Patch Tuesday — July 2026
2026-07-14 · 2975 CVEs
CVEs published or modified the week of 2026-07-14, partitioned by vendor.
Microsoft (659 CVEs)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8859 | Critical | 9.9 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. |
CVE-2026-8635 | Critical | 9.9 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permiss… |
CVE-2026-8481 | Critical | 9.9 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Pyth… |
CVE-2026-8476 | Critical | 9.9 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. |
CVE-2026-9135 | Critical | 9.9 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) contain a code injection vulnerability in the Policies component's ToolGuard integration that bypasses the allow_custom_c… |
CVE-2026-57092 | Critical | 9.9 | — | 2026-07-14 | Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network. |
CVE-2026-13446 | Critical | 9.8 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data… |
CVE-2026-8505 | Critical | 9.8 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. |
CVE-2026-9103 | Critical | 9.8 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint. |
CVE-2026-56190 | Critical | 9.8 | — | 2026-07-14 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network. |
CVE-2026-56188 | Critical | 9.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network. |
CVE-2026-56159 | Critical | 9.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-55944 | Critical | 9.8 | — | 2026-07-14 | Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network. |
CVE-2026-55010 | Critical | 9.8 | — | 2026-07-14 | Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-50518 | Critical | 9.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-50447 | Critical | 9.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
CVE-2026-58644 | Critical | 9.8 | KEV | 2026-07-14 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-54990 | Critical | 9.8 | — | 2026-07-14 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-54118 | Critical | 9.8 | — | 2026-07-14 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-54117 | Critical | 9.8 | — | 2026-07-14 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-50522 | Critical | 9.8 | KEV | 2026-07-14 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-49172 | Critical | 9.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-42990 | Critical | 9.8 | — | 2026-07-14 | Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network. |
CVE-2026-15773 | Critical | 9.6 | — | 2026-07-14 | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-50380 | Critical | 9.6 | — | 2026-07-14 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
CVE-2026-55008 | Critical | 9.6 | — | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-48561 | Critical | 9.6 | — | 2026-07-14 | Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network. |
CVE-2026-48334 | Critical | 9.3 | — | 2026-07-14 | Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. |
CVE-2026-49798 | Critical | 9.3 | — | 2026-07-14 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-55040 | Critical | 9.1 | KEV | 2026-07-14 | Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-8056 | High | 8.8 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API. |
CVE-2026-7755 | High | 8.8 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files. |
CVE-2026-7667 | High | 8.8 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL that returns a specially crafted Content-Disposition header (e.g., filename="../../../target/path" )… |
CVE-2026-14499 | High | 8.8 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component. |
CVE-2026-63093 | High | 8.8 | — | 2026-07-17 | Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. |
CVE-2026-15767 | High | 8.8 | — | 2026-07-14 | Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. |
CVE-2026-47303 | High | 8.8 | — | 2026-07-14 | Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network. |
CVE-2026-47301 | High | 8.8 | — | 2026-07-14 | Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network. |
CVE-2026-47300 | High | 8.8 | — | 2026-07-14 | Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. |
CVE-2026-58626 | High | 8.8 | — | 2026-07-14 | Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
CVE-2026-58594 | High | 8.8 | — | 2026-07-14 | Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. |
CVE-2026-58534 | High | 8.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. |
CVE-2026-58277 | High | 8.8 | — | 2026-07-14 | Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-57102 | High | 8.8 | — | 2026-07-14 | Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-57094 | High | 8.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-57090 | High | 8.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-57087 | High | 8.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-56647 | High | 8.8 | — | 2026-07-14 | Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network. |
CVE-2026-56642 | High | 8.8 | — | 2026-07-14 | Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network. |
CVE-2026-56197 | High | 8.8 | — | 2026-07-14 | Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network. |
CVE-2026-56196 | High | 8.8 | — | 2026-07-14 | Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network. |
CVE-2026-56194 | High | 8.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network. |
CVE-2026-55052 | High | 8.8 | — | 2026-07-14 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-54121 | High | 8.8 | — | 2026-07-14 | Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50692 | High | 8.8 | — | 2026-07-14 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-50687 | High | 8.8 | — | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50670 | High | 8.8 | — | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50666 | High | 8.8 | — | 2026-07-14 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50489 | High | 8.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-50477 | High | 8.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50474 | High | 8.8 | — | 2026-07-14 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-50444 | High | 8.8 | — | 2026-07-14 | Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50438 | High | 8.8 | — | 2026-07-14 | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-50413 | High | 8.8 | — | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50398 | High | 8.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50385 | High | 8.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50382 | High | 8.8 | — | 2026-07-14 | Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally. |
CVE-2026-50370 | High | 8.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-50369 | High | 8.8 | — | 2026-07-14 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50360 | High | 8.8 | — | 2026-07-14 | Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-47295 | High | 8.8 | — | 2026-07-14 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-58608 | High | 8.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a network. |
CVE-2026-57969 | High | 8.8 | — | 2026-07-14 | Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. |
CVE-2026-55005 | High | 8.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network. |
CVE-2026-55002 | High | 8.8 | — | 2026-07-14 | External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-54999 | High | 8.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-54982 | High | 8.8 | — | 2026-07-14 | Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-54107 | High | 8.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-50663 | High | 8.8 | — | 2026-07-14 | Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network. |
CVE-2026-50342 | High | 8.8 | — | 2026-07-14 | Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-49795 | High | 8.8 | — | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49178 | High | 8.8 | — | 2026-07-14 | Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
CVE-2026-48564 | High | 8.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. |
