collection+JSON and UBER media type deserializers, performs bean property binding via reflection without consulting Jackson access-control annotations. |
CVE-2026-40984 | High | 7.5 | — | 2026-06-09 | In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. |
CVE-2026-40983 | High | 7.5 | — | 2026-06-09 | In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. |
CVE-2026-41720 | High | 7.4 | — | 2026-06-09 | Spring LDAP's DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username is paired with an empty or null password. |
CVE-2026-40993 | High | 7.3 | — | 2026-06-10 | An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_asserting_party_metadata) may be able to store malicious serialized payloads in the columns containing the collection of verifi… |
CVE-2026-40987 | High | 7.1 | — | 2026-06-11 | A malicious or compromised FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem (outside the configured local-directory) with attacker-controlled content. |
CVE-2026-41845 | High | 7.1 | — | 2026-06-09 | Due to incorrect escaping, the use of JavaScriptUtils.javaScriptEscape() may lead to JavaScript code injection in the browser, potentially resulting in a cross-site scripting (XSS) vulnerability. |
CVE-2026-47838 | Medium | 6.8 | — | 2026-06-10 | SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. |
CVE-2026-41727 | Medium | 6.5 | — | 2026-06-10 | Spring Kafka's retry topic infrastructure did not sufficiently validate user-controlled header values before acting on them. |
CVE-2026-41726 | Medium | 6.5 | — | 2026-06-10 | When an application opts into DelegatingDeserializer, a producer can grow the consumer's heap without bound by sending records with unique random spring.kafka.serialization.selector header values, eventually causing GC thrash and OutOfMemo… |
CVE-2026-40985 | Medium | 6.4 | — | 2026-06-11 | Applications that configure the WebFlowELExpressionParser are vulnerable to the use of malicious Unified EL expressions. |
CVE-2026-41706 | Medium | 6.1 | — | 2026-06-10 | Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination after a successful login. |
CVE-2026-41715 | Medium | 6.1 | — | 2026-06-09 | In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials. |
CVE-2026-41696 | Medium | 5.9 | — | 2026-06-10 | Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. |
CVE-2026-41846 | Medium | 5.9 | — | 2026-06-09 | Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle attributes of JSP form tags allow arbitrary HTML/JavaScript code injection, potentially resulting in a cross-site scripting (XSS) vulnera… |
CVE-2026-41843 | Medium | 5.9 | — | 2026-06-09 | Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving static resources. |
CVE-2026-41841 | Medium | 5.9 | — | 2026-06-09 | Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when resolving static resources. |
CVE-2026-41840 | Medium | 5.9 | — | 2026-06-09 | Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. |
CVE-2026-41710 | Medium | 5.9 | — | 2026-06-09 | An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. |
CVE-2026-40995 | Medium | 5.4 | — | 2026-06-11 | X509AuthenticationProvider could issue a fully authenticated X509AuthenticationToken when a presented certificate mapped to UserDetails, without applying Spring Security's standard account lifecycle checks (disabled, locked, expired, or cr… |
CVE-2026-41001 | Medium | 5.3 | — | 2026-06-11 | Spring Boot's ArtemisEmbeddedConfigurationFactory uses a fixed, static path for the embedded Artemis message broker's data directory when no explicit path is configured. |
CVE-2026-40997 | Medium | 5.3 | — | 2026-06-11 | Several Spring WS integration paths with Spring Security could surface detailed account state (for example locked or disabled user semantics) to remote SOAP clients through exception messages or callback outcomes, instead of failing with g… |
CVE-2026-41837 | Medium | 5.3 | — | 2026-06-10 | Spring Data REST's Querydsl integration accepts arbitrary persistent property paths as request-parameter filter keys and does not consider Jackson customizations before handing them to Querydsl. |
CVE-2026-41730 | Medium | 5.3 | — | 2026-06-10 | Spring Data REST serializes the full exception cause chain into HTTP error response bodies, potentially exposing persistence-layer internals to HTTP clients. |
CVE-2026-41853 | Medium | 5.3 | — | 2026-06-09 | Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. |
CVE-2026-41851 | Medium | 5.3 | — | 2026-06-09 | Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack if the evaluation of a SpEL expression triggers unbounded cache growth. |
CVE-2026-40992 | Medium | 5.0 | — | 2026-06-11 | Spring Boot's Mail auto-configuration does not enable hostname verification. |
CVE-2026-40996 | Medium | 4.8 | — | 2026-06-11 | Wss4jSecurityInterceptor defaulted allowRSA15KeyTransportAlgorithm to true, overriding Apache WSS4J's safer default for validation RequestData. |
CVE-2026-40986 | Medium | 4.8 | — | 2026-06-11 | Spring Web Flow's JavaScript RemotingHandler renders the body of an error response as HTML even when the response is not "text/html", which can result in a scripting attack in the user's browser if the error response from the server contai… |
CVE-2026-41697 | Medium | 4.8 | — | 2026-06-10 | Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher (STARTING, ENDING, or CONTAINING) in Query By Example (QBE). |
CVE-2026-41847 | Medium | 4.8 | — | 2026-06-09 | Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. |
CVE-2026-41838 | Medium | 4.8 | — | 2026-06-09 | IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rules. |
CVE-2026-41701 | Medium | 4.4 | — | 2026-06-10 | Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to internal simple counter. |
CVE-2026-41854 | Medium | 4.2 | — | 2026-06-09 | Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack. |
CVE-2026-41844 | Medium | 4.2 | — | 2026-06-09 | A Spring MVC or Spring WebFlux application which configures a mapping for "/**" where the view name is not explicitly specified allows an attacker to craft a link resulting in a 302 redirect to an arbitrary external host via the redirect… |
CVE-2026-41839 | Medium | 4.2 | — | 2026-06-09 | A WebFlux application with a compromised subdomain (for example, compromised via cross-site scripting (XSS)) is vulnerable to an escalation attack exchanging a known session ID for that of an authenticated user. |
CVE-2026-41714 | Medium | 4.0 | — | 2026-06-10 | Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps://...") without also calling setUseSSL(true) get TLS encryption with no certificate validation and no hostname verification. |
CVE-2026-41000 | Low | 3.7 | — | 2026-06-11 | Wss4jSecurityInterceptor did not consistently wire Apache WSS4J ReplayCache instances into RequestData for validation-time checks. |
CVE-2026-41694 | Low | 3.7 | — | 2026-06-10 | Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craft these SAML payloads and use the Service Provider as a dec… |
CVE-2026-41852 | Low | 3.7 | — | 2026-06-09 | A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker to invoke unintended application logic. |
CVE-2026-41848 | Low | 3.7 | — | 2026-06-09 | Applications may be vulnerable to a Regular Expression Denial of Service (ReDoS) attack if an attacker is able to provide a pattern which is then directly or indirectly supplied to one of the following methods in AntPathMatcher: match(Stri… |
Apache · 35 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50628 | Critical | 9.8 | — | 2026-06-12 | A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly allowing requests from any other IP address. |
CVE-2026-49875 | Critical | 9.8 | — | 2026-06-12 | Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of-band (OOB) external entity resolution. Users are recommended to upgrad… |
CVE-2026-44631 | Critical | 9.8 | — | 2026-06-08 | Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. |
CVE-2026-29167 | Critical | 9.8 | — | 2026-06-08 | Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. |
CVE-2026-50627 | Critical | 9.1 | — | 2026-06-12 | The JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' (Audience) claims of incoming JWT access tokens. |
CVE-2026-42535 | Critical | 9.1 | — | 2026-06-08 | A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes. |
CVE-2026-50223 | High | 8.8 | — | 2026-06-10 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz allows a low-privileged authenticated user with Content/DataResource editing privileges to perform template injection attacks that could lead to Remote… |
CVE-2026-47342 | High | 8.8 | — | 2026-06-10 | A privilege escalation vulnerability in Apache OFBiz allows a low-privileged authenticated user to obtain higher privileges This issue affects Apache OFBiz: before 24.09.07. |
CVE-2026-50633 | High | 8.1 | — | 2026-06-12 | A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code execution, if an attacker is able to manipulate the JCA deployment descriptor (ra.xml) or runtime activation parameters. Us… |
CVE-2026-50632 | High | 8.1 | — | 2026-06-12 | A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lead to RCE) for Apache CXF has been identified, which can allow code execution capabilities, if untrusted users are allowed to configure JMS… |
CVE-2026-50645 | High | 7.5 | — | 2026-06-12 | There is no restriction on the amount of attachment headers that a message can contain when being deserialized by Apache CXF, which can lead to uncontrolled resource consumption or a denial of service attack. Users are recommended to upgra… |
CVE-2026-49975 | High | 7.5 | — | 2026-06-08 | Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. |
CVE-2026-42536 | High | 7.5 | — | 2026-06-08 | Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. |
CVE-2026-34356 | High | 7.5 | — | 2026-06-08 | Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie* This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. |
CVE-2026-34355 | High | 7.5 | — | 2026-06-08 | A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. |
CVE-2026-47430 | High | 7.5 | — | 2026-06-08 | ## Summary The iOS implementation of `cordova-plugin-inappbrowser` passes the `id` field from a `WKScriptMessage` body to `commandDelegate sendPluginResult:callbackId:` with no format validation (`CDVWKInAppBrowser.m:560–574`). |
CVE-2026-50631 | High | 7.4 | — | 2026-06-12 | A race condition in AbstractOAuthDataProvider allows concurrent requests using the same Refresh Token to bypass single-use semantics and generate multiple valid Access Tokens, when 'recycleRefreshTokens' is set to false. |
CVE-2026-48913 | High | 7.3 | — | 2026-06-08 | Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. |
CVE-2026-44186 | High | 7.3 | — | 2026-06-08 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server. |
CVE-2026-44185 | High | 7.3 | — | 2026-06-08 | Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. |
CVE-2026-25700 | High | 7.2 | — | 2026-06-10 | Improper Restriction of Security Token Assignment vulnerability in Apache Answer. |
CVE-2026-50634 | Medium | 6.5 | — | 2026-06-12 | A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption that accepted `Content-Type… |
CVE-2026-50630 | Medium | 6.5 | — | 2026-06-12 | A CRLF injection vulnerability exists in the OAuth2 AuthorizationUtils class. |
CVE-2026-49818 | Medium | 6.5 | — | 2026-06-09 | The Apache Airflow Samba provider's `GCSToSambaOperator` joined GCS object names to the SMB destination path without a containment check, so an object named with `../` segments resolved a write path outside the configured `destination_path… |
CVE-2026-34905 | Medium | 6.5 | — | 2026-06-09 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. |
CVE-2026-34031 | Medium | 6.5 | — | 2026-06-09 | Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. |
CVE-2026-33582 | Medium | 6.5 | — | 2026-06-09 | Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. |
CVE-2026-43951 | Medium | 6.5 | — | 2026-06-08 | Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. |
CVE-2026-25699 | Medium | 6.1 | — | 2026-06-09 | Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. |
CVE-2026-25688 | Medium | 6.1 | — | 2026-06-09 | Improper Neutralization of Alternate XSS Syntax vulnerability in Apache Answer. |
CVE-2026-29170 | Medium | 6.1 | — | 2026-06-08 | A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration. |
CVE-2026-44119 | Medium | 5.5 | — | 2026-06-08 | Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. |
CVE-2026-34033 | Medium | 5.4 | — | 2026-06-09 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache Answer. |
CVE-2026-50629 | Medium | 5.3 | — | 2026-06-12 | The 'clientId' parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without sanitizing control characters. |
CVE-2026-50623 | Medium | 4.8 | — | 2026-06-12 | An authentication bypass vulnerability exists in the OAuth2 TokenIntrospectionService in Apache CXF. Due to a missing 'throw' keyword in the security context check, the introspection endpoint (/services/oauth2/introspect) can be accessed b… |
Openclaw · 34 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53838 | Critical | 9.8 | — | 2026-06-12 | OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes to confuse approval scope decisions. |
CVE-2026-53836 | High | 8.8 | — | 2026-06-12 | OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in PowerShell encoded-command handling that allows attackers to execute encoded commands using abbreviated flag aliases not recognized by the allowlist parser. |
CVE-2026-53828 | High | 8.8 | — | 2026-06-12 | OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in native command handling that allows authenticated senders to execute owner-only commands without proper policy enforcement. |
CVE-2026-53822 | High | 8.8 | — | 2026-06-12 | OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. |
CVE-2026-53821 | High | 8.8 | — | 2026-06-12 | OpenClaw before 2026.5.18 accepts WebSocket client-declared operator scopes before binding to server-approved pairing or trusted-proxy authorization baseline. |
CVE-2026-53819 | High | 8.8 | — | 2026-06-11 | OpenClaw before 2026.5.27 contains an arbitrary code execution vulnerability in skill install flows where workspace .env files can override the Homebrew executable selection. |
CVE-2026-53817 | High | 8.8 | — | 2026-06-11 | OpenClaw before 2026.5.22 contains a locality validation vulnerability in Control UI pairing that allows attackers with network access to spoof locality information and obtain durable admin-capable device tokens. |
CVE-2026-53811 | High | 8.8 | — | 2026-06-11 | OpenClaw before 2026.5.7 contains a privilege escalation vulnerability in the Matrix allowFrom feature that allows authenticated accounts to match policy entries through mutable display name metadata. |
CVE-2026-53810 | High | 8.8 | — | 2026-06-11 | OpenClaw before 2026.5.18 contains a code execution vulnerability where marketplace runtime extension metadata can redirect loading toward unscanned package payloads. |
CVE-2026-53807 | High | 8.8 | — | 2026-06-11 | OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive callbacks that allows authenticated users to skip commands.allowFrom validation. |
CVE-2026-53806 | High | 8.8 | — | 2026-06-11 | OpenClaw before 2026.5.12 contains a shell option parsing vulnerability that allows combined POSIX shell flags to bypass exec revalidation checks. |
CVE-2026-53831 | High | 8.3 | — | 2026-06-12 | OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on POSIX nodes. |
CVE-2026-53814 | High | 8.3 | — | 2026-06-11 | OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectly receive owner-scoped MCP loopback authority instead of hook-appropriate scope. |
CVE-2026-53823 | High | 8.1 | — | 2026-06-12 | OpenClaw before 2026.5.3 contains a privilege escalation vulnerability in the allowFrom feature that binds to mutable Slack display names. |
CVE-2026-53829 | High | 8.0 | — | 2026-06-12 | OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hide command suffixes from approvers. |
CVE-2026-53813 | High | 7.8 | — | 2026-06-11 | OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace state influences local package root resolution. |
CVE-2026-53833 | High | 7.7 | — | 2026-06-12 | OpenClaw before 2026.4.29 contains an authorization bypass vulnerability in the QQBot streaming command that allows authenticated senders to mutate configuration without explicit allowFrom restrictions. |
CVE-2026-53832 | High | 7.7 | — | 2026-06-12 | OpenClaw before 2026.5.18 contains an identity header validation vulnerability allowing local same-host callers to forge trusted-proxy identity headers. |
CVE-2026-53812 | High | 7.7 | — | 2026-06-11 | OpenClaw before 2026.5.18 contains a server-side request forgery vulnerability in browser control that allows authenticated users to bypass private-network navigation checks through Playwright act interactions. |
CVE-2026-53834 | High | 7.5 | — | 2026-06-12 | OpenClaw before 2026.4.27 contains an authorization bypass vulnerability in QQBot pre-dispatch slash commands that allows authenticated senders to skip allowFrom policy checks. |
CVE-2026-53816 | High | 7.2 | — | 2026-06-11 | OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allows paired nodes to forge exec lifecycle events without system.run authorization. |
CVE-2026-53820 | Medium | 6.6 | — | 2026-06-12 | OpenClaw before 2026.5.12 contains an exec denylist bypass vulnerability in the bundle MCP loopback session-spawn path that allows authenticated callers to bypass intended command restrictions. |
CVE-2026-53818 | Medium | 6.6 | — | 2026-06-11 | OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-owner callers to skip owner-only tool policies and before-tool-call hooks. |
CVE-2026-53839 | Medium | 6.5 | — | 2026-06-12 | OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint checks that allows matching hostname prefixes instead of exact hostnames. |
CVE-2026-53830 | Medium | 6.5 | — | 2026-06-12 | OpenClaw before 2026.4.22 contains a webhook secret revocation bypass vulnerability allowing callers with old Slack and Zalo webhook secrets to remain active after secrets.reload. |
CVE-2026-53827 | Medium | 6.5 | — | 2026-06-12 | OpenClaw before 2026.5.2 contains a credential exposure vulnerability in message.action forwarding that allows model-controlled metadata to forward action payloads with Gateway credentials to attacker-supplied loopback URLs. |
CVE-2026-53825 | Medium | 6.5 | — | 2026-06-12 | OpenClaw before 2026.4.7 contains an arbitrary file read vulnerability in the memory-wiki ingest feature that allows authenticated Gateway operators with operator.write scope to read local files outside intended ingest sources. |
CVE-2026-53824 | Medium | 6.5 | — | 2026-06-12 | OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked slash tokens to continue executing commands during monitor refresh windows. |
CVE-2026-53815 | Medium | 6.5 | — | 2026-06-11 | OpenClaw before 2026.5.19 contains an authorization bypass vulnerability in message read actions that skips channel allowlist checks. |
CVE-2026-53808 | Medium | 6.5 | — | 2026-06-11 | OpenClaw before 2026.5.6 contains an approval policy bypass vulnerability in the Skill Workshop apply flow that allows agent tool calls to set apply: true despite approvalPolicy: pending configuration. |
CVE-2026-53835 | Medium | 4.3 | — | 2026-06-12 | OpenClaw before 2026.5.6 contains a configuration enforcement bypass vulnerability in Feishu dynamic-agent bindings that allows authenticated senders to create or update bindings without honoring configured config-write controls. |
CVE-2026-53826 | Medium | 4.3 | — | 2026-06-12 | OpenClaw before 2026.4.26 contains an information disclosure vulnerability in sandboxed session spawning that exposes the real workspace path to child prompts. |
CVE-2026-53809 | Low | 3.8 | — | 2026-06-11 | OpenClaw before 2026.4.25 contains a policy bypass vulnerability in embedded runner policy that allows requests using provider aliases to compare against aliases instead of canonical provider identities. |
CVE-2026-53837 | Low | 3.7 | — | 2026-06-12 | OpenClaw before 2026.5.6 contains an improper access control vulnerability in Mattermost event handlers that fails to validate channel type metadata. |
Apple · 32 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11654 | Critical | 9.6 | — | 2026-06-09 | Use after free in CameraCapture in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-12020 | High | 8.8 | — | 2026-06-11 | Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2025-24284 | High | 8.8 | — | 2026-06-11 | This issue was addressed with improved checks to prevent unauthorized actions. |
CVE-2026-11699 | High | 8.8 | — | 2026-06-09 | Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2026-11698 | High | 8.8 | — | 2026-06-09 | Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2026-11687 | High | 8.8 | — | 2026-06-09 | Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2026-11657 | High | 8.8 | — | 2026-06-09 | Use after free in Payments in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
CVE-2026-11637 | High | 8.8 | — | 2026-06-09 | Use after free in Views in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
CVE-2026-11633 | High | 8.8 | — | 2026-06-09 | Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a malicious peripheral. |
CVE-2026-12023 | High | 8.3 | — | 2026-06-11 | Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-12022 | High | 8.3 | — | 2026-06-11 | Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. |
CVE-2026-12009 | High | 8.3 | — | 2026-06-11 | Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11677 | High | 8.3 | — | 2026-06-09 | Race in Network in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the network process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11655 | High | 8.3 | — | 2026-06-09 | Integer overflow in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11635 | High | 8.3 | — | 2026-06-09 | Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2025-31272 | High | 7.8 | — | 2026-06-11 | The issue was addressed with improved checks. |
CVE-2025-46315 | High | 7.5 | — | 2026-06-11 | A permissions issue was addressed with additional restrictions. |
CVE-2026-11690 | High | 7.5 | — | 2026-06-09 | Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2026-11639 | High | 7.5 | — | 2026-06-09 | Use after free in Compositing in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
CVE-2022-26758 | High | 7.1 | — | 2026-06-10 | A malicious application may cause unexpected changes in memory shared between processes. |
CVE-2025-46313 | Medium | 5.5 | — | 2026-06-11 | A logging issue was addressed with improved data redaction. |
CVE-2025-46293 | Medium | 5.5 | — | 2026-06-11 | This issue was addressed with improved handling of symlinks. |
CVE-2025-43339 | Medium | 5.5 | — | 2026-06-11 | An access issue was addressed with additional sandbox restrictions. |
CVE-2025-43278 | Medium | 5.5 | — | 2026-06-11 | This issue was addressed with improved handling of symlinks. |
CVE-2025-30459 | Medium | 5.5 | — | 2026-06-11 | A privacy issue was addressed by removing the vulnerable code. |
CVE-2025-30431 | Medium | 5.5 | — | 2026-06-11 | The issue was addressed with improved checks. |
CVE-2025-24268 | Medium | 5.5 | — | 2026-06-11 | A parsing issue in the handling of directory paths was addressed with improved path validation. |
CVE-2025-24165 | Medium | 5.5 | — | 2026-06-11 | A permissions issue was addressed with additional restrictions. |
CVE-2025-46308 | Medium | 5.3 | — | 2026-06-11 | An authorization issue was addressed with improved state management. |
CVE-2026-11685 | Medium | 4.3 | — | 2026-06-09 | Inappropriate implementation in MediaCapture in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-48575 | Low | 3.5 | — | 2026-06-10 | A person with access to a Mac may be able to bypass Login Window. |
CVE-2026-11686 | Low | 3.1 | — | 2026-06-09 | Insufficient validation of untrusted input in Dawn in Google Chrome on macOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. |
Imagemagick · 28 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53461 | High | 7.5 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-53460 | High | 7.5 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-49218 | High | 7.5 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-46522 | High | 7.5 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-46520 | High | 7.5 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-53465 | Medium | 6.2 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-46557 | Medium | 6.2 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-46523 | Medium | 6.2 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-53462 | Medium | 5.9 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-48994 | Medium | 5.9 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-47166 | Medium | 5.7 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-45359 | Medium | 5.7 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-49219 | Medium | 5.5 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-48734 | Medium | 5.5 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-48724 | Medium | 5.5 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-46521 | Medium | 5.5 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-45664 | Medium | 5.3 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-45358 | Medium | 5.3 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-45031 | Medium | 5.3 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-45624 | Medium | 5.1 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-42326 | Medium | 5.1 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-48733 | Medium | 4.7 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-53463 | Medium | 4.3 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-47165 | Medium | 4.1 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-46693 | Medium | 4.1 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-46692 | Medium | 4.1 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-53464 | Medium | 4.0 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
CVE-2026-46559 | Medium | 4.0 | — | 2026-06-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. |
Unattributed · 27 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11849 | Critical | 9.8 | — | 2026-06-12 | The iRM-IEI Remote Management developed by IEI Integration Corp has a Hardcoded Credentials vulnerability, allowing unauthenticated remote attackers to exploit hard-coded credentials to gain administrative privileges on the database. |
CVE-2026-24067 | High | 8.4 | — | 2026-06-10 | Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes the XPC service com.slatedigital.connect.privileged.helper.tool2. |
CVE-2026-11846 | High | 8.1 | — | 2026-06-12 | The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitrary File Deletion vulnerability, allowing authenticated remote attackers to exploit this vulnerability to delete arbitrary system files or directorie… |
CVE-2026-24065 | High | 8.1 | — | 2026-06-09 | Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability in the privileged helper service. |
CVE-2017-20248 | High | 7.5 | — | 2026-06-09 | Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. |
CVE-2026-11582 | High | 7.3 | — | 2026-06-08 | A flaw has been found in CodeAstro Student Attendance Management System 1.0. |
CVE-2026-11531 | High | 7.3 | — | 2026-06-08 | A security flaw has been discovered in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. |
CVE-2026-11474 | High | 7.3 | — | 2026-06-08 | A security flaw has been discovered in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. |
CVE-2026-11532 | Medium | 6.3 | — | 2026-06-08 | A weakness has been identified in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. |
CVE-2026-11514 | Medium | 6.3 | — | 2026-06-08 | A flaw has been found in itsourcecode Hospital Management System 1.0. |
CVE-2026-11513 | Medium | 6.3 | — | 2026-06-08 | A vulnerability was detected in itsourcecode Hospital Management System 1.0. |
CVE-2026-11476 | Medium | 6.3 | — | 2026-06-08 | A security vulnerability has been detected in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. |
CVE-2026-46698 | Medium | 5.3 | — | 2026-06-11 | Fediverse Embeds embeds fediverse posts on WordPress sites. |
CVE-2026-11518 | Medium | 4.3 | — | 2026-06-08 | A vulnerability was identified in SourceCodester Inventory System 1.0. |
CVE-2026-11477 | Medium | 4.3 | — | 2026-06-08 | A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. |
CVE-2026-11520 | Low | 3.5 | — | 2026-06-08 | A weakness has been identified in SourceCodester Inventory System 1.0. |
CVE-2026-11481 | Low | 2.5 | — | 2026-06-08 | A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. |
CVE-2026-11879 | — | — | — | 2026-06-12 | MobaXterm Personal Edition (Portable), in its 26.3 version (Build 5154), allows arbitrary code execution by loading malicious DLLs from a temporary directory that is predictable and can be modified by the user. |
CVE-2026-47197 | — | — | — | 2026-06-12 | Quest Bot is an opensource Discord Bot. |
CVE-2026-47196 | — | — | — | 2026-06-12 | Quest Bot is an opensource Discord Bot. |
CVE-2026-47169 | — | — | — | 2026-06-11 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. |
CVE-2026-47901 | — | — | — | 2026-06-09 | Logseq is vulnerable to a sandbox escape flaw where plugins running in sandboxed iframes can inject arbitrary HTML attributes, such as event handlers, into their container element in the host DOM. |
CVE-2026-47899 | — | — | — | 2026-06-09 | The Electron preload script in Logseq exposes an API method that allows the renderer process to invoke IPC handlers without proper path validation. |
CVE-2026-47345 | — | — | — | 2026-06-08 | Namespace attributes are not encoded correctly during HTML serialization. |
CVE-2026-49755 | — | — | — | 2026-06-08 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in wojtekmach Req allows attacker-controlled HTTP servers to exhaust memory in a Req client via decompression-bomb response bodies. |
CVE-2026-43973 | — | — | — | 2026-06-08 | Uncontrolled Resource Consumption vulnerability in ninenines gun (gun_http module) allows a malicious server to exhaust client memory via unbounded HTTP/1.1 response buffering. |
CVE-2026-43972 | — | — | — | 2026-06-08 | Origin Validation Error vulnerability in ninenines gun (gun_http2 module) allows cross-origin cookie injection via unvalidated HTTP/2 PUSH_PROMISE authority. |
Netty · 22 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47691 | High | 8.7 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-45674 | High | 8.7 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-44249 | High | 8.1 | — | 2026-06-11 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-50011 | High | 7.5 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-50010 | High | 7.5 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-48748 | High | 7.5 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-48059 | High | 7.5 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-48006 | High | 7.5 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-46340 | High | 7.5 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-45416 | High | 7.5 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-44894 | High | 7.5 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-44893 | High | 7.5 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-44892 | High | 7.5 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-44890 | High | 7.5 | — | 2026-06-11 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-44250 | High | 7.5 | — | 2026-06-11 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-45673 | Medium | 6.8 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-50560 | Medium | 5.3 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-50020 | Medium | 5.3 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-48043 | Medium | 5.3 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-47244 | Medium | 5.3 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-50009 | Medium | 4.8 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-45536 | Medium | 4.0 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
Qnap · 22 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-66276 | Critical | 9.8 | — | 2026-06-10 | QuTS hero is not affected. |
CVE-2026-44083 | Critical | 9.8 | — | 2026-06-09 | An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. |
CVE-2026-26241 | Critical | 9.1 | — | 2026-06-10 | A buffer overflow vulnerability has been reported to affect File Station 5. |
CVE-2026-26240 | Critical | 9.1 | — | 2026-06-10 | A buffer overflow vulnerability has been reported to affect File Station 5. |
CVE-2026-26239 | High | 8.1 | — | 2026-06-10 | A buffer overflow vulnerability has been reported to affect File Station 5. |
CVE-2026-24724 | High | 8.1 | — | 2026-06-10 | An incorrect authorization vulnerability has been reported to affect File Station 6. |
CVE-2026-26237 | High | 7.5 | — | 2026-06-10 | A missing authorization vulnerability has been reported to affect QuMagie. |
CVE-2026-26236 | High | 7.5 | — | 2026-06-09 | A missing authorization vulnerability has been reported to affect QuMagie. |
CVE-2026-24719 | High | 7.2 | — | 2026-06-10 | A command injection vulnerability has been reported to affect several QNAP operating system versions. |
CVE-2026-24716 | High | 7.2 | — | 2026-06-10 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. |
CVE-2026-22893 | High | 7.2 | — | 2026-06-10 | A command injection vulnerability has been reported to affect several QNAP operating system versions. |
CVE-2025-66281 | High | 7.2 | — | 2026-06-10 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. |
CVE-2025-66280 | High | 7.2 | — | 2026-06-10 | An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. |
CVE-2025-66279 | High | 7.2 | — | 2026-06-10 | A command injection vulnerability has been reported to affect several QNAP operating system versions. |
CVE-2025-66273 | High | 7.2 | — | 2026-06-10 | A command injection vulnerability has been reported to affect several QNAP operating system versions. |
CVE-2025-62850 | High | 7.2 | — | 2026-06-10 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. |
CVE-2026-24720 | Medium | 6.5 | — | 2026-06-10 | An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. |
CVE-2026-24717 | Medium | 6.5 | — | 2026-06-10 | A path traversal vulnerability has been reported to affect several QNAP operating system versions. |
CVE-2026-22899 | Medium | 6.5 | — | 2026-06-10 | A NULL pointer dereference vulnerability has been reported to affect File Station 6. |
CVE-2025-62858 | Medium | 6.5 | — | 2026-06-09 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. |
CVE-2026-41539 | Medium | 6.1 | — | 2026-06-09 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. |
CVE-2025-62851 | Medium | 4.4 | — | 2026-06-10 | A path traversal vulnerability has been reported to affect License Center. |
Red Hat · 21 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11774 | High | 7.6 | — | 2026-06-11 | An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). |
CVE-2026-6893 | High | 7.5 | — | 2026-06-10 | A flaw was found in dracut. |
CVE-2026-3238 | High | 7.5 | — | 2026-06-08 | A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. |
CVE-2026-11837 | High | 7.3 | — | 2026-06-10 | A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. |
CVE-2026-48914 | Medium | 6.7 | — | 2026-06-12 | A flaw was found in QEMU's virtio-blk device. |
CVE-2026-53702 | Medium | 6.5 | — | 2026-06-11 | A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). |
CVE-2026-53701 | Medium | 6.5 | — | 2026-06-11 | An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad. |
CVE-2026-11884 | Medium | 6.5 | — | 2026-06-10 | A heap buffer overflow flaw was found in 389 Directory Server. |
CVE-2026-11611 | Medium | 6.5 | — | 2026-06-08 | A flaw was found in 389 Directory Server. |
CVE-2026-11788 | Medium | 5.9 | — | 2026-06-09 | A flaw was found in 389 Directory Server. |
CVE-2026-11569 | Medium | 5.4 | — | 2026-06-08 | A flaw was found in Quay. |
CVE-2026-11850 | Medium | 5.0 | — | 2026-06-11 | An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. |
CVE-2026-11787 | Medium | 5.0 | — | 2026-06-09 | A flaw was found in 389 Directory Server. |
CVE-2026-11986 | Medium | 4.9 | — | 2026-06-11 | A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. |
CVE-2026-11793 | Medium | 4.9 | — | 2026-06-09 | A stack buffer overflow flaw was found in 389 Directory Server. |
CVE-2026-11790 | Medium | 4.9 | — | 2026-06-09 | A flaw was found in 389 Directory Server. |
CVE-2026-11789 | Medium | 4.9 | — | 2026-06-09 | A flaw was found in 389 Directory Server. |
CVE-2026-52902 | Medium | 4.7 | — | 2026-06-09 | A path traversal vulnerability was found in awxkit, the CLI tool for AWX. |
CVE-2026-11785 | Medium | 4.3 | — | 2026-06-09 | A flaw was found in 389 Directory Server. |
CVE-2026-11792 | Low | 3.3 | — | 2026-06-09 | A heap buffer overflow flaw was found in 389 Directory Server. |
CVE-2026-11786 | Low | 1.9 | — | 2026-06-09 | A flaw was found in 389 Directory Server. |
Openssl · 18 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-34182 | Critical | 9.1 | — | 2026-06-09 | Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various potential compromises. |
CVE-2026-45447 | High | 8.8 | — | 2026-06-09 | Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. |
CVE-2026-7383 | High | 8.1 | — | 2026-06-09 | Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. |
CVE-2026-9076 | High | 7.5 | — | 2026-06-09 | Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in kek_unwrap_key(). |
CVE-2026-45445 | High | 7.5 | — | 2026-06-09 | Issue summary: When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied initialisation vector (IV) is silently discarded. |
CVE-2026-42765 | High | 7.5 | — | 2026-06-09 | Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the… |
CVE-2026-42764 | High | 7.5 | — | 2026-06-09 | Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled. |
CVE-2026-34183 | High | 7.5 | — | 2026-06-09 | Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames. |
CVE-2026-34180 | High | 7.5 | — | 2026-06-09 | Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. |
CVE-2026-34181 | High | 7.4 | — | 2026-06-09 | Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 (PBMAC1) integrity mechanism allowing a certificate and private key forgery. |
CVE-2026-42771 | Medium | 6.2 | — | 2026-06-09 | Issue summary: When the X509_VERIFY_PARAM_set1_email is called by an application to validate a crafted e-mail address, such as during S/MIME message validation, an out of bounds read can happen. |
CVE-2026-42767 | Medium | 5.9 | — | 2026-06-09 | Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client application. |
CVE-2026-42766 | Medium | 5.9 | — | 2026-06-09 | Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. |
CVE-2026-42769 | Medium | 5.3 | — | 2026-06-09 | Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol (CMP) message response rendered the certificate validation ineffectual, which could lead to escalation… |
CVE-2026-35188 | Medium | 5.0 | — | 2026-06-09 | Issue summary: A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the status_request extension, triggering a double-free in the client's certificate verification path. |
CVE-2026-45446 | Medium | 4.8 | — | 2026-06-09 | Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) mishandle the authentication of AAD (Additional Authenticated Data) with an empty ciphertext allowing a forgery of such messages. |
CVE-2026-42770 | Low | 3.7 | — | 2026-06-09 | Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup membership. |
CVE-2026-42768 | Low | 3.7 | — | 2026-06-09 | Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to Bleichenbacher-style attack when an attacker is able to provide the CMS or S/MIME messages and observe the error code and/or decryption output. |
Fission · 17 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50566 | Critical | 9.9 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-50564 | Critical | 9.9 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-50563 | Critical | 9.9 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-50545 | Critical | 9.9 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-46614 | Critical | 9.8 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-46612 | High | 8.8 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-50570 | High | 8.5 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-49824 | High | 8.5 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-50567 | High | 7.7 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-49823 | High | 7.7 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-49822 | High | 7.7 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-49821 | High | 7.7 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-50565 | Medium | 4.9 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-50569 | Medium | 4.3 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-50568 | Low | 3.6 | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-46618 | — | — | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
CVE-2026-46617 | — | — | — | 2026-06-10 | Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. |
Gen Digital · 17 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6676 | High | 7.8 | — | 2026-06-12 | Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. |
CVE-2025-9033 | High | 7.8 | — | 2026-06-12 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. |
CVE-2025-9032 | High | 7.8 | — | 2026-06-12 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. |
CVE-2025-14098 | High | 7.8 | — | 2026-06-12 | Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. |
CVE-2025-7017 | High | 7.8 | — | 2026-06-12 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. |
CVE-2025-7011 | High | 7.8 | — | 2026-06-12 | Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allow Local Execution of Code or Denial-of-Service of the antivirus process. |
CVE-2025-7009 | High | 7.8 | — | 2026-06-12 | Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus process. |
CVE-2025-7008 | High | 7.8 | — | 2026-06-12 | Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with .NET metadata may allow Local Execution of Code or Denial-of-Service of the antivirus process. |
CVE-2025-7004 | High | 7.8 | — | 2026-06-12 | Heap buffer out-of-bounds write vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus process. |
CVE-2025-7003 | High | 7.8 | — | 2026-06-12 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. |
CVE-2025-7002 | High | 7.8 | — | 2026-06-12 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. |
CVE-2026-12068 | High | 7.4 | — | 2026-06-12 | Information disclosure vulnerability in Avira Password Manager when used with Mozilla Firefox may allow a remote attacker operating a cross-origin iframe to obtain credentials autofilled for the parent web page via incorrect autofill field… |
CVE-2025-7019 | Medium | 5.5 | — | 2026-06-12 | Stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file may allow Denial-of-Service of the antivirus process. |
CVE-2025-7018 | Medium | 5.5 | — | 2026-06-12 | Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process. |
CVE-2025-7010 | Medium | 5.5 | — | 2026-06-12 | Stack overflow vulnerability due to uncontrolled recursion in Avast Antivirus when scanning a malformed PDF file may allow Denial-of-Service of the antivirus process. |
CVE-2025-7006 | Medium | 5.5 | — | 2026-06-12 | Use of stack memory after free vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus process. |
CVE-2025-7005 | Medium | 5.5 | — | 2026-06-12 | Uncontrolled recursion vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus process. |
Netgear · 17 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9211 | High | 8.8 | — | 2026-06-09 | An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation. |
CVE-2026-9213 | High | 8.1 | — | 2026-06-09 | A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the Internet, to execute code on the device. |
CVE-2026-9212 | High | 8.0 | — | 2026-06-09 | Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations. |
CVE-2026-0419 | High | 8.0 | — | 2026-06-09 | Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Suppo… |
CVE-2026-0411 | High | 8.0 | — | 2026-06-09 | An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. |
CVE-2026-3088 | Medium | 6.5 | — | 2026-06-09 | Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests. |
CVE-2026-0409 | Medium | 6.4 | — | 2026-06-09 | A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator performs certain specific management a… |
CVE-2026-0420 | Medium | 5.9 | — | 2026-06-09 | An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. |
CVE-2026-9210 | Medium | 4.5 | — | 2026-06-09 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality. |
CVE-2026-0418 | Medium | 4.5 | — | 2026-06-09 | Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system. |
CVE-2026-0417 | Medium | 4.5 | — | 2026-06-09 | Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity. |
CVE-2026-0416 | Medium | 4.5 | — | 2026-06-09 | An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, res… |
CVE-2026-0415 | Medium | 4.5 | — | 2026-06-09 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality. |
CVE-2026-0414 | Medium | 4.5 | — | 2026-06-09 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality. |
CVE-2026-0413 | Medium | 4.5 | — | 2026-06-09 | A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality. |
CVE-2026-0412 | Medium | 4.5 | — | 2026-06-09 | Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows administrators connected to the local network to make unauthorized modification of router software and fun… |
CVE-2026-0410 | Medium | 4.5 | — | 2026-06-09 | Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality. |
Google · 16 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11659 | Critical | 9.6 | — | 2026-06-09 | Integer overflow in UI in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11681 | High | 8.8 | — | 2026-06-09 | Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2026-12034 | High | 8.3 | — | 2026-06-11 | Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a maliciou… |
CVE-2026-12030 | High | 8.3 | — | 2026-06-11 | Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-12028 | High | 8.3 | — | 2026-06-11 | Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-12019 | High | 8.3 | — | 2026-06-11 | Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-12010 | High | 8.3 | — | 2026-06-11 | Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11682 | High | 8.3 | — | 2026-06-09 | Inappropriate implementation in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11676 | High | 8.3 | — | 2026-06-09 | Insufficient validation of untrusted input in Dawn in Google Chrome on Linux and ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML… |