CVE-2026-47632 | High | 8.8 | — | 2026-07-14 | Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network. |
CVE-2026-57206 | High | 8.6 | — | 2026-07-16 | SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. |
CVE-2026-48275 | High | 8.6 | — | 2026-07-14 | Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48350 | High | 8.6 | — | 2026-07-14 | Animate is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-50340 | High | 8.5 | — | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network. |
CVE-2026-55045 | High | 8.4 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-54128 | High | 8.4 | — | 2026-07-14 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally. |
CVE-2026-54992 | High | 8.4 | — | 2026-07-14 | Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally. |
CVE-2026-54122 | High | 8.4 | — | 2026-07-14 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. |
CVE-2026-50520 | High | 8.4 | — | 2026-07-14 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally. |
CVE-2026-49184 | High | 8.4 | — | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-56181 | High | 8.3 | — | 2026-07-14 | Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network. |
CVE-2026-58596 | High | 8.3 | — | 2026-07-12 | Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-58281 | High | 8.3 | — | 2026-07-11 | Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-48290 | High | 8.2 | — | 2026-07-14 | CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-50528 | High | 8.2 | — | 2026-07-14 | Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-48345 | High | 8.2 | — | 2026-07-14 | Animate is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-50680 | High | 8.2 | — | 2026-07-14 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2026-50429 | High | 8.2 | — | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50338 | High | 8.2 | — | 2026-07-14 | Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network. |
CVE-2026-13445 | High | 8.1 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's uploaded files by specifying absolute paths pointing to victim storage locations. |
CVE-2026-13473 | High | 8.1 | — | 2026-07-17 | IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM Storage Protect is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. |
CVE-2026-13448 | High | 8.1 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( /api/v1/build_public_tmp/{flow_id}/flow ). |
CVE-2026-48349 | High | 8.1 | — | 2026-07-14 | Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47304 | High | 8.1 | — | 2026-07-14 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-58617 | High | 8.1 | — | 2026-07-14 | Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-56186 | High | 8.1 | — | 2026-07-14 | Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network. |
CVE-2026-50686 | High | 8.1 | — | 2026-07-14 | Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network. |
CVE-2026-50487 | High | 8.1 | — | 2026-07-14 | Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-50460 | High | 8.1 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-50439 | High | 8.1 | — | 2026-07-14 | Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. |
CVE-2026-58595 | High | 8.1 | — | 2026-07-14 | Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-56169 | High | 8.1 | — | 2026-07-14 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. |
CVE-2026-54995 | High | 8.1 | — | 2026-07-14 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. |
CVE-2026-50694 | High | 8.1 | — | 2026-07-14 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. |
CVE-2026-49164 | High | 8.1 | — | 2026-07-14 | Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
CVE-2026-42900 | High | 8.1 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-50683 | High | 8.0 | — | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network. |
CVE-2026-50502 | High | 8.0 | — | 2026-07-14 | Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network. |
CVE-2026-50365 | High | 8.0 | — | 2026-07-14 | Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network. |
CVE-2026-58647 | High | 8.0 | — | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network. |
CVE-2026-49169 | High | 8.0 | — | 2026-07-14 | Use after free in DNS Server allows an authorized attacker to execute code over a network. |
CVE-2026-42975 | High | 8.0 | — | 2026-07-14 | Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-40400 | High | 8.0 | — | 2026-07-14 | Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network. |
CVE-2026-48346 | High | 7.9 | — | 2026-07-14 | Animate is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48373 | High | 7.8 | — | 2026-07-17 | Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-40952 | High | 7.8 | — | 2026-07-15 | CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. |
CVE-2026-48337 | High | 7.8 | — | 2026-07-14 | Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48336 | High | 7.8 | — | 2026-07-14 | Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48335 | High | 7.8 | — | 2026-07-14 | Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48344 | High | 7.8 | — | 2026-07-14 | Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48343 | High | 7.8 | — | 2026-07-14 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48342 | High | 7.8 | — | 2026-07-14 | Bridge is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48341 | High | 7.8 | — | 2026-07-14 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48340 | High | 7.8 | — | 2026-07-14 | Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48339 | High | 7.8 | — | 2026-07-14 | Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48311 | High | 7.8 | — | 2026-07-14 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48272 | High | 7.8 | — | 2026-07-14 | Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-50650 | High | 7.8 | — | 2026-07-14 | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-50649 | High | 7.8 | — | 2026-07-14 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. |
CVE-2026-50646 | High | 7.8 | — | 2026-07-14 | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. |
CVE-2026-47305 | High | 7.8 | — | 2026-07-14 | Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally. |
CVE-2026-58634 | High | 7.8 | — | 2026-07-14 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-58633 | High | 7.8 | — | 2026-07-14 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-58632 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-58628 | High | 7.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to elevate privileges locally. |
CVE-2026-58613 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-58542 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
CVE-2026-58541 | High | 7.8 | — | 2026-07-14 | Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate privileges locally. |
CVE-2026-58540 | High | 7.8 | — | 2026-07-14 | Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-58538 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-58537 | High | 7.8 | — | 2026-07-14 | Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized attacker to elevate privileges locally. |
CVE-2026-58536 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-58532 | High | 7.8 | — | 2026-07-14 | Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-58530 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally. |
CVE-2026-58527 | High | 7.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-57968 | High | 7.8 | — | 2026-07-14 | Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
CVE-2026-57096 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-57091 | High | 7.8 | — | 2026-07-14 | Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-57088 | High | 7.8 | — | 2026-07-14 | Improper access control in Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally. |
CVE-2026-56650 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-56644 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-56643 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-56189 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally. |
CVE-2026-56182 | High | 7.8 | — | 2026-07-14 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-56176 | High | 7.8 | — | 2026-07-14 | Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
CVE-2026-56175 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-56156 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55949 | High | 7.8 | — | 2026-07-14 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55947 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55141 | High | 7.8 | — | 2026-07-14 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55140 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-55137 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55136 | High | 7.8 | — | 2026-07-14 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55134 | High | 7.8 | — | 2026-07-14 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55133 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally. |
CVE-2026-55132 | High | 7.8 | — | 2026-07-14 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55131 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55130 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55129 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-55128 | High | 7.8 | — | 2026-07-14 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55127 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55125 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-55123 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
CVE-2026-55120 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
CVE-2026-55058 | High | 7.8 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55056 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-55055 | High | 7.8 | — | 2026-07-14 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55053 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55049 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-55048 | High | 7.8 | — | 2026-07-14 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55044 | High | 7.8 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55043 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
CVE-2026-55041 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55039 | High | 7.8 | — | 2026-07-14 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55038 | High | 7.8 | — | 2026-07-14 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55037 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55036 | High | 7.8 | — | 2026-07-14 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55033 | High | 7.8 | — | 2026-07-14 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55032 | High | 7.8 | — | 2026-07-14 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55031 | High | 7.8 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55029 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55025 | High | 7.8 | — | 2026-07-14 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55024 | High | 7.8 | — | 2026-07-14 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55022 | High | 7.8 | — | 2026-07-14 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-55018 | High | 7.8 | — | 2026-07-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-55017 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-54131 | High | 7.8 | — | 2026-07-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-54125 | High | 7.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-54124 | High | 7.8 | — | 2026-07-14 | Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally. |
CVE-2026-54115 | High | 7.8 | — | 2026-07-14 | Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally. |
CVE-2026-50689 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-50688 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50679 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-50677 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-50676 | High | 7.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-50673 | High | 7.8 | — | 2026-07-14 | Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50667 | High | 7.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-50665 | High | 7.8 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-50655 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
CVE-2026-50510 | High | 7.8 | — | 2026-07-14 | Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally. |
CVE-2026-50509 | High | 7.8 | — | 2026-07-14 | Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-50501 | High | 7.8 | — | 2026-07-14 | Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally. |
CVE-2026-50499 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
CVE-2026-50498 | High | 7.8 | — | 2026-07-14 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
CVE-2026-50494 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-50493 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50488 | High | 7.8 | — | 2026-07-14 | Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-50486 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50484 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50480 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally. |
CVE-2026-50479 | High | 7.8 | — | 2026-07-14 | Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-50478 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50476 | High | 7.8 | — | 2026-07-14 | Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally. |
CVE-2026-50471 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-50469 | High | 7.8 | — | 2026-07-14 | Improper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-50467 | High | 7.8 | — | 2026-07-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-50466 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-50462 | High | 7.8 | — | 2026-07-14 | External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-50461 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-50458 | High | 7.8 | — | 2026-07-14 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-50457 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50454 | High | 7.8 | — | 2026-07-14 | Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally. |
CVE-2026-50450 | High | 7.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-50448 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-50441 | High | 7.8 | — | 2026-07-14 | Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-50440 | High | 7.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-50436 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50435 | High | 7.8 | — | 2026-07-14 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-50433 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-50427 | High | 7.8 | — | 2026-07-14 | Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-50425 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. |
CVE-2026-50423 | High | 7.8 | — | 2026-07-14 | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50422 | High | 7.8 | — | 2026-07-14 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-50421 | High | 7.8 | — | 2026-07-14 | Access of resource using incompatible type ('type confusion') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. |
CVE-2026-50417 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-50412 | High | 7.8 | — | 2026-07-14 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-50407 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-50405 | High | 7.8 | — | 2026-07-14 | Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally. |
CVE-2026-50402 | High | 7.8 | — | 2026-07-14 | Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-50400 | High | 7.8 | — | 2026-07-14 | Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-50399 | High | 7.8 | — | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50391 | High | 7.8 | — | 2026-07-14 | Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. |
CVE-2026-50388 | High | 7.8 | — | 2026-07-14 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-50387 | High | 7.8 | — | 2026-07-14 | Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally. |
CVE-2026-50386 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-50378 | High | 7.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally. |