CVE-2026-11672 | High | 8.3 | — | 2026-06-09 | Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11647 | High | 8.3 | — | 2026-06-09 | Use after free in Printing in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-11644 | High | 7.5 | — | 2026-06-09 | Use after free in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. |
CVE-2026-12026 | Medium | 6.5 | — | 2026-06-11 | Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. |
CVE-2026-11669 | Medium | 5.3 | — | 2026-06-09 | Out of bounds read in Media in Google Chrome on ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. |
CVE-2026-11668 | Medium | 4.3 | — | 2026-06-09 | Uninitialized Use in Codecs in Google Chrome on Linux, ChromeOS prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted video file. |
CVE-2026-12032 | Low | 3.1 | — | 2026-06-11 | Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. |
Codeastro · 15 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12131 | Medium | 6.3 | — | 2026-06-12 | A weakness has been identified in CodeAstro Human Resource Management System 1.0. |
CVE-2026-11585 | Medium | 6.3 | — | 2026-06-08 | A vulnerability was determined in CodeAstro Student Attendance Management System 1.0. |
CVE-2026-11584 | Medium | 6.3 | — | 2026-06-08 | A vulnerability was found in CodeAstro Student Attendance Management System 1.0. |
CVE-2026-11583 | Medium | 6.3 | — | 2026-06-08 | A vulnerability has been found in CodeAstro Student Attendance Management System 1.0. |
CVE-2026-11559 | Medium | 6.3 | — | 2026-06-08 | A vulnerability was detected in CodeAstro Payroll System 1.0. |
CVE-2026-11558 | Medium | 6.3 | — | 2026-06-08 | A security vulnerability has been detected in CodeAstro Payroll System 1.0. |
CVE-2026-11510 | Medium | 6.3 | — | 2026-06-08 | A security flaw has been discovered in CodeAstro Leave Management System 1.0. |
CVE-2026-11509 | Medium | 6.3 | — | 2026-06-08 | A vulnerability was identified in CodeAstro Leave Management System 1.0. |
CVE-2026-11508 | Medium | 6.3 | — | 2026-06-08 | A vulnerability was determined in CodeAstro Leave Management System 1.0. |
CVE-2026-11507 | Medium | 6.3 | — | 2026-06-08 | A vulnerability was found in CodeAstro Leave Management System 1.0. |
CVE-2026-11506 | Medium | 6.3 | — | 2026-06-08 | A vulnerability has been found in CodeAstro Leave Management System 1.0. |
CVE-2026-11495 | Medium | 6.3 | — | 2026-06-08 | A vulnerability was detected in CodeAstro Ingredients Stock Management System 1.0. |
CVE-2026-12130 | Low | 3.5 | — | 2026-06-12 | A security flaw has been discovered in CodeAstro Human Resource Management System 1.0. |
CVE-2026-12129 | Low | 3.5 | — | 2026-06-12 | A vulnerability was identified in CodeAstro Human Resource Management System 1.0. |
CVE-2026-11491 | Low | 2.4 | — | 2026-06-08 | A vulnerability was identified in CodeAstro Human Resource Management System 1.0. |
Huawei · 15 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-41976 | Medium | 6.6 | — | 2026-06-09 | Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-41982 | Medium | 6.4 | — | 2026-06-09 | Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-41975 | Medium | 6.3 | — | 2026-06-09 | Permission management vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect service integrity. |
CVE-2026-41973 | Medium | 5.9 | — | 2026-06-09 | Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-41980 | Medium | 5.5 | — | 2026-06-09 | Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-41979 | Medium | 5.5 | — | 2026-06-09 | Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality. |
CVE-2026-41972 | Medium | 5.4 | — | 2026-06-09 | Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-41981 | Medium | 5.3 | — | 2026-06-09 | Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-41984 | Medium | 5.2 | — | 2026-06-09 | UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity. |
CVE-2026-41985 | Medium | 5.1 | — | 2026-06-09 | UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity. |
CVE-2026-41977 | Medium | 5.0 | — | 2026-06-09 | DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-41978 | Medium | 4.4 | — | 2026-06-09 | Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-41983 | Medium | 4.3 | — | 2026-06-09 | DoS vulnerability in the browser kernel. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-41974 | Low | 3.6 | — | 2026-06-09 | Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-41986 | Low | 2.4 | — | 2026-06-09 | Logic bypass vulnerability in the file system. |
Mongodb · 15 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11933 | High | 8.8 | — | 2026-06-12 | A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when converting BSON documents to JavaScript arrays. |
CVE-2026-9753 | High | 8.1 | — | 2026-06-09 | The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. |
CVE-2026-9742 | High | 7.5 | — | 2026-06-09 | When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of the "authenticate" command that lead to server crash. |
CVE-2026-9740 | High | 7.5 | — | 2026-06-09 | A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message. |
CVE-2026-9754 | Medium | 6.5 | — | 2026-06-09 | An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command |
CVE-2026-9752 | Medium | 6.5 | — | 2026-06-09 | An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS. |
CVE-2026-9750 | Medium | 6.5 | — | 2026-06-09 | An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. |
CVE-2026-9749 | Medium | 6.5 | — | 2026-06-09 | This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. |
CVE-2026-9748 | Medium | 6.5 | — | 2026-06-09 | The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. |
CVE-2026-9747 | Medium | 6.5 | — | 2026-06-09 | Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server. |
CVE-2026-9746 | Medium | 6.5 | — | 2026-06-09 | When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash. |
CVE-2026-9743 | Medium | 6.5 | — | 2026-06-09 | In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines. |
CVE-2026-9741 | Medium | 6.5 | — | 2026-06-09 | A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption (QE) or Client-Side Field Level Encryption (CSFLE) results in literal values for encrypted fields within the $vectorSearch stage filter exp… |
CVE-2026-9751 | Medium | 5.5 | — | 2026-06-09 | The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text. |
CVE-2026-9735 | Medium | 5.5 | — | 2026-06-09 | MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. |
Flowiseai · 14 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46442 | Critical | 9.9 | — | 2026-06-08 | Flowise is a drag & drop user interface to build a customized large language model flow. |
CVE-2026-46441 | Critical | 9.6 | — | 2026-06-08 | Flowise is a drag & drop user interface to build a customized large language model flow. |
CVE-2026-42861 | Critical | 9.6 | — | 2026-06-08 | Flowise is a drag & drop user interface to build a customized large language model flow. |
CVE-2026-46440 | Critical | 9.1 | — | 2026-06-08 | Flowise is a drag & drop user interface to build a customized large language model flow. |
CVE-2026-46480 | High | 8.8 | — | 2026-06-08 | Flowise is a drag & drop user interface to build a customized large language model flow. |
CVE-2026-46479 | High | 8.8 | — | 2026-06-08 | Flowise is a drag & drop user interface to build a customized large language model flow. |
CVE-2026-46478 | High | 8.8 | — | 2026-06-08 | Flowise is a drag & drop user interface to build a customized large language model flow. |
CVE-2026-46477 | High | 8.8 | — | 2026-06-08 | Flowise is a drag & drop user interface to build a customized large language model flow. |
CVE-2026-46476 | High | 8.8 | — | 2026-06-08 | Flowise is a drag & drop user interface to build a customized large language model flow. |
CVE-2026-46475 | High | 8.8 | — | 2026-06-08 | Flowise is a drag & drop user interface to build a customized large language model flow. |
CVE-2026-46444 | High | 8.8 | — | 2026-06-08 | Flowise is a drag & drop user interface to build a customized large language model flow. |
CVE-2026-42863 | High | 8.1 | — | 2026-06-08 | Flowise is a drag & drop user interface to build a customized large language model flow. |
CVE-2026-46443 | Medium | 6.5 | — | 2026-06-08 | Flowise is a drag & drop user interface to build a customized large language model flow. |
CVE-2026-42862 | Medium | 5.0 | — | 2026-06-08 | Flowise is a drag & drop user interface to build a customized large language model flow. |
Nationalsecurityagency · 14 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-52758 | High | 8.8 | — | 2026-06-10 | Ghidra before 12.1 contains a SQL injection vulnerability in BSim filter types that concatenate user-supplied values directly into SQL queries without escaping or parameterization. |
CVE-2026-52754 | High | 8.8 | — | 2026-06-10 | Ghidra before 12.1 contains an authentication bypass vulnerability in PKIAuthenticationModule.authenticate() that allows any user with a valid CA-signed certificate to impersonate other users by presenting their public certificate with a n… |
CVE-2026-52751 | High | 8.8 | — | 2026-06-10 | Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection code that allows unauthenticated remote code execution. |
CVE-2026-49498 | High | 8.8 | — | 2026-06-10 | Ghidra 11.0 before 12.1 contains a SQL injection vulnerability in the changePassword() method of PostgresFunctionDatabase that fails to escape double quotes in usernames interpolated into ALTER ROLE statements. |
CVE-2026-52755 | High | 7.8 | — | 2026-06-10 | Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attackers to write files outside the intended theme directory. |
CVE-2026-52752 | High | 7.8 | — | 2026-06-10 | Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names during extraction. |
CVE-2026-52750 | High | 7.8 | — | 2026-06-10 | Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd.exe metacharacters are not properly escaped. |
CVE-2026-49496 | Medium | 6.1 | — | 2026-06-10 | Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. |
CVE-2026-52753 | Medium | 5.5 | — | 2026-06-10 | Ghidra before 12.0.3 contains an out-of-memory vulnerability in the rust_demangle function that allocates unbounded output buffers without size limits. |
CVE-2026-49495 | Medium | 5.5 | — | 2026-06-10 | Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie() that lacks cycle detection when traversing Mach-O binary export tries. |
CVE-2026-52756 | Medium | 4.8 | — | 2026-06-10 | Ghidra before 12.2 contains an unauthenticated path traversal vulnerability in the IsfServer that accepts TCP connections and passes client-supplied namespace strings directly to filesystem operations without validation. |
CVE-2026-52757 | Medium | 4.4 | — | 2026-06-10 | Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable merging pass. |
CVE-2026-49497 | Low | 3.3 | — | 2026-06-10 | Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate filenames from ELF binary .gnu_debuglink sections before constructing file paths. |
CVE-2024-58350 | Low | 2.9 | — | 2026-06-10 | Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. |
Roxy-wi · 14 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45558 | Critical | 9.9 | — | 2026-06-10 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. |
CVE-2026-45556 | Critical | 9.9 | — | 2026-06-10 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. |
CVE-2026-45552 | Critical | 9.9 | — | 2026-06-10 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. |
CVE-2026-45550 | Critical | 9.1 | — | 2026-06-10 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. |
CVE-2026-45564 | High | 8.8 | — | 2026-06-10 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. |
CVE-2026-45549 | High | 8.5 | — | 2026-06-10 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. |
CVE-2026-45567 | High | 8.3 | — | 2026-06-10 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. |
CVE-2026-45569 | High | 8.1 | — | 2026-06-10 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. |
CVE-2026-45565 | High | 8.1 | — | 2026-06-10 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. |
CVE-2026-45561 | Medium | 6.5 | — | 2026-06-10 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. |
CVE-2026-45566 | Medium | 6.1 | — | 2026-06-10 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. |
CVE-2026-45560 | Medium | 6.1 | — | 2026-06-10 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. |
CVE-2026-45559 | Medium | 4.9 | — | 2026-06-10 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. |
CVE-2026-45563 | Medium | 4.3 | — | 2026-06-10 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. |
Typo3 · 14 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49742 | — | — | — | 2026-06-09 | Backend users with file download permissions were able to download files from the fallback storage of the file abstraction layer (FAL) via the Media Module. |
CVE-2026-49741 | — | — | — | 2026-06-09 | Backend users with write access to the form_definition database table were able to directly create, update, or delete form definition records via DataHandler, bypassing the Form Framework's persistence validation and permission checks. |
CVE-2026-49740 | — | — | — | 2026-06-09 | TYPO3's cache frontend (VariableFrontend) and persistent key-value store (Registry) deserialized PHP payloads without integrity validation or class restrictions. |
CVE-2026-49738 | — | — | — | 2026-06-09 | The path allowance check in GeneralUtility::isAllowedAbsPath() performed a plain string prefix comparison without requiring a directory separator boundary, causing a path like /var/www/html-other/secret.yaml to be incorrectly accepted as v… |
CVE-2026-47352 | — | — | — | 2026-06-09 | Authenticated backend users were able to retrieve file metadata via several Backend API routes without proper permission checks, allowing access to files outside their permitted file mounts or storages. |
CVE-2026-47351 | — | — | — | 2026-06-09 | Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed users to gather information about records and files they were not authorized to view. |
CVE-2026-47350 | — | — | — | 2026-06-09 | Backend users were able to move records to a different page without having edit permissions on the source page. |
CVE-2026-47349 | — | — | — | 2026-06-09 | Backend users with access to the Recycler module were able to restore soft-deleted records on pages or for tables they were not authorized to modify. |
CVE-2026-47348 | — | — | — | 2026-06-09 | Editors with access to create or modify page content were able to include HTML markup in page titles that were stored in the search index without sanitization. |
CVE-2026-47347 | — | — | — | 2026-06-09 | Applications that use GeneralUtility::sanitizeLocalUrl to allow only local URLs are vulnerable to open redirect attacks if the URL is used after it has passed the aforementioned sanitization checks. |
CVE-2026-47346 | — | — | — | 2026-06-09 | Backend users with file write permissions were able to upload form definition files with mixed-case extensions (e.g., .FORM.YAML) to bypass the Form Framework's upload restriction. |
CVE-2026-47343 | — | — | — | 2026-06-09 | Non-privileged backend users with file mount access were able to perform write operations (move, delete, rename) on folders representing the root of an active file mount due to missing authorization restrictions. |
CVE-2026-11607 | — | — | — | 2026-06-09 | Backend users with access to the Form Framework were able to use files not ending in .form.yaml as form definitions, which were processed without denying the incorrect file extension. |
CVE-2026-47344 | — | — | — | 2026-06-08 | When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., </style\t>) are not recognized by the sanitizer but accepted by browsers as valid end tags, allowing subsequent content to escape sanitization. |
Duck-organization · 13 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49347 | — | — | — | 2026-06-12 | Quest Bot is an opensource Discord Bot. |
CVE-2026-48485 | — | — | — | 2026-06-12 | Quest Bot is an opensource Discord Bot. |
CVE-2026-47195 | — | — | — | 2026-06-12 | Quest Bot is an opensource Discord Bot. |
CVE-2026-47189 | — | — | — | 2026-06-11 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. |
CVE-2026-47188 | — | — | — | 2026-06-11 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. |
CVE-2026-47177 | — | — | — | 2026-06-11 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. |
CVE-2026-47176 | — | — | — | 2026-06-11 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. |
CVE-2026-47175 | — | — | — | 2026-06-11 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. |
CVE-2026-47174 | — | — | — | 2026-06-11 | In Duck Site before version 1.0.1, the repository has a deploy workflow that runs after the build workflow completes. |
CVE-2026-47173 | — | — | — | 2026-06-11 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. |
CVE-2026-47172 | — | — | — | 2026-06-11 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. |
CVE-2026-47171 | — | — | — | 2026-06-11 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. |
CVE-2026-47163 | — | — | — | 2026-06-11 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. |
Misp · 13 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54398 | — | — | — | 2026-06-12 | An authorization flaw in MISP’s object add/edit handling allowed an authenticated user with object editing permissions to assign a MISP object, or attributes contained within an object, to a sharing group that the user was not authorized t… |
CVE-2026-54397 | — | — | — | 2026-06-12 | A vulnerability in MISP’s non-REST event editing path allowed an authenticated user with event edit permissions to manipulate the submitted form data and set an event’s sharing_group_id to a sharing group they were not authorized to use. |
CVE-2026-54396 | — | — | — | 2026-06-12 | An information disclosure vulnerability exists in the MISP AuthKey edit functionality. |
CVE-2026-54395 | — | — | — | 2026-06-12 | MISP contains a reflected cross-site scripting vulnerability in the UiBeta event index view. |
CVE-2026-54394 | — | — | — | 2026-06-12 | MISP contains a path traversal vulnerability in OrganisationsController::getOrgLogo. |
CVE-2026-54393 | — | — | — | 2026-06-12 | A stored cross-site scripting vulnerability exists in MISP when the Overmind theme is used. |
CVE-2026-54362 | — | — | — | 2026-06-12 | An incorrect visibility condition in the MISP event template builder allowed authenticated non-site-admin users to view galaxies that should not have been visible to their organisation. |
CVE-2026-54361 | — | — | — | 2026-06-12 | MISP contained multiple mass assignment vulnerabilities in the handling of collections, tag collections, event delegations, and shadow attributes. |
CVE-2026-54360 | — | — | — | 2026-06-12 | A mass assignment vulnerability exists in MISP’s sharing group creation endpoint. |
CVE-2026-54359 | — | — | — | 2026-06-12 | MISP contains an insecure default configuration in which the Security.check_sec_fetch_site_header control is disabled. |
CVE-2026-54358 | — | — | — | 2026-06-12 | An incorrect authorization vulnerability in MISP allows an organization administrator to target site administrator accounts belonging to the same organization through the administrative email functionality. |
CVE-2026-54357 | — | — | — | 2026-06-12 | An improper authorization vulnerability in MISP allowed an authenticated organization administrator to access or modify user settings belonging to site administrator accounts within the same organization. |
CVE-2026-53693 | — | — | — | 2026-06-10 | A stored cross-site scripting vulnerability existed in MISP BSimVis tag rendering code. |
Nezhahq · 13 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46716 | Critical | 9.9 | — | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. |
CVE-2026-53519 | Critical | 9.1 | — | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. |
CVE-2026-46717 | High | 7.7 | — | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. |
CVE-2026-49396 | High | 7.1 | — | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. |
CVE-2026-48119 | High | 7.1 | — | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. |
CVE-2026-47120 | High | 7.1 | — | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. |
CVE-2026-53523 | Medium | 6.8 | — | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. |
CVE-2026-53522 | Medium | 6.5 | — | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. |
CVE-2026-53520 | Medium | 6.5 | — | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. |
CVE-2026-47124 | Medium | 6.5 | — | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. |
CVE-2026-53521 | Medium | 6.4 | — | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. |
CVE-2026-47268 | Medium | 6.4 | — | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. |
CVE-2026-49397 | Medium | 5.3 | — | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. |
Frappe · 12 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46546 | Medium | 5.4 | — | 2026-06-10 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. |
CVE-2026-53568 | — | — | — | 2026-06-12 | Frappe is a full-stack web application framework. |
CVE-2026-50026 | — | — | — | 2026-06-12 | Frappe is a full-stack web application framework. |
CVE-2026-47182 | — | — | — | 2026-06-12 | Frappe is a full-stack web application framework. |
CVE-2026-44976 | — | — | — | 2026-06-12 | Frappe is a full-stack web application framework. |
CVE-2026-44975 | — | — | — | 2026-06-12 | Frappe is a full-stack web application framework. |
CVE-2026-44208 | — | — | — | 2026-06-12 | Frappe is a full-stack web application framework. |
CVE-2026-44207 | — | — | — | 2026-06-12 | Frappe is a full-stack web application framework. |
CVE-2026-44206 | — | — | — | 2026-06-12 | Frappe is a full-stack web application framework. |
CVE-2026-47739 | — | — | — | 2026-06-12 | Frappe is a full-stack web application framework. |
CVE-2026-44205 | — | — | — | 2026-06-12 | Frappe is a full-stack web application framework. |
CVE-2026-41581 | — | — | — | 2026-06-12 | Frappe is a full-stack web application framework. |
Gitlab · 12 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6552 | High | 8.7 | — | 2026-06-11 | GitLab has remediated an issue in GitLab EE affecting all versions from 15.5 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with group Owner role to take… |
CVE-2026-10087 | High | 8.7 | — | 2026-06-11 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with developer-role permission… |
CVE-2026-7250 | High | 7.5 | — | 2026-06-11 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an unauthenticated user to cause denial of servi… |
CVE-2026-8589 | High | 7.3 | — | 2026-06-11 | GitLab has remediated an issue in GitLab EE affecting all versions from 13.1.4 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to add unauthorized email ad… |
CVE-2026-1500 | Medium | 6.5 | — | 2026-06-11 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to cause denial of service… |
CVE-2026-6269 | Medium | 5.4 | — | 2026-06-11 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with developer-role permis… |
CVE-2026-9204 | Medium | 5.3 | — | 2026-06-11 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to read arbitrary files fr… |
CVE-2026-6277 | Medium | 4.3 | — | 2026-06-11 | GitLab has remediated an issue in GitLab EE affecting all versions from 13.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with Security Manager-role per… |
CVE-2026-10733 | Medium | 4.3 | — | 2026-06-11 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that could have allowed an authenticated user to cause denial of service on the CI/CD Catalog page… |
CVE-2026-6976 | Low | 3.7 | — | 2026-06-11 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with developer-role permiss… |
CVE-2026-3553 | Low | 3.1 | — | 2026-06-11 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to access confidential issu… |
CVE-2026-9694 | Low | 2.6 | — | 2026-06-11 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions, could have allowed an unauthenticated user to impersonate the GitLa… |
Sap_se · 12 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44748 | Critical | 9.9 | — | 2026-06-09 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. |
CVE-2026-27671 | Critical | 9.8 | — | 2026-06-09 | Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management… |
CVE-2026-40128 | Critical | 9.0 | — | 2026-06-09 | SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters, enabling path traversal and processing of the included file. |
CVE-2026-44751 | High | 7.1 | — | 2026-06-09 | Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker to execute a report generation command which could overwrite information belonging to another user, resulting in escalat… |
CVE-2026-44754 | Medium | 6.6 | — | 2026-06-09 | The Remote Function Call (RFC) modules of the Operational Data Provisioning Data Replication API (ODP-RFC) are missing caller identification of permitted SAP-internal applications and are being used by customer or third-party applications… |
CVE-2026-44744 | Medium | 6.5 | — | 2026-06-09 | SAP S/4HANA(On-Premise) contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitiv… |
CVE-2026-44746 | Medium | 6.1 | — | 2026-06-09 | Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver JAVA (JDBC Test Servlet), an unauthenticated attacker could craft a URL that embeds a malicious script. |
CVE-2026-44757 | Medium | 4.7 | — | 2026-06-09 | SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. |
CVE-2026-44755 | Medium | 4.3 | — | 2026-06-09 | SAP Business Objects Business Intelligence Platform does not sufficiently validate email sending parameters supplied by authenticated users, resulting in an email spoofing vulnerability.This vulnerability has a low impact on integrity and… |
CVE-2026-44750 | Medium | 4.3 | — | 2026-06-09 | SAP MDG (Review Match Groups Application) does not perform the necessary authorization checks for authenticated users. |
CVE-2026-24315 | Medium | 4.2 | — | 2026-06-09 | SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credentials. |
CVE-2026-44743 | Low | 3.7 | — | 2026-06-09 | Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects application leaks sensitive information .This has a low impact on the confidentiality of the data. |
Sourcecodester · 12 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11501 | High | 7.3 | — | 2026-06-08 | A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. |
CVE-2026-11486 | High | 7.3 | — | 2026-06-08 | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. |
CVE-2026-11485 | High | 7.3 | — | 2026-06-08 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. |
CVE-2026-11484 | High | 7.3 | — | 2026-06-08 | A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. |
CVE-2026-11483 | High | 7.3 | — | 2026-06-08 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. |
CVE-2026-11482 | High | 7.3 | — | 2026-06-08 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. |
CVE-2026-11472 | High | 7.3 | — | 2026-06-08 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. |
CVE-2026-11471 | High | 7.3 | — | 2026-06-08 | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. |
CVE-2026-11519 | Medium | 6.3 | — | 2026-06-08 | A security flaw has been discovered in SourceCodester Inventory System 1.0. |
CVE-2026-11552 | Medium | 5.3 | — | 2026-06-08 | A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. |
CVE-2026-11515 | Medium | 5.3 | — | 2026-06-08 | A vulnerability has been found in SourceCodester Barangay Resident Profiling and Information Management System 1.0. |
CVE-2026-11468 | Low | 2.4 | — | 2026-06-08 | A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. |
Tenda · 12 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11499 | Critical | 9.8 | — | 2026-06-08 | A vulnerability was determined in Tenda HG7HG9 and HG10 300001138_en_xpon. |
CVE-2026-11557 | High | 8.8 | — | 2026-06-08 | A weakness has been identified in Tenda F451 1.0.0.7/1.0.0.9. |
CVE-2026-11556 | High | 8.8 | — | 2026-06-08 | A security flaw has been discovered in Tenda F451 1.0.0.7/1.0.0.9. |
CVE-2026-11553 | High | 8.8 | — | 2026-06-08 | A vulnerability was found in Tenda HG7HG9 and HG10 300001138_en_xpon. |
CVE-2026-11528 | High | 8.8 | — | 2026-06-08 | A vulnerability was found in Tenda AC18 15.03.05.05. |
CVE-2026-11524 | High | 8.8 | — | 2026-06-08 | A vulnerability has been found in Tenda W20E 15.11.0.6. |
CVE-2026-11523 | High | 8.8 | — | 2026-06-08 | A flaw has been found in Tenda W20E 15.11.0.6. |
CVE-2026-11522 | High | 8.8 | — | 2026-06-08 | A vulnerability was detected in Tenda W20E 15.11.0.6. |
CVE-2026-11504 | High | 8.8 | — | 2026-06-08 | A vulnerability was detected in Tenda CX12L 16.03.53.12. |
CVE-2026-11503 | High | 8.8 | — | 2026-06-08 | A security vulnerability has been detected in Tenda CX12L 16.03.53.12. |
CVE-2026-11498 | High | 8.8 | — | 2026-06-08 | A vulnerability was found in Tenda HG7HG9 and HG10 300001138_en_xpon. |
CVE-2026-11493 | Medium | 5.0 | — | 2026-06-08 | A weakness has been identified in Tenda AC15 15.03.05.19. |
Discourse · 11 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44786 | High | 7.5 | — | 2026-06-12 | Discourse is an open-source discussion platform. |
CVE-2026-45775 | Medium | 6.8 | — | 2026-06-12 | Discourse is an open-source discussion platform. |
CVE-2026-44784 | Medium | 6.5 | — | 2026-06-12 | Discourse is an open-source discussion platform. |
CVE-2026-44783 | Medium | 5.4 | — | 2026-06-12 | Discourse is an open-source discussion platform. |
CVE-2026-47264 | Medium | 5.3 | — | 2026-06-12 | Discourse is an open-source discussion platform. |
CVE-2026-45085 | Medium | 5.3 | — | 2026-06-12 | Discourse is an open-source discussion platform. |
CVE-2026-47263 | Medium | 4.3 | — | 2026-06-12 | Discourse is an open-source discussion platform. |
CVE-2026-44785 | Medium | 4.3 | — | 2026-06-12 | Discourse is an open-source discussion platform. |
CVE-2026-44782 | Medium | 4.3 | — | 2026-06-12 | Discourse is an open-source discussion platform. |
CVE-2026-44780 | Medium | 4.3 | — | 2026-06-12 | Discourse is an open-source discussion platform. |
CVE-2026-44779 | Medium | 4.3 | — | 2026-06-12 | Discourse is an open-source discussion platform. |
Apostrophecms · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44990 | Critical | 9.3 | — | 2026-06-12 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. |
CVE-2026-53609 | Critical | 9.1 | — | 2026-06-12 | ApostropheCMS is an open-source Node.js content management system. |
CVE-2026-53608 | High | 8.7 | — | 2026-06-12 | ApostropheCMS is an open-source Node.js content management system. |
CVE-2026-45013 | High | 8.1 | — | 2026-06-12 | ApostropheCMS is an open-source Node.js content management system. |
CVE-2026-45012 | High | 7.6 | — | 2026-06-12 | ApostropheCMS is an open-source Node.js content management system. |
CVE-2026-45011 | High | 7.3 | — | 2026-06-12 | ApostropheCMS is an open-source Node.js content management system. |
CVE-2026-42853 | Medium | 6.5 | — | 2026-06-12 | ApostropheCMS is an open-source Node.js content management system. |
CVE-2026-53606 | Medium | 5.4 | — | 2026-06-12 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. |
CVE-2026-53607 | Low | 3.7 | — | 2026-06-12 | ApostropheCMS is an open-source Node.js content management system. |
CVE-2026-45014 | — | — | — | 2026-06-12 | ApostropheCMS is an open-source Node.js content management system. |
Aqara · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50086 | Critical | 10.0 | — | 2026-06-12 | The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. |
CVE-2026-50084 | Critical | 9.6 | — | 2026-06-12 | The Aqara Cloud Production API (open-cn.aqara.com/v3.0/open/api) would authorize any valid developer token for access to any account. |
CVE-2026-50090 | Critical | 9.3 | — | 2026-06-12 | The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on domain matching, which is an instance of "CWE-1289: Improper Validation of Unsafe Equivalence in Inp… |
CVE-2026-50091 | Critical | 9.1 | — | 2026-06-12 | Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CWE-321: Use of Hard-coded Cryptographic Key" and has an estimat… |
CVE-2026-50083 | Critical | 9.1 | — | 2026-06-12 | The Aqara IAM/SSO Gateway (gw-builder.aqara.com) used a hardcoded OAuth client credential, which is an instance of "CWE-798: Use of Hard-coded Credentials." This issue has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N (… |
CVE-2026-50085 | High | 8.6 | — | 2026-06-12 | The Aqara Board service (op-test.aqara.com) accepts arbitrary MQTT command payloads, and forwards them to the platfom's HiveMQ broker without authentication. |
CVE-2026-50088 | High | 8.2 | — | 2026-06-12 | The Aqara Developer Portal (developer.aqara.com) and shared test environments (developer-test.aqara.com, aiot-test.aqara.com) exhibit cross-origin request sharing, which is an instance of "CWE-942: Permissive Cross-domain Policy with Untru… |
CVE-2026-50087 | High | 8.2 | — | 2026-06-12 | The Aqara IAM/SSO gateway (gw-builder.aqara.com) exhibits a cross-origin request sharing vulnerability, which is an instance of "CWE-942: Permissive Cross-domain Policy with Untrusted Domains," and has an estimated CVSS of CVSS:3.1/AV:N/AC… |
CVE-2026-50082 | Medium | 6.5 | — | 2026-06-12 | The Aqara Cloud Developer Portal (developer.aqara.com) issued a developer token to any email address supplied by the attacker. |
CVE-2026-50089 | Medium | 6.1 | — | 2026-06-12 | The Aqara IAM/SSO Gateway (gw-builder.aqara.com) provides an open redirect, which is an instance of "CWE-601: URL Redirection to Untrusted Site," with an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (6.1 Medium), which ca… |
Splunk · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-20253 | Critical | 9.8 | KEV | 2026-06-10 | In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. |
CVE-2026-20251 | High | 8.8 | — | 2026-06-10 | In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway versions below 3.10.6, 3.9.20, and 3.8.67, a… |
CVE-2026-20252 | High | 7.6 | — | 2026-06-10 | In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.2604.3, 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, a low-privileged user that does not hold the "admin"… |
CVE-2026-20258 | High | 7.1 | — | 2026-06-10 | In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.11, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Sp… |
CVE-2026-20257 | Medium | 5.7 | — | 2026-06-10 | In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Sp… |
CVE-2026-20256 | Medium | 5.7 | — | 2026-06-10 | In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the 'admin' or 'power' Sp… |
CVE-2026-20255 | Medium | 5.7 | — | 2026-06-10 | In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Sp… |
CVE-2026-20254 | Medium | 5.7 | — | 2026-06-10 | In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the 'admin' or 'power' Sp… |
CVE-2026-20259 | Medium | 5.5 | — | 2026-06-10 | In Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4.2604.0, 10.3.2512.12, 10.2.2510.15, 10.1.2507.23, 10.0.2503.14, and 9.3.2411.131, a user who holds a Splunk role that contains the high-pr… |
CVE-2026-20260 | Medium | 4.3 | — | 2026-06-10 | In Splunk SOAR (Security Orchestration, Automation, and Response) versions below 8.5.0, an unauthenticated attacker could inject American National Standards Institute (ANSI) escape codes into SOAR application log files through specially cr… |
Axios · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44494 | High | 8.7 | — | 2026-06-11 | Axios is a promise based HTTP client for the browser and Node.js. |
CVE-2026-44492 | High | 8.6 | — | 2026-06-11 | Axios is a promise based HTTP client for the browser and Node.js. |
CVE-2026-44496 | High | 7.5 | — | 2026-06-11 | Axios is a promise based HTTP client for the browser and Node.js. |
CVE-2026-44488 | High | 7.5 | — | 2026-06-11 | Axios is a promise based HTTP client for the browser and Node.js. |
CVE-2026-44487 | High | 7.5 | — | 2026-06-11 | Axios is a promise based HTTP client for the browser and Node.js. |
CVE-2026-44486 | High | 7.5 | — | 2026-06-11 | Axios is a promise based HTTP client for the browser and Node.js. |
CVE-2026-44495 | High | 7.0 | — | 2026-06-11 | Axios is a promise based HTTP client for the browser and Node.js. |
CVE-2026-44490 | Medium | 4.8 | — | 2026-06-11 | Axios is a promise based HTTP client for the browser and Node.js. |
CVE-2026-44489 | Low | 3.7 | — | 2026-06-11 | Axios is a promise based HTTP client for the browser and Node.js. |
Broadcom · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-41716 | High | 7.5 | — | 2026-06-10 | Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests. |
CVE-2026-41695 | High | 7.5 | — | 2026-06-10 | Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution. |
CVE-2026-41719 | Medium | 6.4 | — | 2026-06-10 | A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator. |
CVE-2026-41008 | Medium | 6.1 | — | 2026-06-10 | Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parameter. |
CVE-2026-41721 | Medium | 5.9 | — | 2026-06-10 | Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Support is enabled in conjunction with a Controller method using @ProjectedPayload, when an attacker sends a specially cra… |
CVE-2026-41711 | Medium | 5.9 | — | 2026-06-10 | Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters. |
CVE-2026-40991 | Medium | 5.9 | — | 2026-06-10 | When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attac… |
CVE-2026-11626 | — | — | — | 2026-06-10 | CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an affected system can escalate their priv… |
CVE-2026-11815 | — | — | — | 2026-06-10 | An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. |
Freeswitch · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49841 | Critical | 9.8 | — | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-49840 | Critical | 9.1 | — | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-49847 | High | 7.5 | — | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-49842 | High | 7.5 | — | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-49475 | High | 7.5 | — | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-45771 | High | 7.5 | — | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-49843 | Medium | 5.3 | — | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-49472 | Medium | 5.3 | — | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-49848 | Medium | 4.3 | — | 2026-06-09 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
Mariadb · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49261 | Critical | 10.0 | — | 2026-06-11 | MariaDB server is a community developed fork of MySQL server. |
CVE-2026-44170 | Critical | 9.8 | — | 2026-06-12 | MariaDB server is a community developed fork of MySQL server. |
CVE-2026-44172 | Critical | 9.1 | — | 2026-06-12 | MariaDB server is a community developed fork of MySQL server. |
CVE-2026-48165 | High | 8.0 | — | 2026-06-12 | MariaDB server is a community developed fork of MySQL server. |
CVE-2026-48163 | High | 8.0 | — | 2026-06-12 | MariaDB server is a community developed fork of MySQL server. |
CVE-2026-44168 | High | 8.0 | — | 2026-06-12 | MariaDB server is a community developed fork of MySQL server. |
CVE-2026-44171 | Medium | 6.3 | — | 2026-06-12 | MariaDB server is a community developed fork of MySQL server. |
CVE-2026-44173 | Medium | 5.0 | — | 2026-06-12 | MariaDB server is a community developed fork of MySQL server. |
CVE-2026-44169 | Medium | 4.3 | — | 2026-06-12 | MariaDB server is a community developed fork of MySQL server. |
Patriksimek · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47208 | Critical | 10.0 | — | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. |
CVE-2026-47140 | Critical | 10.0 | — | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. |
CVE-2026-47137 | Critical | 10.0 | — | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. |
CVE-2026-47131 | Critical | 10.0 | — | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. |
CVE-2026-47210 | Critical | 9.8 | — | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. |
CVE-2026-47135 | High | 8.7 | — | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. |
CVE-2026-47209 | High | 8.6 | — | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. |
CVE-2026-47139 | High | 8.6 | — | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. |
CVE-2026-47141 | — | — | — | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. |
Jenkins · 8 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53435 | High | 8.8 | — | 2026-06-10 | In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in Jenkins core or plugins from an attacker-controlled `config.xml` submission in a way that allows the… |
CVE-2026-53441 | Medium | 5.4 | — | 2026-06-10 | Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided description of a generic offline cause that could be set through the `POST config.xml` API, resulting in a stored… |
CVE-2026-53442 | Medium | 5.3 | — | 2026-06-10 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job configurations unencrypted in job config.xml files on the Jenkins controller where they can be viewed b… |
CVE-2026-53440 | Medium | 4.3 | — | 2026-06-10 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate to servlet container" security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redire… |
CVE-2026-53439 | Medium | 4.3 | — | 2026-06-10 | Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users' configured timezone and to enumerate view names of other users' "My Views". |
CVE-2026-53438 | Medium | 4.3 | — | 2026-06-10 | A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view. |
CVE-2026-53437 | Medium | 4.3 | — | 2026-06-10 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains tab or newline characters between `//`, allowing attackers to perform phishing at… |
CVE-2026-53436 | Medium | 4.3 | — | 2026-06-10 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing at… |
Unknown · 8 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9067 | Critical | 9.1 | — | 2026-06-10 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint's intended me… |
CVE-2026-8071 | High | 8.8 | — | 2026-06-10 | The Anti-Spam by CleanTalk. |
CVE-2026-3326 | High | 8.6 | — | 2026-06-10 | The Xstore WordPress theme before 9.7.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection |
CVE-2026-9271 | Medium | 5.9 | — | 2026-06-12 | Vulnerability Title |
CVE-2026-4986 | Medium | 5.3 | — | 2026-06-09 | The WPForms WordPress plugin before 1.10.0.5 does not verify the authenticity of incoming PayPal webhook events before processing them, allowing unauthenticated attackers to forge webhook payloads and manipulate the payment state of arbit… |
CVE-2026-9269 | Low | 3.5 | — | 2026-06-12 | The Secure Copy Content Protection and Content Locking WordPress plugin before 5.1.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks eve… |
CVE-2026-9060 | Low | 3.5 | — | 2026-06-10 | The Store Locator WordPress plugin before 1.6.6 does not sanitize and escape one of its settings before storing it and outputting it on the Store Locator WordPress plugin before 1.6.6 admin page, allowing high-privileged users such as admi… |
CVE-2026-8981 | Low | 3.5 | — | 2026-06-09 | The Custom Block Builder WordPress plugin before 4.3.0 does not consistently check the unfiltered_html capability across all paths that write to its block template code fields, allowing administrators on multisite installations (or single… |
Cyberark Software, A Palo Alto Networks Company · 7 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45177 | Critical | 9.1 | — | 2026-06-11 | Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. |
CVE-2026-45170 | High | 8.8 | — | 2026-06-12 | Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. |
CVE-2026-45172 | High | 8.8 | — | 2026-06-11 | Due to incomplete input validation in Idira Privileged Session Manager for SSH (PSMP) versions prior to 15.0.2, 14.6.3, 14.2.5, and 14.0.6, an authenticated, low-privileged user could potentially execute arbitrary commands on the PSMP host. |
CVE-2026-45171 | High | 8.8 | — | 2026-06-11 | Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) versions prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5, an authenticated, low-privileged user could potentially execute ar… |
CVE-2026-45169 | High | 8.6 | — | 2026-06-12 | Idira Privileged Access Manager (PAM) Self-Hosted Vault versions prior to 15.0.3, 14.6.5, 14.2.7, and 14.0.8 exhibit a validation vulnerability. |
CVE-2026-45178 | High | 8.1 | — | 2026-06-11 | Idira Secrets Manager Self-Hosted versions 13.8.0 and lower exhibit improper access control within internal cluster endpoints. |
CVE-2026-45174 | High | 7.8 | — | 2026-06-11 | Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. |
Erlang · 7 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49759 | High | 8.2 | — | 2026-06-10 | Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to crash the BEAM VM by sending a crafted SCTP ERROR chunk. |
CVE-2026-48860 | Medium | 6.5 | — | 2026-06-10 | Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl (inet_tls_dist module) allows unauthenticated bypass of the distribution-over-TLS LAN allowlist. |
CVE-2026-48858 | Medium | 6.5 | — | 2026-06-10 | Server-Side Request Forgery (SSRF) vulnerability in Erlang/OTP ftp (ftp_internal module) allows FTP bounce attacks and SSRF via an unvalidated PASV response IP address. |
CVE-2026-48856 | Medium | 6.5 | — | 2026-06-10 | Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data. |
CVE-2026-48855 | Medium | 6.5 | — | 2026-06-10 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh (ssh_sftpd module) allows File Discovery. |
CVE-2026-49760 | Medium | 5.5 | — | 2026-06-10 | Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow. |
CVE-2026-48859 | Medium | 5.3 | — | 2026-06-10 | Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication. |
Mattermost · 7 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7387 | High | 8.8 | — | 2026-06-12 | Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to require role-management authorization when setting the scheme_admin flag on group syncable link and patch endpoints, which… |
CVE-2026-6961 | High | 7.6 | — | 2026-06-12 | Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to sanitize FileInfo.Name received from federated peers during shared channel file sync, which allows an attacker who control… |
CVE-2026-6739 | Medium | 6.7 | — | 2026-06-12 | Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 fail to require system-level permission when patching protected default system roles, which allows authenticated users with delegated user-man… |