CVE-2026-50373 | High | 7.8 | — | 2026-07-14 | Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-50367 | High | 7.8 | — | 2026-07-14 | Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-50363 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
CVE-2026-50362 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally. |
CVE-2026-50361 | High | 7.8 | — | 2026-07-14 | Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-50357 | High | 7.8 | — | 2026-07-14 | Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
CVE-2026-50353 | High | 7.8 | — | 2026-07-14 | Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. |
CVE-2026-50347 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally. |
CVE-2026-50346 | High | 7.8 | — | 2026-07-14 | Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50344 | High | 7.8 | — | 2026-07-14 | Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally. |
CVE-2026-50343 | High | 7.8 | — | 2026-07-14 | Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-50337 | High | 7.8 | — | 2026-07-14 | Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally. |
CVE-2026-50336 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-50335 | High | 7.8 | — | 2026-07-14 | Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally. |
CVE-2026-50332 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50331 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally. |
CVE-2026-50329 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50327 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally. |
CVE-2026-50326 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally. |
CVE-2026-50321 | High | 7.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-50317 | High | 7.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Operating Systems allows an authorized attacker to elevate privileges locally. |
CVE-2026-50315 | High | 7.8 | — | 2026-07-14 | Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
CVE-2026-50314 | High | 7.8 | — | 2026-07-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-50313 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-50309 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-50306 | High | 7.8 | — | 2026-07-14 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2026-50305 | High | 7.8 | — | 2026-07-14 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-50301 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-48368 | High | 7.8 | — | 2026-07-14 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48365 | High | 7.8 | — | 2026-07-14 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48309 | High | 7.8 | — | 2026-07-14 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47968 | High | 7.8 | — | 2026-07-14 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47967 | High | 7.8 | — | 2026-07-14 | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47642 | High | 7.8 | — | 2026-07-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-47290 | High | 7.8 | — | 2026-07-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-58636 | High | 7.8 | — | 2026-07-14 | Improper link resolution before file access ('link following') in Window PC Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-58635 | High | 7.8 | — | 2026-07-14 | Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. |
CVE-2026-58631 | High | 7.8 | — | 2026-07-14 | Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally. |
CVE-2026-58618 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-58610 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally. |
CVE-2026-58609 | High | 7.8 | — | 2026-07-14 | Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally. |
CVE-2026-58602 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-58601 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-57107 | High | 7.8 | — | 2026-07-14 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally. |
CVE-2026-56155 | High | 7.8 | KEV | 2026-07-14 | Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-55948 | High | 7.8 | — | 2026-07-14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55899 | High | 7.8 | — | 2026-07-14 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55014 | High | 7.8 | — | 2026-07-14 | Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally. |
CVE-2026-55012 | High | 7.8 | — | 2026-07-14 | Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally. |
CVE-2026-55011 | High | 7.8 | — | 2026-07-14 | Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally. |
CVE-2026-55009 | High | 7.8 | — | 2026-07-14 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-55006 | High | 7.8 | — | 2026-07-14 | Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-55004 | High | 7.8 | — | 2026-07-14 | Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-55001 | High | 7.8 | — | 2026-07-14 | Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally. |
CVE-2026-54993 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally. |
CVE-2026-54991 | High | 7.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-54987 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-54986 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-54114 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-54112 | High | 7.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-54109 | High | 7.8 | — | 2026-07-14 | Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
CVE-2026-50697 | High | 7.8 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-50675 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-50351 | High | 7.8 | — | 2026-07-14 | Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally. |
CVE-2026-50333 | High | 7.8 | — | 2026-07-14 | Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-50318 | High | 7.8 | — | 2026-07-14 | Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-50311 | High | 7.8 | — | 2026-07-14 | Improper access control in Windows Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-50308 | High | 7.8 | — | 2026-07-14 | Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-50293 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally. |
CVE-2026-49808 | High | 7.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49800 | High | 7.8 | — | 2026-07-14 | Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally. |
CVE-2026-49797 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-49796 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. |
CVE-2026-49793 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
CVE-2026-49792 | High | 7.8 | — | 2026-07-14 | Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
CVE-2026-49783 | High | 7.8 | — | 2026-07-14 | Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-49176 | High | 7.8 | — | 2026-07-14 | Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally. |
CVE-2026-49175 | High | 7.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-49173 | High | 7.8 | — | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49170 | High | 7.8 | — | 2026-07-14 | Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally. |
CVE-2026-49166 | High | 7.8 | — | 2026-07-14 | Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-48581 | High | 7.8 | — | 2026-07-14 | Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally. |
CVE-2026-44800 | High | 7.8 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
CVE-2026-42982 | High | 7.8 | — | 2026-07-14 | Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
CVE-2026-0278 | High | 7.8 | — | 2026-07-09 | Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enforcement controls. |
CVE-2026-7754 | High | 7.7 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration and incomplete enforcement of the SSRF protection mechanism. |
CVE-2026-48348 | High | 7.7 | — | 2026-07-14 | Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48347 | High | 7.7 | — | 2026-07-14 | Animate is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-7872 | High | 7.5 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files including the JWT signing key and forge authentication tokens for any user. |
CVE-2026-59117 | High | 7.5 | — | 2026-07-16 | Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network. |
CVE-2026-53598 | High | 7.5 | — | 2026-07-16 | Prompty is a markdown file format (.prompty) for LLM prompts. |
CVE-2026-59862 | High | 7.5 | — | 2026-07-16 | Kiota is an OpenAPI based HTTP Client code generator. |
CVE-2026-59861 | High | 7.5 | — | 2026-07-16 | Kiota is an OpenAPI based HTTP Client code generator. |
CVE-2026-48352 | High | 7.5 | — | 2026-07-14 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. |
CVE-2026-48351 | High | 7.5 | — | 2026-07-14 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. |
CVE-2026-48295 | High | 7.5 | — | 2026-07-14 | CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information. |
CVE-2026-50651 | High | 7.5 | — | 2026-07-14 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. |
CVE-2026-50648 | High | 7.5 | — | 2026-07-14 | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network. |
CVE-2026-50527 | High | 7.5 | — | 2026-07-14 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. |
CVE-2026-50525 | High | 7.5 | — | 2026-07-14 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. |
CVE-2026-50524 | High | 7.5 | — | 2026-07-14 | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network. |
CVE-2026-47302 | High | 7.5 | — | 2026-07-14 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. |
CVE-2026-58627 | High | 7.5 | — | 2026-07-14 | Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
CVE-2026-58531 | High | 7.5 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges over a network. |
CVE-2026-57108 | High | 7.5 | — | 2026-07-14 | Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-57089 | High | 7.5 | — | 2026-07-14 | Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network. |
CVE-2026-56648 | High | 7.5 | — | 2026-07-14 | Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50685 | High | 7.5 | — | 2026-07-14 | Double free in Windows DHCP Server allows an authorized attacker to execute code over a network. |
CVE-2026-50647 | High | 7.5 | — | 2026-07-14 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
CVE-2026-50505 | High | 7.5 | — | 2026-07-14 | Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network. |
CVE-2026-50500 | High | 7.5 | — | 2026-07-14 | Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50496 | High | 7.5 | — | 2026-07-14 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50470 | High | 7.5 | — | 2026-07-14 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50463 | High | 7.5 | — | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50424 | High | 7.5 | — | 2026-07-14 | Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network. |
CVE-2026-50414 | High | 7.5 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50411 | High | 7.5 | — | 2026-07-14 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
CVE-2026-50379 | High | 7.5 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network. |
CVE-2026-50368 | High | 7.5 | — | 2026-07-14 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. |
CVE-2026-50355 | High | 7.5 | — | 2026-07-14 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. |
CVE-2026-50330 | High | 7.5 | — | 2026-07-14 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-50328 | High | 7.5 | — | 2026-07-14 | Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network. |
CVE-2026-50304 | High | 7.5 | — | 2026-07-14 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. |
CVE-2026-56170 | High | 7.5 | — | 2026-07-14 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-54983 | High | 7.5 | — | 2026-07-14 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
CVE-2026-54119 | High | 7.5 | — | 2026-07-14 | Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker to deny service over a network. |
CVE-2026-50696 | High | 7.5 | — | 2026-07-14 | Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. |
CVE-2026-50695 | High | 7.5 | — | 2026-07-14 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. |
CVE-2026-50653 | High | 7.5 | — | 2026-07-14 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network. |
CVE-2026-50652 | High | 7.5 | — | 2026-07-14 | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network. |
CVE-2026-50506 | High | 7.5 | — | 2026-07-14 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-49788 | High | 7.5 | — | 2026-07-14 | Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network. |
CVE-2026-49787 | High | 7.5 | — | 2026-07-14 | Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network. |
CVE-2026-49181 | High | 7.5 | — | 2026-07-14 | Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-49171 | High | 7.5 | — | 2026-07-14 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. |
CVE-2026-47296 | High | 7.5 | — | 2026-07-14 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-45646 | High | 7.5 | — | 2026-07-14 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-40378 | High | 7.5 | — | 2026-07-14 | Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. |
CVE-2026-59841 | High | 7.5 | — | 2026-07-14 | A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via <insert attack vector here> |
CVE-2026-48287 | High | 7.4 | — | 2026-07-14 | CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-54127 | High | 7.4 | — | 2026-07-14 | Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-55126 | High | 7.3 | — | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-55034 | High | 7.3 | — | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-55021 | High | 7.3 | — | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-50482 | High | 7.3 | — | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-58640 | High | 7.3 | — | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-50364 | High | 7.3 | — | 2026-07-14 | Improper link resolution before file access ('link following') in Windows Server Backup allows an authorized attacker to elevate privileges locally. |
CVE-2026-49790 | High | 7.3 | — | 2026-07-14 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
CVE-2026-49789 | High | 7.3 | — | 2026-07-14 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-56171 | High | 7.1 | — | 2026-07-17 | Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-59867 | High | 7.1 | — | 2026-07-16 | Kiota is an OpenAPI based HTTP Client code generator. |
CVE-2026-58529 | High | 7.1 | — | 2026-07-14 | Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network. |
CVE-2026-57101 | High | 7.1 | — | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-55122 | High | 7.1 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-50682 | High | 7.1 | — | 2026-07-14 | Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network. |
CVE-2026-50465 | High | 7.1 | — | 2026-07-14 | Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. |
CVE-2026-50451 | High | 7.1 | — | 2026-07-14 | Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-50428 | High | 7.1 | — | 2026-07-14 | Out-of-bounds read in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally. |
CVE-2026-56193 | High | 7.1 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-55144 | High | 7.1 | — | 2026-07-14 | Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally. |
CVE-2026-50354 | High | 7.1 | — | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49791 | High | 7.1 | — | 2026-07-14 | Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-49165 | High | 7.1 | — | 2026-07-14 | Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally. |
CVE-2026-58598 | High | 7.0 | — | 2026-07-16 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. |
CVE-2026-50526 | High | 7.0 | — | 2026-07-14 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally. |
CVE-2026-58637 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-58629 | High | 7.0 | — | 2026-07-14 | Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. |
CVE-2026-58619 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-58544 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-57093 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-56187 | High | 7.0 | — | 2026-07-14 | Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-56183 | High | 7.0 | — | 2026-07-14 | Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-56173 | High | 7.0 | — | 2026-07-14 | Use after free in Windows WebView allows an authorized attacker to elevate privileges locally. |