CVE-2026-7184 | Medium | 6.5 | — | 2026-06-12 | Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15 fail to sanitize the Remote Cluster API response on PATCH operations, which allows authenticated users with the {{manage_secure_connections}} permission to obtain… |
CVE-2026-6046 | Medium | 5.3 | — | 2026-06-12 | Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 fail to validate that a username returned during bot registration belongs to a bot account, which allows an unprivileged attacker to intercept… |
CVE-2026-6689 | Medium | 4.3 | — | 2026-06-12 | Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Fail to enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation (the check was only applied on update… |
CVE-2026-3433 | Medium | 4.3 | — | 2026-06-12 | Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 fail to restrict role_updated websocket event broadcasts to members of the affected team or channel which allows an authenticated attacker wit… |
Naxclow · 7 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-28742 | Critical | 9.8 | — | 2026-06-12 | Naxclow devices use a uniform request-signing scheme based on a hard-coded, platform-wide salt embedded in every firmware image. |
CVE-2026-42947 | High | 8.8 | — | 2026-06-12 | A flaw in Naxclow's platform’s onboarding workflow allows an attacker to replay a confirm-then-bind sequence to silently reassign a device to an arbitrary account. |
CVE-2026-50101 | High | 8.1 | — | 2026-06-12 | Naxclow devices use a server-side, per-device relay credential that never rotates and is re-issued to the device on each boot. |
CVE-2026-50108 | High | 7.5 | — | 2026-06-12 | The Naxclow platform API that returns device relay registration details exposes a persistent credential without verifying that the requester is the legitimate device or owner. |
CVE-2026-50244 | Medium | 5.3 | — | 2026-06-12 | The Naxclow platform exposes a registration endpoint that accepts signed requests containing a batch prefix and an arbitrary caller-supplied account identifier, without validating any ownership relationship. |
CVE-2026-42932 | Medium | 5.3 | — | 2026-06-12 | Naxclow device identifiers use fixed manufacturing prefixes combined with sequential counters, producing a fully predictable and enumerable identifier space. |
CVE-2026-50099 | Medium | 4.6 | — | 2026-06-12 | During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware. |
Nimiq · 7 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46545 | High | 7.5 | — | 2026-06-10 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. |
CVE-2026-46541 | High | 7.5 | — | 2026-06-10 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. |
CVE-2026-46540 | Medium | 6.5 | — | 2026-06-10 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. |
CVE-2026-46539 | Medium | 5.9 | — | 2026-06-10 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. |
CVE-2026-46543 | Medium | 5.3 | — | 2026-06-10 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. |
CVE-2026-44505 | Medium | 5.3 | — | 2026-06-10 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. |
CVE-2026-46542 | Medium | 4.3 | — | 2026-06-10 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. |
Nuxt · 7 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53721 | High | 8.2 | — | 2026-06-12 | Nuxt is an open-source web development framework for Vue.js. |
CVE-2026-49993 | Medium | 5.7 | — | 2026-06-12 | Nuxt is an open-source web development framework for Vue.js. |
CVE-2026-53722 | Medium | 5.4 | — | 2026-06-12 | Nuxt is an open-source web development framework for Vue.js. |
CVE-2026-46342 | Medium | 5.4 | — | 2026-06-12 | Nuxt is an open-source web development framework for Vue.js. |
CVE-2026-45670 | Medium | 5.4 | — | 2026-06-12 | Nuxt is an open-source web development framework for Vue.js. |
CVE-2026-45669 | Medium | 5.4 | — | 2026-06-12 | Nuxt is an open-source web development framework for Vue.js. |
CVE-2026-47200 | Medium | 5.3 | — | 2026-06-12 | Nuxt is an open-source web development framework for Vue.js. |
Espressif · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45328 | Critical | 9.3 | — | 2026-06-10 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. |
CVE-2026-45541 | High | 7.5 | — | 2026-06-10 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. |
CVE-2026-45542 | High | 7.1 | — | 2026-06-10 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. |
CVE-2026-45329 | High | 7.1 | — | 2026-06-10 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. |
CVE-2026-45160 | Medium | 6.5 | — | 2026-06-10 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. |
CVE-2026-46532 | Medium | 4.6 | — | 2026-06-10 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. |
Eugeny · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48110 | High | 7.5 | — | 2026-06-10 | Russh is a Rust SSH client & server library. |
CVE-2026-46702 | High | 7.5 | — | 2026-06-10 | Russh is a Rust SSH client & server library. |
CVE-2026-46673 | High | 7.5 | — | 2026-06-10 | Russh is a Rust SSH client & server library. |
CVE-2026-48107 | Medium | 6.5 | — | 2026-06-10 | Russh is a Rust SSH client & server library. |
CVE-2026-48108 | Medium | 5.3 | — | 2026-06-10 | Russh is a Rust SSH client & server library. |
CVE-2026-46705 | Medium | 5.3 | — | 2026-06-10 | Russh is a Rust SSH client & server library. |
Gpac · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-55657 | High | 7.5 | — | 2026-06-09 | A NULL pointer dereference in the gf_odf_vvc_cfg_write_bs function (odf/descriptors.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. |
CVE-2025-52293 | High | 7.5 | — | 2026-06-09 | A segmentation violaton in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying crafted HEVC SPS data. |
CVE-2025-52292 | High | 7.5 | — | 2026-06-09 | A stack buffer overflow in the filein_process function (in_file.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. |
CVE-2025-55659 | Medium | 6.5 | — | 2026-06-09 | A NULL pointer dereference in the ctts_box_write function (isomedia/box_code_base.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. |
CVE-2025-55658 | Medium | 6.5 | — | 2026-06-09 | GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_opus_parse_packet_header function (media_tools/av_parsers.c). |
CVE-2025-55651 | Medium | 5.5 | — | 2026-06-09 | A NULL pointer dereference in the gf_isom_get_user_data_count function (isomedia/isom_read.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. |
Ibm · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7870 | High | 8.8 | — | 2026-06-11 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. |
CVE-2026-4870 | High | 7.5 | — | 2026-06-12 | IBM Qiskit SDK 0.43.0 through 2.5.0 could allow an attacker to trigger a segmentation fault leading to a denial of service due to uncontrolled recursion in the parser. |
CVE-2026-7787 | High | 7.5 | — | 2026-06-11 | IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references. |
CVE-2026-4096 | Medium | 6.5 | — | 2026-06-11 | IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. |
CVE-2026-3341 | Medium | 5.4 | — | 2026-06-11 | IBM Langflow Desktop 1.0.0 through 1.9.2 IBM Langflow is vulnerable to server-side request forgery (SSRF). |
CVE-2024-45636 | Medium | 4.1 | — | 2026-06-11 | IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileged user. |
Imagination Technologies · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-41157 | Critical | 9.8 | — | 2026-06-12 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger an out-of-bound write in the GPU user-space driver, leading to memory corruption and possible browser/GPU process crash. |
CVE-2026-34195 | High | 8.8 | — | 2026-06-12 | Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel. |
CVE-2026-41158 | High | 7.8 | — | 2026-06-12 | Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages. |
CVE-2026-22164 | High | 7.5 | — | 2026-06-08 | Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. |
CVE-2026-34194 | High | 7.1 | — | 2026-06-08 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of a mapping state maintained for a sparse memory allocation. |
CVE-2026-41155 | Medium | 5.5 | — | 2026-06-12 | An attacker could cooperatively pass data from one secure GPU process to another secure GPU process through shared secure memory allocations in the kernel module. |
Lenovo · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9045 | High | 7.8 | — | 2026-06-10 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privi… |
CVE-2026-8637 | High | 7.8 | — | 2026-06-10 | A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to execute arbitrary code with elevated privileges. |
CVE-2026-6090 | High | 7.0 | — | 2026-06-10 | A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges. |
CVE-2025-10238 | Medium | 6.7 | — | 2026-06-10 | During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM). |
CVE-2025-10237 | Medium | 6.7 | — | 2026-06-10 | During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions. |
CVE-2026-7516 | Medium | 4.3 | — | 2026-06-10 | A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow a website visited by the built-in browser to overwrite system clipboard contents. |
Nesquena · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49973 | Critical | 9.4 | — | 2026-06-11 | Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the _set_password parameter to the settings API endpoint without any… |
CVE-2026-49959 | High | 8.8 | — | 2026-06-09 | Hermes WebUI before version 0.51.311 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by placing malicious executable Git configuration in a workspace repository's .git/config… |
CVE-2026-49957 | High | 7.7 | — | 2026-06-09 | Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the SSH/remote terminal profile workspace r… |
CVE-2026-49956 | Medium | 6.5 | — | 2026-06-09 | Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the session search endpoint without active-profile filtering. |
CVE-2026-49955 | Medium | 5.3 | — | 2026-06-09 | Hermes WebUI before version 0.51.270 contains a resource exhaustion vulnerability that allows unauthenticated remote attackers to degrade service availability by repeatedly calling the passkey options endpoint without completing assertion. |
CVE-2026-49958 | Medium | 5.0 | — | 2026-06-09 | Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vulnerability in the git_discard function within api/workspace_git.py that allows attackers to delete files outside the configured workspace… |
Palo Alto Networks · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-0274 | Critical | 9.1 | — | 2026-06-10 | An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources. |
CVE-2026-0273 | High | 7.2 | — | 2026-06-10 | A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. |
CVE-2026-0272 | High | 7.2 | — | 2026-06-10 | A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions on the device with root privileges. |
CVE-2026-0269 | Medium | 5.7 | — | 2026-06-10 | A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a maliciously crafted packet. |
CVE-2026-0267 | Medium | 5.5 | — | 2026-06-10 | An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. |
CVE-2026-0266 | Medium | 4.8 | — | 2026-06-10 | A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface. |
Parse-community · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53726 | — | — | — | 2026-06-12 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. |
CVE-2026-53725 | — | — | — | 2026-06-12 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. |
CVE-2026-53724 | — | — | — | 2026-06-12 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. |
CVE-2026-50008 | — | — | — | 2026-06-12 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. |
CVE-2026-47248 | — | — | — | 2026-06-12 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. |
CVE-2026-47138 | — | — | — | 2026-06-12 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. |
Siemens · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46748 | High | 8.8 | — | 2026-06-09 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). |
CVE-2026-46746 | High | 8.8 | — | 2026-06-09 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). |
CVE-2026-46749 | High | 7.5 | — | 2026-06-09 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). |
CVE-2026-24349 | High | 7.1 | — | 2026-06-09 | A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All… |
CVE-2025-40808 | Medium | 6.1 | — | 2026-06-09 | A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versio… |
CVE-2026-46747 | Medium | 4.3 | — | 2026-06-09 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). |
Amd · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-28237 | Medium | 5.5 | — | 2026-06-09 | Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability. |
CVE-2026-0466 | Medium | 5.5 | — | 2026-06-09 | Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service. |
CVE-2024-21944 | Medium | 5.3 | — | 2026-06-10 | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially ov… |
CVE-2026-40677 | — | — | — | 2026-06-12 | The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution. |
CVE-2025-54509 | — | — | — | 2026-06-09 | Improper access control for register interface in the input-output memory management unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD secure processor (ASP) potentially resulting in loss of integrity. |
Checkmk · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8833 | Medium | 5.4 | — | 2026-06-08 | Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an authenticated user to bypass URL validation and inject malicious URLs such as jav… |
CVE-2026-7186 | Medium | 5.4 | — | 2026-06-08 | Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows a user with dashboard editing permissions to store a URL with a dangerous URI scheme such as javascript: that… |
CVE-2026-7765 | Medium | 5.3 | — | 2026-06-08 | Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dash… |
CVE-2026-9549 | Medium | 4.8 | — | 2026-06-08 | Stored cross-site scripting in the service discovery active check output in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an administrator who can configure active or custom checks to inject malicious HTML or JavaSc… |
CVE-2026-8078 | Medium | 4.8 | — | 2026-06-08 | Stored cross-site scripting in the global settings change log in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an administrator who can change global settings to store malicious HTML or JavaScript in changelog messa… |
Chroma · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45833 | High | 8.8 | — | 2026-06-12 | A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the … |
CVE-2026-45832 | High | 8.8 | — | 2026-06-12 | All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization controls by using the V1 endpoints. |
CVE-2026-45831 | High | 8.8 | — | 2026-06-12 | The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission a… |
CVE-2026-45830 | High | 8.8 | — | 2026-06-12 | A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belon… |
CVE-2026-8828 | — | — | — | 2026-06-12 | A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong t… |
Jelmer · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-42305 | High | 8.8 | — | 2026-06-10 | Dulwich is a pure-Python implementation of the Git file formats and protocols. |
CVE-2026-52726 | High | 7.5 | — | 2026-06-10 | Dulwich is a pure-Python implementation of the Git file formats and protocols. |
CVE-2026-47734 | Medium | 5.7 | — | 2026-06-10 | Dulwich is a pure-Python implementation of the Git file formats and protocols. |
CVE-2026-47712 | Low | 3.3 | — | 2026-06-10 | Dulwich is a pure-Python implementation of the Git file formats and protocols. |
CVE-2026-42563 | — | — | — | 2026-06-10 | Dulwich is a pure-Python implementation of the Git file formats and protocols. |
Kovidgoyal · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-42850 | High | 8.8 | — | 2026-06-12 | Kitty is a cross-platform GPU based terminal. |
CVE-2026-54057 | High | 7.8 | — | 2026-06-12 | Kitty is a cross-platform GPU based terminal. |
CVE-2026-42851 | High | 7.8 | — | 2026-06-12 | Kitty is a cross-platform GPU based terminal. |
CVE-2026-54056 | High | 7.6 | — | 2026-06-12 | Kitty is a cross-platform GPU based terminal. |
CVE-2026-54055 | Medium | 5.0 | — | 2026-06-12 | Kitty is a cross-platform GPU based terminal. |
Macwarrior · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45060 | Critical | 9.8 | — | 2026-06-11 | ClipBucket v5 is an open source video sharing platform. |
CVE-2026-42846 | Critical | 9.8 | — | 2026-06-11 | ClipBucket v5 is an open source video sharing platform. |
CVE-2026-45418 | High | 8.8 | — | 2026-06-11 | ClipBucket v5 is an open source video sharing platform. |
CVE-2026-47238 | Medium | 6.5 | — | 2026-06-11 | ClipBucket v5 is an open source video sharing platform. |
CVE-2026-49482 | Medium | 4.3 | — | 2026-06-12 | ClipBucket v5 is an open source video sharing platform. |
Nlnet Labs · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10846 | High | 7.5 | — | 2026-06-10 | NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. |
CVE-2026-49235 | High | 7.5 | — | 2026-06-08 | When Routinator encounters a file via RRDP using a specifically crafted Document Type Definition, Routinator crashes. |
CVE-2026-49234 | High | 7.5 | — | 2026-06-08 | When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes. |
CVE-2026-49233 | High | 7.5 | — | 2026-06-08 | Routinator does not properly check the module component of rsync URIs, which are used to create the file system paths for the Routinator cache. |
CVE-2026-49232 | — | — | — | 2026-06-08 | Routinator exits on any error when accepting incoming HTTP or RTR connections, including ones it can recover from such as running out of file descriptors. |
Openbullet · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-25555 | Critical | 9.8 | — | 2026-06-08 | OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attackers to gain admin access by supplying an empty X-Api-Key header value. |
CVE-2026-25856 | High | 8.8 | — | 2026-06-08 | OpenBullet2 through version 0.3.2 contains an authenticated remote code execution vulnerability that allows authenticated users to execute arbitrary C# code on the server host by creating or modifying job configurations. |
CVE-2026-25855 | High | 8.8 | — | 2026-06-08 | OpenBullet2 through version 0.3.2 contains a remote code execution vulnerability that allows authenticated users to execute arbitrary commands by uploading script files (.bat.ps1.sh) through the FileProxySource proxy loading feature. |
CVE-2026-25559 | High | 8.8 | — | 2026-06-08 | OpenBullet2 through version 0.3.2 contains a path traversal vulnerability in the wordlist endpoint that allows authenticated attackers to perform arbitrary file read, write, and delete operations by supplying unsanitized absolute paths to… |
CVE-2026-39908 | Medium | 6.5 | — | 2026-06-08 | OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers to capture the NTLMv2 hash of the process user by configuring a job proxy source with a UNC path pointing to an attack… |
Ubiquiti Inc · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47370 | Critical | 9.9 | — | 2026-06-12 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Command Injection within such UniFi OS devices or instances. |
CVE-2026-47369 | Critical | 9.9 | — | 2026-06-12 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances. |
CVE-2026-47367 | Critical | 9.9 | — | 2026-06-12 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device. |
CVE-2026-47368 | High | 8.6 | — | 2026-06-12 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or instances. |
CVE-2026-48610 | High | 8.1 | — | 2026-06-12 | Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices. |
Vim · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47162 | High | 8.8 | — | 2026-06-11 | Vim is an open source, command line text editor. |
CVE-2026-52859 | High | 8.2 | — | 2026-06-11 | Vim is an open source, command line text editor. |
CVE-2026-52860 | High | 7.8 | — | 2026-06-11 | Vim is an open source, command line text editor. |
CVE-2026-52858 | High | 7.8 | — | 2026-06-11 | Vim is an open source, command line text editor. |
CVE-2026-47167 | Medium | 5.3 | — | 2026-06-11 | Vim is an open source, command line text editor. |
Aws · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11393 | Critical | 9.0 | — | 2026-06-08 | Improper neutralization of triple-quote characters during Python code generation in AgentCore CLI before v0.14.2 might allow an authenticated remote threat actor to execute arbitrary code on AWS AgentCore Runtime under the imported agent's… |
CVE-2026-12043 | High | 8.8 | — | 2026-06-12 | Improper handling of HPACK dynamic table size updates in the AWS Common Runtime aws-c-http library might allow a remote threat actor operating a server to cause memory corruption on a connecting client application, potentially leading to a… |
CVE-2026-11417 | High | 7.3 | — | 2026-06-10 | OS command injection in the NodejsFunction local bundling pipeline in aws-cdk-lib before 2.245.0 (2.246.0 on Windows) might allow an actor who controls the value of one or more bundling properties (externalModules, define, loader, inject… |
CVE-2026-10740 | Medium | 5.3 | — | 2026-06-10 | Unbounded memory allocation in the CRYPTO frame reassembler in s2n-quic before 1.8.2 may allow an unauthenticated remote actor to cause a denial of service (degraded availability) by sending crafted QUIC Initial packets. |
Dell · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44275 | Medium | 6.3 | — | 2026-06-09 | Dell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. |
CVE-2026-41116 | Medium | 6.3 | — | 2026-06-09 | Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. |
CVE-2026-28262 | Medium | 6.0 | — | 2026-06-09 | Dell iDRAC Tools, versions prior to 11.4.1.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. |
CVE-2026-40639 | Medium | 5.7 | — | 2026-06-09 | Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. |
Devolutions · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10786 | Medium | 6.5 | — | 2026-06-08 | Improper access control in the ticketing integration settings in Devolutions Server allows an authenticated low-privileged user to obtain cleartext credentials for configured ticketing integrations via a crafted API request. |
CVE-2026-10544 | Medium | 6.5 | — | 2026-06-08 | Improper neutralization of special elements in the built-in PAM provider password rotation templates in Devolutions Server allows an authenticated user with write access to a vault to execute arbitrary commands on the systems managed by th… |
CVE-2026-8694 | Medium | 5.3 | — | 2026-06-12 | Improper access control in Devolutions PowerShell Universal 2026.1.7 and earlier allows an unauthenticated remote attacker to obtain the OpenAPI specification of user-defined REST endpoints. |
CVE-2026-10787 | Medium | 4.3 | — | 2026-06-08 | Missing authorization in the deleted user groups API in Devolutions Server allows an authenticated low-privileged user to enumerate metadata of deleted user groups via a crafted API request. |
Iei Integration Corp · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11845 | High | 7.2 | — | 2026-06-12 | The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, allowing privileged remote attackers to inject arbitrary OS commands and execute them on the device. |
CVE-2026-11848 | Medium | 5.3 | — | 2026-06-12 | The iRM-IEI Remote Management developed by IEI Integration Corp has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to exploit a specific functionality to obtain partial system configuration information. |
CVE-2026-11844 | Medium | 4.9 | — | 2026-06-12 | The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, allowing privileged remote attackers to access files outside the intended directory scope. |
CVE-2026-11847 | Medium | 4.3 | — | 2026-06-12 | The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path Traversal vulnerability, allowing authenticated remote attackers to exploit this vulnerability to create directories in unintended system paths. |
Kebev2v · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53474 | Critical | 9.6 | — | 2026-06-10 | A flaw was found in migration-planner. |
CVE-2026-53471 | Critical | 9.6 | — | 2026-06-10 | A flaw was found in migration-planner. |
CVE-2026-53470 | Critical | 9.6 | — | 2026-06-10 | A flaw was found in migration-planner. |
CVE-2026-53469 | Critical | 9.1 | — | 2026-06-10 | A flaw was found in migration-planner. |
Phpbb · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48611 | Critical | 9.8 | — | 2026-06-12 | Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations. |
CVE-2026-48612 | High | 8.0 | — | 2026-06-12 | Improper state verification in the OAuth implementation could allow an attacker to manipulate the authentication flow and cause a victim’s account to be linked to an attacker-controlled account. |
CVE-2026-47366 | High | 7.2 | — | 2026-06-12 | Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticated administrator to grant permissions beyond the level authorized for their account, resulting in p… |
CVE-2026-48613 | Medium | 5.9 | — | 2026-06-12 | SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL queries. |
Svelte · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-42570 | High | 7.5 | — | 2026-06-09 | Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. |
CVE-2026-42567 | High | 7.5 | — | 2026-06-09 | Svelte is a performance oriented web framework. |
CVE-2026-42599 | Medium | 6.1 | — | 2026-06-09 | Svelte is a performance oriented web framework. |
CVE-2026-42573 | Medium | 6.1 | — | 2026-06-09 | Svelte is a performance oriented web framework. |
Actualbudget · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-43872 | — | — | — | 2026-06-12 | Actual is an open-source personal finance application. |
CVE-2026-42890 | — | — | — | 2026-06-12 | Actual is an open-source personal finance application. |
CVE-2026-42604 | — | — | — | 2026-06-12 | Actual is a local-first personal finance tool. |
Apptha · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2017-20249 | High | 8.2 | — | 2026-06-09 | Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter. |
CVE-2017-20247 | High | 8.2 | — | 2026-06-09 | WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid parameter. |
CVE-2017-20250 | High | 7.5 | — | 2026-06-09 | Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. |
Arodland · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9638 | High | 7.5 | — | 2026-06-12 | Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. |
CVE-2017-20240 | Medium | 5.9 | — | 2026-06-12 | Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks. |
CVE-2026-9641 | Medium | 5.3 | — | 2026-06-12 | Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations. |
Boxlite-ai · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46695 | Critical | 10.0 | — | 2026-06-10 | Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. |
CVE-2026-46703 | Critical | 9.6 | — | 2026-06-10 | Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. |
CVE-2026-47213 | Medium | 6.5 | — | 2026-06-10 | Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. |
Buddypress · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53673 | High | 8.1 | — | 2026-06-10 | BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the messages REST API that allows authenticated attackers to access arbitrary private message threads by supplying a user_id parameter in the request. |
CVE-2026-53674 | High | 7.1 | — | 2026-06-10 | BuddyPress 14.4.0 contains a regular expression injection vulnerability in the activity mention resolver that, when username compatibility mode is enabled, allows attackers to manipulate a REGEXP database clause by crafting mention names c… |
CVE-2026-53675 | Medium | 4.3 | — | 2026-06-10 | BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the friends REST API that allows any authenticated attacker to enumerate another user's complete friend list. |
Cap-go · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53981 | High | 7.6 | — | 2026-06-12 | Cap-go prior to 12.128.2 contains an account takeover vulnerability in its email change mechanism that allows an attacker with temporary authenticated session access to change the registered email address without re-authentication such as… |
CVE-2026-53982 | Medium | 6.5 | — | 2026-06-12 | Cap-go Console < 12.28.2 contains a denial-of-service vulnerability in its account deletion flow that allows an attacker to block authentication and onboarding functions by triggering account deletion while a device identifier is linked to… |
CVE-2026-53867 | Medium | 4.3 | — | 2026-06-12 | Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. |
Cerebrate · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53912 | — | — | — | 2026-06-11 | Cerebrate before version 1.37 exposed credential material from self-registration requests. |
CVE-2026-53911 | — | — | — | 2026-06-11 | Cerebrate before version 1.37 allowed the id primary key field to be supplied through request input during CRUD edit operations and certain custom entity patching flows. |
CVE-2026-53901 | — | — | — | 2026-06-11 | Cerebrate before version 1.37 contains a mass-assignment vulnerability in the generic CRUD add path. |
Checkpoint · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50751 | Critical | 9.3 | KEV | 2026-06-08 | A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a… |
CVE-2026-10847 | High | 7.8 | — | 2026-06-11 | A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. |
CVE-2026-50752 | High | 7.4 | — | 2026-06-08 | A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certifica… |
Code-projects · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11490 | High | 7.3 | — | 2026-06-08 | A vulnerability was determined in code-projects Online Music Site 1.0. |
CVE-2026-11489 | High | 7.3 | — | 2026-06-08 | A vulnerability was found in code-projects Online Music Site 1.0. |
CVE-2026-11488 | High | 7.3 | — | 2026-06-08 | A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. |
D-link · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11497 | Medium | 5.3 | — | 2026-06-08 | A vulnerability has been found in D-Link DCS-5615 1.01.00. |
CVE-2026-11492 | Medium | 4.3 | — | 2026-06-08 | A security flaw has been discovered in D-Link DIR-823G 1.0.2B05. |
CVE-2026-11555 | Low | 3.7 | — | 2026-06-08 | A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. |
Dahua · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-29116 | — | — | — | 2026-06-10 | A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpectedly, resulting in a denial of servic… |
CVE-2026-29115 | — | — | — | 2026-06-10 | A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpectedly, resulting in a denial of service. |
CVE-2026-29114 | — | — | — | 2026-06-10 | A vulnerability has been found in some Dahua products. |
Fortinet · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-25089 | Critical | 9.8 | KEV | 2026-06-09 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5… |
CVE-2025-67862 | Medium | 6.7 | — | 2026-06-09 | An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiO… |
CVE-2026-49938 | Medium | 6.5 | — | 2026-06-09 | A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow attacker to improper access control via <insert attack vector here> |
Guzzle · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53723 | Medium | 5.8 | — | 2026-06-11 | Guzzle Services provides an implementation of the Guzzle Command library that uses Guzzle service descriptions to describe web services, serialize requests, and parse responses into easy to use model structures. |
CVE-2026-49214 | Medium | 5.3 | — | 2026-06-11 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. |
CVE-2026-48998 | Medium | 5.3 | — | 2026-06-11 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. |
Image-size · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-71330 | High | 7.5 | — | 2026-06-10 | image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. |
CVE-2025-71329 | High | 7.5 | — | 2026-06-10 | image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in a recognized box-ty… |
CVE-2025-71319 | High | 7.5 | — | 2026-06-09 | image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in a recognized box-ty… |
Imvks786 · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11530 | High | 7.3 | — | 2026-06-08 | A vulnerability was identified in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. |
CVE-2026-11533 | Medium | 5.4 | — | 2026-06-08 | A security vulnerability has been detected in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. |
CVE-2026-11534 | Low | 3.5 | — | 2026-06-08 | A vulnerability was detected in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. |
Ivanti · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10520 | Critical | 10.0 | KEV | 2026-06-09 | An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution |
CVE-2026-10523 | Critical | 9.9 | — | 2026-06-09 | An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access |
CVE-2026-10727 | High | 7.2 | — | 2026-06-09 | An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root |
Kubev2v · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53476 | Critical | 9.6 | — | 2026-06-10 | A flaw was found in assisted-migration-agent. |
CVE-2026-53475 | Critical | 9.3 | — | 2026-06-10 | A flaw was found in assisted-migration-agent. |
CVE-2026-53473 | High | 7.3 | — | 2026-06-10 | A flaw was found in migration-planner-ui-app. |
M2team · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47223 | Medium | 5.4 | — | 2026-06-12 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. |
CVE-2026-47222 | Medium | 5.4 | — | 2026-06-12 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. |
CVE-2026-47224 | Medium | 4.3 | — | 2026-06-12 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. |
Openvpn · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11604 | — | — | — | 2026-06-10 | An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption via a crafted data… |
CVE-2026-40215 | — | — | — | 2026-06-08 | A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion. |
CVE-2026-35058 | — | — | — | 2026-06-08 | Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially… |
Pevans · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50638 | Critical | 9.1 | — | 2026-06-10 | Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections. |
CVE-2026-50637 | High | 8.2 | — | 2026-06-10 | Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections. |
CVE-2026-50639 | Medium | 6.5 | — | 2026-06-10 | Metrics::Any::Adapter::SignalFx versions before 0.04 for Perl does not protect against metric injections. |
Rahulbhangale · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8910 | Medium | 6.1 | — | 2026-06-09 | The WP Emoticon Rating plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. |
CVE-2026-8907 | Medium | 6.1 | — | 2026-06-09 | The WP-Ultimate-Map plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1. |
CVE-2026-8909 | Medium | 4.3 | — | 2026-06-09 | The WpMobi plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.0.3. |
Steipete · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53782 | High | 7.4 | — | 2026-06-11 | Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS feed to direct the host to fetch transcript content from loopback addresses, link-local addresses, RFC 1918 privat… |
CVE-2026-49949 | Medium | 5.3 | — | 2026-06-11 | CodexBar before 0.33.0 contains a credential forwarding vulnerability that allows network-adjacent attackers to intercept sensitive credentials by issuing cross-origin or HTTP-downgrade redirects to the shared ProviderHTTPClient transport. |
CVE-2026-53781 | Medium | 4.3 | — | 2026-06-11 | Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote attackers to cause disk exhaustion by serving media responses that bypass the enforced size limit through missing or misreported Content-Length headers… |
Totolink · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11620 | Medium | 5.3 | — | 2026-06-09 | A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. |
CVE-2026-11554 | Medium | 4.3 | — | 2026-06-08 | A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747. |
CVE-2026-11494 | Medium | 4.3 | — | 2026-06-08 | A security vulnerability has been detected in TOTOLINK AC1200 T8 4.1.5cu.8611. |
Vmware · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-41724 | High | 8.0 | — | 2026-06-08 | VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in… |
CVE-2026-41723 | High | 8.0 | — | 2026-06-08 | VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in… |
CVE-2026-41722 | High | 8.0 | — | 2026-06-08 | VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in… |
Zoom · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53408 | High | 8.1 | — | 2026-06-12 | Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access. |
CVE-2026-53407 | High | 8.1 | — | 2026-06-12 | Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access. |
CVE-2026-53406 | High | 7.8 | — | 2026-06-12 | Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access. |
Bludit · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46656 | High | 8.8 | — | 2026-06-08 | Bludit is a content management system. |
CVE-2026-46657 | High | 7.1 | — | 2026-06-08 | Bludit is a content management system. |
Brian-ruf · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-34417 | Medium | 6.1 | — | 2026-06-09 | OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious content through the project request parameter in oscal-for… |
CVE-2026-34416 | Medium | 6.1 | — | 2026-06-09 | OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious input through the project request parameter. |
Brickcom · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50245 | High | 7.7 | — | 2026-06-11 | Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still images from the camera feed. |
CVE-2026-50005 | High | 7.7 | — | 2026-06-11 | Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to silently access camera feeds. |
Code16 · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44692 | High | 7.7 | — | 2026-06-10 | Sharp is a content management framework built for Laravel as a package. |
CVE-2026-53634 | Medium | 4.3 | — | 2026-06-10 | Sharp is a content management framework built for Laravel as a package. |
Dana Powers · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10143 | High | 7.5 | — | 2026-06-10 | kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by supplying an excessively large iteration cou… |
CVE-2026-10142 | High | 7.5 | — | 2026-06-10 | kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by sending a crafted 4-byte frame length v… |
Debian · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11853 | Medium | 6.5 | — | 2026-06-10 | Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. |
CVE-2026-11852 | Medium | 6.5 | — | 2026-06-10 | Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. |
Docker · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-42306 | High | 7.2 | — | 2026-06-12 | Moby is an open source container framework. |
CVE-2026-41568 | Medium | 6.1 | — | 2026-06-12 | Moby is an open source container framework. |
Ellucian · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-32856 | Medium | 6.1 | — | 2026-06-09 | Ellucian Banner Self-Service before the April T2 release (2025-04-23) contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting unsaniti… |
CVE-2026-47106 | Medium | 5.4 | — | 2026-06-09 | Ellucian Banner Self-Service before the April T2 release (2025-04-23) contains a stored cross-site scripting vulnerability in the course search functionality that allows authenticated Banner ERP users to inject malicious payloads into facu… |
Everpure · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6445 | — | — | — | 2026-06-09 | A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges. |
CVE-2026-6444 | — | — | — | 2026-06-09 | A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges. |
Fedify-dev · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50131 | High | 8.6 | — | 2026-06-10 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. |
CVE-2026-42462 | High | 7.0 | — | 2026-06-10 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. |
Flux159 · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46519 | High | 8.8 | — | 2026-06-11 | mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. |
CVE-2026-47250 | Medium | 6.1 | — | 2026-06-11 | mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. |
Internlm · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46517 | High | 7.8 | — | 2026-06-10 | LMDeploy is a toolkit for compressing, deploying, and serving large language models. |
CVE-2026-46432 | High | 7.8 | — | 2026-06-10 | LMDeploy is a toolkit for compressing, deploying, and serving large language models. |
Jishenghua · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11467 | Medium | 5.4 | — | 2026-06-08 | A security vulnerability has been detected in jishenghua jshERP up to 3.6. |
CVE-2026-11469 | Medium | 4.7 | — | 2026-06-08 | A flaw has been found in jishenghua jshERP up to 3.6. |
Knplabs · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46683 | — | — | — | 2026-06-10 | Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. |
CVE-2026-46643 | — | — | — | 2026-06-10 | Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. |
Koel · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47260 | High | 7.7 | — | 2026-06-12 | Koel is a free, open-source music streaming solution. |
CVE-2026-50552 | Medium | 6.3 | — | 2026-06-12 | Koel is a free, open-source music streaming solution. |
Libp2p · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46679 | High | 7.5 | — | 2026-06-10 | libp2p is a JavaScript Implementation of libp2p networking stack. |
CVE-2026-45783 | High | 7.5 | — | 2026-06-10 | libp2p is a JavaScript Implementation of libp2p networking stack. |
Limesurvey · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50636 | High | 8.8 | — | 2026-06-09 | The RemoteControl API methods invite_participants and remind_participants pass a caller-supplied token-ID array into TokenDynamic::findUninvited(), which concatenates the values directly into a tid IN ('...') SQL clause without parameteriz… |
CVE-2026-50635 | High | 8.8 | — | 2026-06-09 | LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. |
Lingdojo · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48547 | High | 7.3 | — | 2026-06-11 | KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes fields of patchNotesData.json, which are… |
CVE-2026-48546 | High | 7.3 | — | 2026-06-11 | KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js vm.runInNewContext() sandbox context in the i… |
Logseq · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9279 | — | — | — | 2026-06-09 | Logseq exposes an IPC handler that allows the renderer process to execute shell commands. |
CVE-2026-47900 | — | — | — | 2026-06-09 | Logseq is vulnerable to a stored cross-site scripting (XSS). |
Ninenines · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-43966 | — | — | — | 2026-06-08 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in ninenines cowlib allows HTTP response splitting via non-VCHAR bytes in structured-fields string values. |
CVE-2026-43974 | — | — | — | 2026-06-08 | Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTTP server to force the client into raw protocol mode via an unsolicited 101 Switching Protocols response. |
Nvidia · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-24181 | High | 7.3 | — | 2026-06-09 | NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. |
CVE-2026-24180 | High | 7.3 | — | 2026-06-09 | NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. |
Qnap Systems Inc. · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-59382 | — | — | — | 2026-06-10 | QTS, QuTS hero, QuTScloud are not affected. |
CVE-2025-58468 | — | — | — | 2026-06-10 | A cross-site request forgery (CSRF) vulnerability has been reported to affect Notification Center. |
Quantumcloud · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53742 | Medium | 5.4 | — | 2026-06-10 | Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. |
CVE-2026-53741 | Medium | 5.4 | — | 2026-06-10 | Simple Link Directory through 9.0.4 interpolates the sld_no_results_found option into a JavaScript string literal without encoding. |
Raszi · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49982 | High | 8.2 | — | 2026-06-11 | tmp is a temporary file and directory creator for node.js. |
CVE-2026-44705 | High | 8.2 | — | 2026-06-11 | tmp is a temporary file and directory creator for node.js. |
Rikyoz · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45384 | Medium | 6.1 | — | 2026-06-10 | bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. |
CVE-2026-45380 | Low | 3.6 | — | 2026-06-10 | bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. |
Solidinvoice · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46622 | High | 8.1 | — | 2026-06-11 | SolidInvoice is an open-source invoicing platform. |
CVE-2026-46489 | High | 8.1 | — | 2026-06-11 | SolidInvoice is an open-source invoicing platform. |
Sqlfluff · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46374 | High | 7.5 | — | 2026-06-09 | SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. |
CVE-2026-46373 | High | 7.5 | — | 2026-06-09 | SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. |
Sqlite · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11824 | High | 7.8 | — | 2026-06-09 | SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation pa… |
CVE-2026-11822 | High | 7.8 | — | 2026-06-09 | SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malfo… |
Systerel · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9758 | High | 7.3 | — | 2026-06-10 | Improper comparison with the certificates trusted list in S2OPC allows an attacker well-formed untrusted certificate to be considered trusted |
CVE-2026-6899 | Medium | 5.6 | — | 2026-06-09 | Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto cryptographic wrapper of S2OPC library. |
Typesense · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47225 | — | — | — | 2026-06-12 | Typesense is a fast, typo-tolerant search engine. |
CVE-2026-47216 | — | — | — | 2026-06-12 | Typesense is a fast, typo-tolerant search engine. |
Umbraco · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46616 | Medium | 5.4 | — | 2026-06-10 | Umbraco is an ASP.NET CMS. |
CVE-2026-46609 | Medium | 4.6 | — | 2026-06-10 | Umbraco is an ASP.NET CMS. |
Utt · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11517 | High | 8.8 | — | 2026-06-08 | A vulnerability was determined in UTT HiPER 2610G up to 3.0.0-171107. |