CVE-2026-50674 | High | 7.0 | — | 2026-07-14 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-50672 | High | 7.0 | — | 2026-07-14 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-50669 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-50658 | High | 7.0 | — | 2026-07-14 | Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally. |
CVE-2026-50503 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50491 | High | 7.0 | — | 2026-07-14 | Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally. |
CVE-2026-50490 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-50459 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-50452 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-50449 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50410 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50406 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally. |
CVE-2026-50404 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-50403 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50397 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50396 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-50393 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-50392 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
CVE-2026-50390 | High | 7.0 | — | 2026-07-14 | Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50372 | High | 7.0 | — | 2026-07-14 | Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally. |
CVE-2026-50371 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
CVE-2026-50359 | High | 7.0 | — | 2026-07-14 | Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-50358 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-50348 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-50345 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50322 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50307 | High | 7.0 | — | 2026-07-14 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2026-58526 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-54996 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-54989 | High | 7.0 | — | 2026-07-14 | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. |
CVE-2026-54129 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2026-54111 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-50384 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-50356 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally. |
CVE-2026-50325 | High | 7.0 | — | 2026-07-14 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-50323 | High | 7.0 | — | 2026-07-14 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
CVE-2026-50297 | High | 7.0 | — | 2026-07-14 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-50296 | High | 7.0 | — | 2026-07-14 | Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49806 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-49805 | High | 7.0 | — | 2026-07-14 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-49803 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-49802 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-49784 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally. |
CVE-2026-49183 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-49162 | High | 7.0 | — | 2026-07-14 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-48572 | High | 7.0 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-48571 | High | 7.0 | — | 2026-07-14 | Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-6851 | High | 7.0 | — | 2026-07-14 | An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by lev… |
CVE-2026-48312 | Medium | 6.8 | — | 2026-07-14 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. |
CVE-2026-58528 | Medium | 6.8 | — | 2026-07-14 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-50668 | Medium | 6.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-50492 | Medium | 6.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code with a physical attack. |
CVE-2026-50426 | Medium | 6.8 | — | 2026-07-14 | Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network. |
CVE-2026-54132 | Medium | 6.8 | — | 2026-07-14 | Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-50299 | Medium | 6.8 | — | 2026-07-14 | Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack. |
CVE-2026-50298 | Medium | 6.8 | — | 2026-07-14 | Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-49168 | Medium | 6.8 | — | 2026-07-14 | Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-50678 | Medium | 6.6 | — | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-49804 | Medium | 6.6 | — | 2026-07-14 | Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-55440 | Medium | 6.5 | — | 2026-07-16 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. |
CVE-2026-50659 | Medium | 6.5 | — | 2026-07-14 | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. |
CVE-2026-58546 | Medium | 6.5 | — | 2026-07-14 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-58539 | Medium | 6.5 | — | 2026-07-14 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-58535 | Medium | 6.5 | — | 2026-07-14 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-58533 | Medium | 6.5 | — | 2026-07-14 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-57982 | Medium | 6.5 | — | 2026-07-14 | Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network. |
CVE-2026-56168 | Medium | 6.5 | — | 2026-07-14 | Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network. |
CVE-2026-55054 | Medium | 6.5 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
CVE-2026-55051 | Medium | 6.5 | — | 2026-07-14 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
CVE-2026-54126 | Medium | 6.5 | — | 2026-07-14 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-54116 | Medium | 6.5 | — | 2026-07-14 | Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-50504 | Medium | 6.5 | — | 2026-07-14 | Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50497 | Medium | 6.5 | — | 2026-07-14 | Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50468 | Medium | 6.5 | — | 2026-07-14 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-50445 | Medium | 6.5 | — | 2026-07-14 | Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50376 | Medium | 6.5 | — | 2026-07-14 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50366 | Medium | 6.5 | — | 2026-07-14 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
CVE-2026-58279 | Medium | 6.5 | — | 2026-07-14 | Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. |
CVE-2026-57979 | Medium | 6.5 | — | 2026-07-14 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-57976 | Medium | 6.5 | — | 2026-07-14 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
CVE-2026-56185 | Medium | 6.5 | — | 2026-07-14 | Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network. |
CVE-2026-55003 | Medium | 6.5 | — | 2026-07-14 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-54108 | Medium | 6.5 | — | 2026-07-14 | External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-49799 | Medium | 6.5 | — | 2026-07-14 | Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. |
CVE-2026-47282 | Medium | 6.5 | — | 2026-07-14 | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. |
CVE-2026-34348 | Medium | 6.5 | — | 2026-07-14 | Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network. |
CVE-2026-11944 | Medium | 6.5 | — | 2026-07-14 | openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that allows an authenticated attacker to read arbitrary files on the server via crafted path tra… |
CVE-2026-57211 | Medium | 6.5 | — | 2026-07-10 | RabbitMQ is a messaging and streaming broker. |
CVE-2026-57097 | Medium | 6.4 | — | 2026-07-14 | Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack. |
CVE-2026-55000 | Medium | 6.4 | — | 2026-07-14 | Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-58543 | Medium | 6.3 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges with a physical attack. |