CVE-2026-11516 | Medium | 5.5 | — | 2026-06-08 | A vulnerability was found in UTT HiPER 2610G up to 3.0.0-171107. |
Vivo · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12058 | — | — | — | 2026-06-12 | The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed. |
CVE-2026-11535 | — | — | — | 2026-06-12 | An unauthorized access vulnerability exists in the PcSuite APP. |
Weaverlancegmailcom · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10738 | Medium | 6.4 | — | 2026-06-09 | The jQuery Hover Footnotes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Footnote Qualifier ('{{...}}' Syntax) in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. |
CVE-2026-10553 | Medium | 4.3 | — | 2026-06-09 | The jQuery Hover Footnotes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. |
Weblateorg · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50127 | Medium | 5.9 | — | 2026-06-10 | Weblate is a web based localization tool. |
CVE-2026-45106 | Medium | 4.6 | — | 2026-06-10 | Weblate is a web based localization tool. |
Wedevs · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2022-47150 | Medium | 4.3 | — | 2026-06-11 | Cross-Site request forgery (CSRF) vulnerability in weDevs WooCommerce Conversion Tracking allows Cross Site Request Forgery. |
CVE-2026-4058 | Medium | 4.3 | — | 2026-06-09 | The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the user_subscription_canc… |
Wow-company · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2017-20245 | High | 8.2 | — | 2026-06-09 | Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by exploiting the unescaped 'idsignup' POST parameter. |
CVE-2017-20244 | High | 8.2 | — | 2026-06-09 | Wow Forms WordPress Plugin version 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to read arbitrary database information by exploiting an unescaped POST parameter. |
Wp Travel Kit · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2024-58349 | Critical | 9.8 | — | 2026-06-08 | WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient validation in the theme's upload functionality. |
CVE-2023-54352 | Critical | 9.8 | — | 2026-06-08 | WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by uploading malicious files to the theme directory. |
Wpzoom · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49069 | High | 7.1 | — | 2026-06-10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM Portfolio allows Reflected XSS. |
CVE-2026-3011 | Medium | 6.4 | — | 2026-06-08 | The Recipe Card Blocks Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the recipe block's 'summary' and 'notes' attributes in all versions up to, and including, 3.4.13. |
Yarbo · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10557 | Critical | 9.8 | — | 2026-06-12 | The Yarbo Android and iOS applications contain hard-coded MQTT broker credentials that are identical for all users and all devices. |
CVE-2026-7368 | High | 8.1 | — | 2026-06-12 | The Yarbo cloud does not enforce per-device or per-user authorization. |
Yoast · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53740 | Medium | 5.4 | — | 2026-06-10 | Yoast Duplicate Post through 4.6 inserts an unescaped post title and permalink into the Classic Editor scheduled republish notice. |
CVE-2026-53739 | Medium | 4.3 | — | 2026-06-10 | Yoast Duplicate Post through 4.6 contains a cross-site request forgery vulnerability in the duplicate_post_dismiss_notice handler, which verifies no nonce or capability. |
Zephyrproject · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-5067 | Critical | 9.8 | — | 2026-06-09 | A remote, unauthenticated attacker can trigger memory corruption in Zephyr's HTTP server WebSocket upgrade path by sending a crafted Sec-WebSocket-Key header. |
CVE-2026-5068 | High | 7.6 | — | 2026-06-09 | A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host during L2CAP LE CoC SDU reassembly. |
100plugins · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-2827 | Medium | 4.7 | — | 2026-06-11 | The Open User Map PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'oum_location_notification' parameter in versions up to, and including, 1.4.31 due to insufficient input sanitization and output escaping. |
2winfactor · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9125 | Medium | 6.4 | — | 2026-06-12 | The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_url' parameter of the [presto_player_overlay] shortcode in versions up to, and including, 4.2.0 This is due to insufficient input sanitizatio… |
360crest · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10024 | Medium | 6.4 | — | 2026-06-09 | The TinyMCE shortcode Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'btnrel' Shortcode Attribute in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. |
Abb · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-7064 | Medium | 6.6 | — | 2026-06-11 | Authentication bypass by primary weakness vulnerability in ABB Freelance. |
Adguardteam · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-41448 | Critical | 9.4 | — | 2026-06-08 | AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a path traversal sequence in the Admin-Token cookie, exploiting… |
Agenticmail · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50287 | — | — | — | 2026-06-12 | AgenticMail gives AI agents real email addresses and phone numbers. |
Aix-db · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8335 | — | — | — | 2026-06-10 | A missing authentication check on the Aix‑DB "/llm/process_llm_out" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks the token validation enforced on all ot… |
Amasty · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53787 | Critical | 9.8 | — | 2026-06-12 | Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary file upload vulnerability that allows unauthenticated attackers to write arbitrary files to the store's media directory by submitting files of… |
Amentotech · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-6254 | Critical | 9.8 | — | 2026-06-10 | The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. |
Andrewabarber · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8841 | Medium | 6.4 | — | 2026-06-09 | The Extra Settings for RocketChat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rocketchat' shortcode's 'title' attribute in versions up to, and including, 0.1. |
Apify · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46497 | — | — | — | 2026-06-10 | Crawlee is a web scraping and browser automation library. |
Arm · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-10263 | Critical | 9.1 | — | 2026-06-09 | Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow… |
Arnasdon · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49141 | High | 7.1 | — | 2026-06-08 | WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticated attackers to access and modify contacts belonging to other tenants by supplying an arbitrary caller-controlled c… |
Authzed · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46668 | — | — | — | 2026-06-10 | SpiceDB is an open source database system for creating and managing security-critical application permissions. |
Background-image-cropper · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2024-58348 | Critical | 9.8 | — | 2026-06-08 | WordPress Background Image Cropper version 1.2 contains a remote code execution vulnerability that allows unauthenticated attackers to upload arbitrary files by accessing the ups.php endpoint. |
Baramundi Software · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8863 | High | 7.8 | — | 2026-06-09 | Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. |
Başarsoft Information Technologies Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11839 | Critical | 9.9 | — | 2026-06-11 | Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. |
Başbelen Group Food Cafe Businesses Industry And Trade Ltd. Co. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6853 | Critical | 9.8 | — | 2026-06-12 | Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe Businesses Industry and Trade Ltd. |
Beardev · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-42647 | Critical | 9.3 | — | 2026-06-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beardev JoomSport allows Blind SQL Injection. |
Berocket · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2022-45813 | Medium | 5.4 | — | 2026-06-11 | Missing Authorization vulnerability in BeRocket Advanced AJAX Product Filters allows Exploiting Incorrectly Configured Access Control Security Levels. |
Bolt · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11511 | Low | 3.5 | — | 2026-06-08 | A weakness has been identified in Bolt CMS up to 3.7.5. |
Bplugins · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53736 | Medium | 4.3 | — | 2026-06-10 | Easy Twitter Feeds before 1.2.13 contains a cross-site request forgery vulnerability in the duplicate_post action handler that lacks nonce verification. |
Brechtvds · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9019 | Medium | 6.4 | — | 2026-06-10 | The Easy Image Collage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'grid[properties][borderColor]' and 'grid[images][N][attachment_url]' Parameters in all versions up to, and including, 1.13.6 due to insufficient… |
Brooks24 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2022-50953 | Medium | 6.2 | — | 2026-06-08 | WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting null byte injection in the path parameter. |
Brthumar1959 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11603 | Medium | 6.1 | — | 2026-06-09 | The Product Filter Widget for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'args[filterFormArray]' Parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and outpu… |
Camaleon Cms · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10715 | — | — | — | 2026-06-12 | Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. |
Capgo · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53868 | High | 7.5 | — | 2026-06-12 | Capgo before 12.128.2 contains a denial of service vulnerability allowing attackers to register accounts using arbitrary email addresses without verification, then initiate deletion to lock emails in pending deletion state. |
Cellopoint · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12059 | High | 8.8 | — | 2026-06-12 | The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass the enforced command restrictions and execute operating system commands outside the original… |
Chengdu Everbrite Network Technology · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11480 | Medium | 6.3 | — | 2026-06-08 | A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. |
Cloud Foundry · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-41005 | Critical | 9.0 | — | 2026-06-11 | Cloud Foundry UAA incorrectly treated XML encryption to the Service Provider (confidentiality) as a substitute for XML signatures from the Identity Provider (authenticity) in two SAML flows: the OAuth 2.0 SAML2 bearer grant (token endpoint… |
Cloud-hypervisor · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45782 | — | — | — | 2026-06-10 | Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. |
Commenthol · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46492 | High | 7.2 | — | 2026-06-09 | md-fileserver allows for local viewing of markdown files in a browser. |
Concrete Cms · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10721 | — | — | — | 2026-06-10 | Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the in Permission, Cache, and Search components. |
Connectwise · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11596 | Medium | 4.7 | — | 2026-06-10 | In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the ability to specify a token expiration duration beyond the inten… |
Contrid · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-3018 | High | 7.5 | — | 2026-06-10 | The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘wpmlsubscriber_id’ parameter in all versions up to, and including, 4.13 due to insufficient escaping on the user supplied parameter and lack of suffici… |
Creativethemeshq · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8365 | High | 8.8 | — | 2026-06-09 | The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksy_meta' REST API field and the V200 database migration in versions up to and including 2.1.35. |
Dalibo · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11945 | Medium | 6.4 | — | 2026-06-11 | PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a JSON document and placing malicious code inside a particular key-value pair. |
Davidanderson · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10795 | High | 8.1 | — | 2026-06-11 | The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.26.4 via the UpdraftPlus_Remote_Communications_V2::wp_loaded function. |
Designcomputer · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11529 | Medium | 6.3 | — | 2026-06-08 | A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. |
Diagrams · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46642 | Medium | 6.1 | — | 2026-06-10 | draw.io is a configurable diagramming and whiteboarding application. |
Dolibarr · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11619 | Medium | 6.3 | — | 2026-06-09 | A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. |
Dtstack · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11618 | High | 7.3 | — | 2026-06-09 | A vulnerability was determined in DTStack Taier up to 1.4.0. |
Elixir-lang · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49762 | — | — | — | 2026-06-09 | Uncontrolled Resource Consumption vulnerability in the Elixir standard library's Version module allows an attacker who controls a version string to cause a denial of service through CPU and memory exhaustion. |
Essential Plugin · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2023-40200 | Medium | 5.3 | — | 2026-06-11 | Authorization bypass through User-Controlled key vulnerability in Essential Plugin WP Logo Showcase Responsive Slider and Carousel allows Exploiting Incorrectly Configured Access Control Security Levels. |
Ether · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2009-10007 | Critical | 9.1 | — | 2026-06-09 | Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks. |
Ethyca · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44541 | — | — | — | 2026-06-08 | Fides is an open-source privacy engineering platform. |
Evoluted · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-25557 | Medium | 5.4 | — | 2026-06-09 | Evoluted PHP Directory Listing Script through 4.0.5 contains a reflected cross-site scripting vulnerability in index.php where the dir parameter value is reflected without HTML encoding inside the HTML title element and inside anchor href… |
Evwill · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2016-20065 | High | 8.2 | — | 2026-06-09 | Product Catalog 8 1.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the selectedCategory parameter. |
Foliovision · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7556 | High | 7.2 | — | 2026-06-09 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the comment text in all versions up to, and including, 7.5.49.7212 due to insufficient input sanitization and output escaping. |
Form-data · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12143 | High | 7.5 | — | 2026-06-12 | form-data is a library for creating readable multipart/form-data streams. |
Frankverbeke · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-25860 | Medium | 6.1 | — | 2026-06-09 | OpenClinic GA 5.351.19 contains a reflected cross-site scripting vulnerability in the DICOM image upload handler that allows attackers to execute arbitrary JavaScript in a victim's browser by embedding malicious payloads in DICOM file meta… |
Garlic-signage · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47170 | High | 7.7 | — | 2026-06-11 | Garlic-Hub manages digital signage network — devices, content, and playlists — from a single self-hosted interface. |
Ghidra · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-52759 | Medium | 5.5 | — | 2026-06-10 | Ghidra before 12.1.1 contains an uncontrolled memory allocation vulnerability in the Mach-O binary parser that allows attackers to cause denial of service. |
Gimp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-2049 | High | 7.8 | — | 2026-06-10 | GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. |
Gl.inet · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11505 | Medium | 5.0 | — | 2026-06-08 | A flaw has been found in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. |
Global It Informatics Services Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6211 | High | 8.7 | — | 2026-06-12 | Unrestricted upload of file with dangerous type vulnerability in Global IT Informatics Services Inc. |
Google Cloud · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-4764 | — | — | — | 2026-06-11 | A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a ma… |
Grokability · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48507 | High | 7.1 | — | 2026-06-08 | Snipe-IT is an IT asset/license management system. |
Groww · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12065 | Low | 1.8 | — | 2026-06-12 | A vulnerability was identified in Groww Stock, Mutual Fund, Gold App up to 20260805 on Android. |
Halfgaar · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46411 | Medium | 6.5 | — | 2026-06-10 | FlashMQ is a MQTT broker/server, designed for multi-CPU environments. |
Hashthemes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-24618 | Medium | 4.3 | — | 2026-06-12 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThemes Hash Elements allows Retrieve Embedded Sensitive Data. |
Haskell Programming Language · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9648 | Critical | 9.1 | — | 2026-06-11 | The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names fall outside the issuing CA’s permitted subtrees. |
Hedef Media Promotion Interactive Media Marketing Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-5792 | Medium | 6.5 | — | 2026-06-12 | Authentication bypass by spoofing vulnerability in Hedef Media Promotion Interactive Media Marketing Inc. |
Helpfulcrowd · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8499 | Medium | 5.3 | — | 2026-06-09 | The Helpfulcrowd Product Reviews plugin for WordPress is vulnerable to Authorization Bypass via PHP Type Juggling in versions up to, and including, 1.2.9. |
Helpstring · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8883 | Medium | 6.4 | — | 2026-06-09 | The Global Body Mass Index Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gbmicalc' shortcode in versions up to, and including, 1.2. |
Hepta Platforms · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12060 | Medium | 6.5 | — | 2026-06-12 | Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webp… |
Hippoo · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49060 | Critical | 9.8 | — | 2026-06-11 | Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation. |
Hmbrand · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9698 | Critical | 9.8 | — | 2026-06-09 | DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. |
Hs-web · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11470 | Medium | 6.3 | — | 2026-06-08 | A vulnerability has been found in hs-web hsweb-framework up to 5.0.1. |
Hyperledger · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45581 | Medium | 5.5 | — | 2026-06-08 | fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. |
Inisev · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53738 | High | 8.1 | — | 2026-06-10 | Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handling AJAX handler. |
Iova.mihai · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-42653 | High | 7.1 | — | 2026-06-11 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iova.Mihai SliceWP allows Stored XSS. |
Itsourcecode · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11512 | Medium | 4.3 | — | 2026-06-08 | A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. |
Jasonpitts · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8940 | Medium | 4.3 | — | 2026-06-09 | The WP Meta Sort Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9. |
Jdm-labs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8882 | Medium | 6.4 | — | 2026-06-09 | The WP ApplicantStack Jobs Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. |
Jflyfox · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11473 | Medium | 6.3 | — | 2026-06-08 | A vulnerability was identified in jflyfox jfinal_cms up to 5.1.0. |
Jmespath · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54133 | Critical | 9.8 | — | 2026-06-12 | jmespath.php allows users to use JMESPath, software for declaratively specifying how to extract elements from a JSON document, in PHP applications with PHP data structures. |
Joshin85 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7662 | Medium | 6.4 | — | 2026-06-09 | The ePaperFlip Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'publicationid' attribute of the `epaperflip_embed` shortcode in all versions up to, and including, 1. |
Js-cookie · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46625 | High | 7.5 | — | 2026-06-10 | JavaScript Cookie is a JavaScript API for handling cookies, client-side. |
Kanidm · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46689 | — | — | — | 2026-06-10 | Kanidm is an identity management platform. |
Kedro-org · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-3840 | High | 7.1 | — | 2026-06-12 | A vulnerability in Kedro version 1.2.0 allows an attacker to exploit path traversal by providing a crafted version string. |
Kenz60 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8895 | Medium | 6.4 | — | 2026-06-09 | The kk blog card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'blog-card' shortcode in all versions up to, and including, 1.3. |
Keras · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11816 | High | 8.1 | — | 2026-06-11 | Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py`. |
Kokke · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11478 | Low | 3.3 | — | 2026-06-08 | A flaw has been found in kokke tiny-regex-c up to f2632c6d9ed25272987471cdb8b70395c2460bdb. |
Kong · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6338 | — | — | — | 2026-06-11 | A HTTP request smuggling and desynchronization vulnerability affects Kong Gateway Enterprise 3.4, 3.10, 3.11, 3.12, 3.13, and 3.14 series. |
Kushan2k · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11475 | Medium | 6.3 | — | 2026-06-08 | A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. |
Limatek System Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7852 | Critical | 9.8 | — | 2026-06-11 | Unrestricted upload of file with dangerous type vulnerability in Limatek System Inc. |
Lldpd · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46433 | Medium | 6.5 | — | 2026-06-09 | lldpd is an implementation of IEEE 802.1ab (LLDP). |
Magepeople Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2024-32110 | Medium | 4.3 | — | 2026-06-11 | Cross-Site request forgery (CSRF) vulnerability in Magepeople inc. |
Mailerpress · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8599 | Medium | 6.4 | — | 2026-06-09 | The MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Campaign HTML Content Field in all versions up to, and including, 2.0.4 due to insuf… |
Makeplane · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46558 | High | 8.3 | — | 2026-06-10 | Plane is an open-source project management tool. |
Malach-it · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53661 | — | — | — | 2026-06-11 | Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. |
Mate-desktop · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46529 | High | 7.8 | — | 2026-06-10 | Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. |
Maxfoundry · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2021-47982 | Medium | 6.4 | — | 2026-06-08 | WordPress Plugin WP-Paginate 2.1.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the preset parameter. |
Md. Shamim Shahnewaz · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2016-20063 | High | 7.1 | — | 2026-06-09 | Single Personal Message 1.0.3 contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries by injecting malicious code through the message parameter. |
Mem0ai · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49948 | High | 8.1 | — | 2026-06-09 | Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted server component where the POST /configure endpoint modifies global LLM provider and embedder configuration but only ver… |
Membraneframework · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53423 | — | — | — | 2026-06-11 | Allocation of Resources Without Limits or Throttling vulnerability in membraneframework membrane_mp4_plugin allows unauthenticated denial-of-service via BEAM atom table exhaustion. |
Metal3 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47190 | Medium | 4.4 | — | 2026-06-12 | IPAM is the IP address Manager for Cluster API Provider Metal3. |
Missilesilo · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2017-20246 | High | 8.2 | — | 2026-06-09 | KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to read database contents by exploiting an unescaped GET parameter. |
Mobatek · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11967 | — | — | — | 2026-06-12 | MobaXterm Personal Edition (Portable), in its 26.3 version (Build 5154), allows arbitrary code execution by loading a malicious DLL located in the same directory as the portable executable. |
Mohammed-eid35 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11521 | Medium | 6.3 | — | 2026-06-08 | A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948. |
Mosk Information Technologies Ltd. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8025 | Critical | 9.8 | — | 2026-06-09 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in MOSK Information Technologies Ltd. |
Moxa · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9266 | — | — | — | 2026-06-12 | A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. |
Mozilla · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11799 | High | 7.5 | — | 2026-06-09 | UXSS in Focus for iOS / Klar Webkit navigation. |
Mra13 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2021-47983 | Medium | 6.4 | — | 2026-06-08 | WordPress Plugin Stripe Payments 2.0.39 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the AcceptStripePayments-settings[currency_code] parameter. |
Mvt-project · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46486 | — | — | — | 2026-06-08 | MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise. |
Myasui · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2016-20064 | Medium | 6.2 | — | 2026-06-09 | WP Vault 0.8.6.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting an unescaped parameter in the include functionality. |
Nemon · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10731 | — | — | — | 2026-06-09 | SQL injection in the ‘two_steps_auth_code’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/user-login’ endpoint. |
Netcad Software Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7486 | Critical | 9.8 | — | 2026-06-09 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Netcad Software Inc. |
Neuron Soft · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8464 | — | — | — | 2026-06-11 | Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. |
Nginxproxymanager · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-40519 | High | 7.5 | — | 2026-06-08 | Nginx Proxy Manager versions 2.9.14 through 2.15.1, fixed in commit a5db5ed, contain an authenticated remote code execution vulnerability via OS command injection in the setupCertbotPlugins() function in backend/setup.js, allowing attacker… |
Nomachine · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53694 | — | — | — | 2026-06-10 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Nomachine allows Argument Injection.This issue affects Nomachine: before 9.5.7, before 8.23.2. |
Offlineimap · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2020-37248 | Medium | 6.5 | — | 2026-06-08 | OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext. |
Ollie Armstrong · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2016-20062 | High | 8.2 | — | 2026-06-09 | Simply Poll 1.4.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the 'pollid' POST parameter. |
Omnissa · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-22926 | High | 7.8 | — | 2026-06-09 | Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability. |
Open-emr · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46518 | High | 7.7 | — | 2026-06-10 | OpenEMR is a free and open source electronic health records and medical practice management application. |
Open-metadata · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46481 | High | 8.3 | — | 2026-06-08 | OpenMetadata is a unified metadata platform. |
Open-telemetry · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44967 | Medium | 5.3 | — | 2026-06-12 | OpenTelemetry-cpp is the C++ implementation of OpenTelemetry. |
Openfga · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48096 | Medium | 5.0 | — | 2026-06-10 | OpenFGA is an authorization/permission engine built for developers. |
Openvm · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46669 | High | 7.5 | — | 2026-06-10 | OpenVM is a performant and modular zkVM framework built for customization and extensibility. |
Oracle · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-35273 | Critical | 9.8 | KEV | 2026-06-11 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). |
Os4ed · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8406 | — | — | — | 2026-06-11 | openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. |
Penguinmod · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47181 | — | — | — | 2026-06-11 | PenguinMod-BackendApi is the backend api for penguinmod. |
Perryts · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53777 | High | 8.1 | — | 2026-06-11 | Perry before 0.5.1159 contains a path traversal vulnerability that allows a malicious build server to write arbitrary content to any location writable by the running process by supplying unsanitized path components in the artifact_name fie… |
Php · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45062 | High | 8.1 | — | 2026-06-10 | FrankenPHP is a modern application server for PHP. |
Pi-hole · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44693 | High | 8.8 | — | 2026-06-10 | Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. |
Pickplugins · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10862 | Medium | 6.4 | — | 2026-06-09 | The Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion body field in all versions up to, and including, 2.3.23 due to insufficient input sanitization and output escaping. |
Ping Identity · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-20746 | — | — | — | 2026-06-12 | Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and copying virtual attributes that reference ds-privilege-name va… |
Pipecat · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44716 | High | 7.5 | — | 2026-06-10 | Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. |
Plasmatizemedia · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9662 | High | 8.1 | — | 2026-06-09 | The Recover Exit For WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to and including 1.0.3. |
Plonky3 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46654 | — | — | — | 2026-06-10 | Plonky3 is a toolkit for polynomial IOPs (PIOPs). |
Pretix · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11764 | — | — | — | 2026-06-09 | When creating an export of all reusable media, the secrets of connected gift cards were included in the export even if the user creating the export does not have permission to view gift cards. |
Python Software Foundation · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9669 | — | — | — | 2026-06-08 | bz2.BZ2Decompressor objects could be reused after a decompression error. |
Qloapps · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-25558 | Medium | 4.8 | — | 2026-06-08 | QloApps through 1.7.0 contains a stored cross-site scripting vulnerability in the admin file manager that allows authenticated administrators to inject malicious JavaScript by uploading crafted SVG files. |
Quanticalabs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2017-20243 | High | 8.2 | — | 2026-06-09 | WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the space_id parameter. |
Rapid7 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8795 | High | 7.8 | — | 2026-06-09 | A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. |
Redhat · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-41731 | High | 8.1 | — | 2026-06-10 | JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. |
Redmine · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-1836 | — | — | — | 2026-06-12 | The system stores the username and password from the login form after submitting the request. |
Revolution Slider · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7542 | Medium | 6.5 | — | 2026-06-09 | The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions 7.0 to 7.0.10. |
Romancartsupport · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8880 | Medium | 6.4 | — | 2026-06-09 | The RomanCart Ecommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blclass' attribute (and other attributes) of the romancart_button shortcode in versions up to, and including, 2.0.8. |
Saas.group · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53737 | Medium | 6.1 | — | 2026-06-10 | Juicer through 1.12.18 fails to escape remote feed API response fields before rendering them on the admin settings page. |
Sahlberg · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53689 | High | 7.1 | — | 2026-06-10 | libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. |
Samlify_project · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46490 | High | 8.8 | — | 2026-06-08 | samlify is a Node.js library for SAML single sign-on. |
Schneider Electric · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8045 | Medium | 6.5 | — | 2026-06-09 | CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a Data Center Expert user account submits crafted XML payloads to… |
Setasign · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45802 | — | — | — | 2026-06-11 | FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. |
Shenzhen Kangda Xin Intelligent Network Technology Co., Ltd · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10045 | Critical | 9.8 | — | 2026-06-09 | Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. |
Shopware · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48011 | Low | 3.7 | — | 2026-06-10 | Shopware is an open commerce platform. |
Shortpixel · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-5714 | Medium | 6.4 | — | 2026-06-09 | The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘location_dir’ parameter in all versions up to, and including, 4.1.8 due to insufficient input sanitization and output escaping. |
Silverpeas · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53698 | Medium | 6.5 | — | 2026-06-10 | Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set. |
Simple-help · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48558 | Critical | 10.0 | KEV | 2026-06-12 | SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. |
Simpleble · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44634 | — | — | — | 2026-06-10 | SimpleBLE is a cross-platform library and bindings for Bluetooth Low Energy (BLE). |
Simplesamlphp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46491 | High | 8.6 | — | 2026-06-10 | SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. |
Sixstorage · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9185 | High | 7.5 | — | 2026-06-09 | The 6Storage Rentals plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 2.22.0 via the `userId` parameter of the `six_storage_get_user_info` and `six_storage_update_pr… |
Skilja Gmbh · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-41031 | High | 8.7 | — | 2026-06-09 | A Stored Cross-Site Scripting vulnerability in Vinna Process Monitor Version 4.0 Service Pack 1 (Build 63255) allows an authenticated remote attacker with low privileges to inject malicious JavaScript code into the application. This enable… |
Slate Digital Llc · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-24066 | High | 8.4 | — | 2026-06-10 | Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes the XPC service com.slatedigital.connect.privileged.helper.tool2. |
Smithyhq · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46645 | Medium | 4.3 | — | 2026-06-10 | SQLAdmin is a flexible Admin interface for SQLAlchemy models. |
Smub · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8613 | Medium | 6.4 | — | 2026-06-10 | The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title_tag' Widget Setting in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. |
Soagen Informatics Technologies Software And Consulting Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11561 | Critical | 9.8 | — | 2026-06-11 | Improper neutralization of special elements used in an expression language statement ('expression language injection') vulnerability in Soagen Informatics Technologies Software and Consulting Inc. |
Solarwinds · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-28301 | Medium | 4.8 | — | 2026-06-09 | A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended website. |
Solidtime-io · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47236 | Medium | 4.3 | — | 2026-06-12 | Solidtime is an open-source time-tracking app. |
Sonaar · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2023-54351 | High | 7.2 | — | 2026-06-08 | WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the comment functionality. |
Sonatype · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-3329 | High | 7.5 | — | 2026-06-11 | A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endpoints. |
Sparkle Wp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2023-32959 | Medium | 4.3 | — | 2026-06-11 | Missing Authorization vulnerability in Sparkle WP MetroStore metrostore allows Exploiting Incorrectly Configured Access Control Security Levels. |
Spearman · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46690 | Medium | 5.8 | — | 2026-06-12 | unbounded_spsc is an "unbounded" extension of bounded_spsc_queue. |
Stackit · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-39910 | Critical | 9.8 | — | 2026-06-08 | STACKIT IaaS API contains a missing authorization check vulnerability that allows authenticated, low-privileged attackers to escalate privileges to full organization compromise by attaching arbitrary service accounts to virtual machines th… |
Stefanbohacek · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46697 | High | 7.5 | — | 2026-06-11 | Fediverse Embeds embeds fediverse posts on WordPress sites. |
Stiofansisland · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11616 | High | 8.8 | — | 2026-06-09 | The Events Calendar for GeoDirectory plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 2.3.28. |
Subzeroid · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47157 | Medium | 6.5 | — | 2026-06-11 | aiograpi is an asynchronous Instagram API for Python. |
Tale · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46484 | High | 8.1 | — | 2026-06-08 | Headplane is a feature-complete Web UI for Headscale. |
Taosdata · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-42542 | High | 7.5 | — | 2026-06-10 | TDengine is an open source, time-series database optimized for Internet of Things devices. |
Techjewel · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8977 | Medium | 6.4 | — | 2026-06-09 | The WP GDPR Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ninja_gdpr_ajax_actions' AJAX action in versions up to, and including, 1.0.0. |
Templatehouse · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2022-42479 | Medium | 5.4 | — | 2026-06-11 | Missing Authorization vulnerability in TemplateHouse Soledad allows Accessing Functionality Not Properly Constrained by ACLs. |
Themehunk · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2023-25969 | Medium | 5.4 | — | 2026-06-11 | Missing Authorization vulnerability in ThemeHunk Contact Form & Lead Form Elementor Builder allows Exploiting Incorrectly Configured Access Control Security Levels. |
Themeisle · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2017-20251 | Critical | 9.8 | — | 2026-06-09 | WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malicious shortcodes through the WordPress REST API. |
Thinkst Applied Research · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11859 | — | — | — | 2026-06-10 | An HTML injection vulnerability in the "fetch links" email sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting (XSS) in emails clients that render HTML emails. |
Thorsten · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48488 | — | — | — | 2026-06-08 | phpMyFAQ is an open source FAQ web application. |
Tierrainnovation · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8902 | Medium | 4.3 | — | 2026-06-09 | The AJAX Report Comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.4. |
Tp Link Systems Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9151 | — | — | — | 2026-06-10 | An OS command injection vulnerability exists in the VPN module of TP-Link Archer AX12 v1, AX17 v1. |
Tp-link · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6250 | High | 8.1 | — | 2026-06-11 | An authenticated format string vulnerability exists in the ONVIF service of Tapo C110 v2 due to improper handling of user-controlled input. Externally controlled data is interpreted as a format string, which can be used to manipulate stac… |
Tp-link Systems Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8913 | — | — | — | 2026-06-08 | A command Injection vulnerability exists in the WireGuard client configuration of Archer MR600 v5 due to improper neutralization of user-controlled input within the web management interface. |
Twin · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11956 | Low | 3.7 | — | 2026-06-11 | A vulnerability was determined in TwiN gatus 5.36.0. |
Veeam · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44963 | — | — | — | 2026-06-09 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. |
Vllm · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-5497 | High | 7.5 | — | 2026-06-11 | vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method. |
Waves Audio Ltd. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-24064 | High | 7.8 | — | 2026-06-09 | Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. |
Wbw Plugins · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-39494 | Critical | 9.3 | — | 2026-06-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins Product Filter by WBW allows Blind SQL Injection. |
Wealcoder · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-8444 | Medium | 6.4 | — | 2026-06-10 | The Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the multiple parameters in all versions up to, and including, 2.6.7 due… |
Webandprint · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2023-54350 | High | 7.5 | — | 2026-06-08 | WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows unauthenticated attackers to upload and execute arbitrary PHP files. |
Webkul · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9506 | — | — | — | 2026-06-08 | This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. |
Webpros · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47365 | Critical | 9.9 | — | 2026-06-12 | Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM, allows remote authenticated users to bypass cross-tenant authorization and execute arbitrary wp-toolkit CLI commands as another account. |
Websoudan · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8853 | Medium | 4.4 | — | 2026-06-10 | The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'memo' parameter in all versions up to, and including, 5.1.3 due to insufficient input sanitization and output escaping. |
Wojtekmach · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49756 | — | — | — | 2026-06-08 | Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in wojtekmach Req allows multipart parameter smuggling via attacker-influenced part metadata. |
Wp24 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2021-47984 | Medium | 6.4 | — | 2026-06-08 | WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the fieldnameDomain parameter. |
Wpmessiah · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8677 | Medium | 6.4 | — | 2026-06-09 | The Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Widget HTML Tag Settings in all versions up to, and including, 1.3.3 due to insufficient inpu… |
Wpvibes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2023-33999 | High | 7.1 | — | 2026-06-11 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPVibes WP Mail Log allows DOM-Based XSS. |
X-vpn · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-2638 | — | — | — | 2026-06-09 | A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipulation to achieve privileged file corruption. |
Xibosignage · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-42558 | High | 7.6 | — | 2026-06-10 | Xibo is an open source digital signage platform with a web content management system and Windows display player software. |
Yamcs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-42568 | Medium | 4.3 | — | 2026-06-10 | Yamcs is a mission control framework. |
Yeswiki · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-52778 | Critical | 9.8 | — | 2026-06-08 | YesWiki is a wiki system written in PHP. |
Yith · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2022-44630 | Medium | 4.6 | — | 2026-06-11 | Cross-Site request forgery (CSRF) vulnerability in YITH YITH WooCommerce Product Slider Carousel allows Cross Site Request Forgery. |
Yoanbernabeu · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11479 | Medium | 4.2 | — | 2026-06-08 | A vulnerability has been found in yoanbernabeu grepai 0.35.0. |
Yuluma · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8904 | Medium | 4.3 | — | 2026-06-09 | The FastPicker, an order picker and order management system (oms) for WooCommerce on steroids plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. |