CVE-2026-57973 | Medium | 6.3 | — | 2026-07-14 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally. |
CVE-2026-55145 | Medium | 6.3 | — | 2026-07-14 | Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network. |
CVE-2026-50375 | Medium | 6.3 | — | 2026-07-14 | Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally. |
CVE-2026-50374 | Medium | 6.3 | — | 2026-07-14 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges with a physical attack. |
CVE-2026-48357 | Medium | 6.2 | — | 2026-07-14 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. |
CVE-2026-48354 | Medium | 6.2 | — | 2026-07-14 | CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. |
CVE-2026-48302 | Medium | 6.2 | — | 2026-07-14 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. |
CVE-2026-48298 | Medium | 6.2 | — | 2026-07-14 | CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. |
CVE-2026-48296 | Medium | 6.2 | — | 2026-07-14 | CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. |
CVE-2026-57095 | Medium | 6.2 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-55026 | Medium | 6.2 | — | 2026-07-14 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-50420 | Medium | 6.2 | — | 2026-07-14 | Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally. |
CVE-2026-50294 | Medium | 6.2 | — | 2026-07-14 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally. |
CVE-2026-49807 | Medium | 6.2 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally. |
CVE-2026-58643 | Medium | 6.1 | — | 2026-07-16 | Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-55898 | Medium | 6.1 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-50661 | Medium | 6.1 | — | 2026-07-14 | Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
CVE-2026-50495 | Medium | 6.1 | — | 2026-07-14 | Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. |
CVE-2026-50453 | Medium | 6.1 | — | 2026-07-14 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-50383 | Medium | 6.1 | — | 2026-07-14 | Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
CVE-2026-54988 | Medium | 6.1 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-49174 | Medium | 6.1 | — | 2026-07-14 | Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. |
CVE-2026-58638 | Medium | 6.0 | — | 2026-07-14 | Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally. |
CVE-2026-56649 | Medium | 5.9 | — | 2026-07-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network. |
CVE-2026-50324 | Medium | 5.9 | — | 2026-07-14 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
CVE-2026-48353 | Medium | 5.5 | — | 2026-07-14 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. |
CVE-2026-58547 | Medium | 5.5 | — | 2026-07-14 | Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally. |
CVE-2026-58545 | Medium | 5.5 | — | 2026-07-14 | Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally. |
CVE-2026-57085 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
CVE-2026-57084 | Medium | 5.5 | — | 2026-07-14 | Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally. |
CVE-2026-57083 | Medium | 5.5 | — | 2026-07-14 | Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally. |
CVE-2026-56195 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-56192 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-56184 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-56178 | Medium | 5.5 | — | 2026-07-14 | Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally. |
CVE-2026-55142 | Medium | 5.5 | — | 2026-07-14 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-55139 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-55138 | Medium | 5.5 | — | 2026-07-14 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-55124 | Medium | 5.5 | — | 2026-07-14 | Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-55121 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-55057 | Medium | 5.5 | — | 2026-07-14 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-55050 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-55047 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-55046 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-55042 | Medium | 5.5 | — | 2026-07-14 | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-55035 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-55028 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-55027 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-55023 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-50690 | Medium | 5.5 | — | 2026-07-14 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
CVE-2026-50681 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
CVE-2026-50483 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally. |
CVE-2026-50475 | Medium | 5.5 | — | 2026-07-14 | Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally. |
CVE-2026-50473 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-50456 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-50455 | Medium | 5.5 | — | 2026-07-14 | Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. |
CVE-2026-50442 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-50437 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
CVE-2026-50434 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
CVE-2026-50431 | Medium | 5.5 | — | 2026-07-14 | Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability |
CVE-2026-50430 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
CVE-2026-50409 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
CVE-2026-50408 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-50401 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally. |
CVE-2026-50394 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. |
CVE-2026-50389 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-50377 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50352 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
CVE-2026-50341 | Medium | 5.5 | — | 2026-07-14 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
CVE-2026-50339 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
CVE-2026-50334 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally. |
CVE-2026-49177 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally. |
CVE-2026-48580 | Medium | 5.5 | — | 2026-07-14 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-47969 | Medium | 5.5 | — | 2026-07-14 | Audition is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. |
CVE-2026-58614 | Medium | 5.5 | — | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally. |
CVE-2026-54997 | Medium | 5.5 | — | 2026-07-14 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
CVE-2026-50381 | Medium | 5.5 | — | 2026-07-14 | Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose information locally. |
CVE-2026-50350 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally. |
CVE-2026-50316 | Medium | 5.5 | — | 2026-07-14 | Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. |
CVE-2026-50303 | Medium | 5.5 | — | 2026-07-14 | Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally. |
CVE-2026-50300 | Medium | 5.5 | — | 2026-07-14 | Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally. |
CVE-2026-50295 | Medium | 5.5 | — | 2026-07-14 | Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally. |
CVE-2026-49801 | Medium | 5.5 | — | 2026-07-14 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
CVE-2026-49180 | Medium | 5.5 | — | 2026-07-14 | Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. |
CVE-2026-45496 | Medium | 5.5 | — | 2026-07-14 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-41087 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-40422 | Medium | 5.5 | — | 2026-07-14 | Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-34349 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. |
CVE-2026-34346 | Medium | 5.5 | — | 2026-07-14 | Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. |
CVE-2026-34328 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally. |
CVE-2026-33842 | Medium | 5.5 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-57980 | Medium | 5.4 | — | 2026-07-17 | Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network. |
CVE-2026-56157 | Medium | 5.4 | — | 2026-07-14 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-15771 | Medium | 5.3 | — | 2026-07-14 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via… |
CVE-2026-50432 | Medium | 5.3 | — | 2026-07-14 | Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network. |
CVE-2026-50415 | Medium | 5.3 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network. |
CVE-2026-56164 | Medium | 5.3 | KEV | 2026-07-14 | Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-44806 | Medium | 5.3 | — | 2026-07-14 | Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network. |
CVE-2026-50418 | Medium | 5.1 | — | 2026-07-14 | Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-50684 | Medium | 4.8 | — | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network. |
CVE-2026-50657 | Medium | 4.7 | — | 2026-07-14 | Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally. |
CVE-2026-50312 | Medium | 4.7 | — | 2026-07-14 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-50310 | Medium | 4.7 | — | 2026-07-14 | Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally. |
CVE-2026-49167 | Medium | 4.7 | — | 2026-07-14 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62826 | Medium | 4.6 | — | 2026-07-16 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-55135 | Medium | 4.6 | — | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-55030 | Medium | 4.6 | — | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-55020 | Medium | 4.6 | — | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-55019 | Medium | 4.6 | — | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-55016 | Medium | 4.6 | — | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-49794 | Medium | 4.6 | — | 2026-07-14 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-50485 | Medium | 4.5 | — | 2026-07-14 | Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network. |
CVE-2026-57205 | Medium | 4.3 | — | 2026-07-16 | SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. |
CVE-2026-54568 | Medium | 4.3 | — | 2026-07-16 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. |
CVE-2026-50302 | Medium | 4.2 | — | 2026-07-14 | Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-50419 | Low | 3.3 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally. |
CVE-2026-50416 | Low | 3.3 | — | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-59866 | — | — | — | 2026-07-16 | Kiota is an OpenAPI based HTTP Client code generator. |
CVE-2026-59865 | — | — | — | 2026-07-16 | Kiota is an OpenAPI based HTTP Client code generator. |
CVE-2026-59864 | — | — | — | 2026-07-16 | Kiota is an OpenAPI based HTTP Client code generator. |
CVE-2026-54733 | — | — | — | 2026-07-16 | The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. |
CVE-2026-53597 | — | — | — | 2026-07-16 | Prompty is a markdown file format (.prompty) for LLM prompts. |
CVE-2026-59863 | — | — | — | 2026-07-16 | Kiota is an OpenAPI based HTTP Client code generator. |
CVE-2026-59860 | — | — | — | 2026-07-16 | Kiota is an OpenAPI based HTTP Client code generator. |
CVE-2026-59859 | — | — | — | 2026-07-16 | Kiota is an OpenAPI based HTTP Client code generator. |
Other vendors (2316 CVEs across 795 vendors)
Linux · 107 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53176 | Critical | 9.8 | — | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN In drivers/infiniband/ulp/isert/ib_isert.c, isert_login_recv_done() computes the login request payload length a… |
CVE-2026-53010 | Critical | 9.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_open during durable reconnect In smb2_open, the call to ksmbd_put_durable_fd(fp) drops the reference to the durable file descriptor ear… |
CVE-2026-53002 | Critical | 9.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace it with scnprintf, the buffer sizes are expected to be large enough to hold the result, no need for snprintf+overflow… |
CVE-2026-52986 | Critical | 9.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: don't use simple_strtoul Replace unsafe port parsing in epaddr_len(), ct_sip_parse_header_uri(), and ct_sip_parse_request() with a new sip_p… |
CVE-2026-52982 | Critical | 9.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() syzbot reported a KASAN slab-use-after-free read in rtl8150_start_xmit() when accessing skb->len for tx sta… |
CVE-2026-52955 | Critical | 9.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in crush_decode() A message of type CEPH_MSG_OSD_MAP containing a crush map with at least one bucket has two fields holding t… |
CVE-2026-46195 | Critical | 9.8 | — | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: smb: client: validate dacloffset before building DACL pointers parse_sec_desc(), build_sec_desc(), and the chown path in id_mode_to_cifs_acl() all add the server-supplie… |
CVE-2026-45972 | Critical | 9.8 | — | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype before retrying SMB2_open() to prevent an UAF bug if @data != NULL… |
CVE-2026-45898 | Critical | 9.8 | — | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removing work_list The commit e1168f0 ("RDMA/iwcm: Simplify cm_event_handler()") changed the work submission logic to uncondi… |
CVE-2026-53043 | Critical | 9.1 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: validate qr_numregions in dlm_match_regions() Patch series "ocfs2/dlm: fix two bugs in dlm_match_regions()". |
CVE-2026-52999 | Critical | 9.1 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix out-of-bounds read on option matching In nf_osf_match(), the nf_osf_hdr_ctx structure is initialized once and passed by reference to nf_osf… |
CVE-2026-52958 | Critical | 9.1 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in osdmap_decode() When decoding osd_state and osd_weight from an incoming osdmap in osdmap_decode(), both are decoded for ea… |
CVE-2026-53322 | High | 8.8 | — | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shutdown, make vfio_pci_core_close_device() call vfio_pci_dma_buf_cleanup() before the function is disable… |
CVE-2026-53277 | High | 8.8 | — | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation walk_s1() and kvm_walk_nested_s2() expect to be called while holding kvm->srcu to… |
CVE-2026-53232 | High | 8.8 | — | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call sfp_bus_del_upstream() in the probe failure path, so let's add it, otherwise th… |
CVE-2026-52952 | High | 8.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset In __iommu_group_set_domain_internal(), concurrent domain attachments are rejected when any device i… |
CVE-2026-46174 | High | 8.8 | — | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Make sure resources are not improperly shared in the op cache and cause instruction corrup… |
CVE-2026-46166 | High | 8.8 | — | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in radar detect work The call to ieee80211_dfs_cac_cancel can cause the iterated chanctx to be freed and removed from the list. |
CVE-2026-46125 | High | 8.8 | — | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: remove station if connection prep fails If connection preparation fails for MLO connections, then the interface is completely reset to non-MLD. |
CVE-2026-52967 | High | 8.1 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: smb/client: fix possible infinite loop and oob read in symlink_data() On 32-bit architectures, the infinite loop is as follows: len = p->ErrorDataLength == 0xfffffff8… |
CVE-2026-53366 | High | 7.8 | — | 2026-07-16 | In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path In __ip_append_data(), when the paged-allocation branch is taken, alloclen and pagedlen are computed as alloclen… |
CVE-2026-53194 | High | 7.8 | — | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: kl5kusb105: fix bulk-out buffer overflow klsi_105_prepare_write_buffer() is called by the generic write path with the bulk-out buffer and its size (bulk_out… |
CVE-2026-53153 | High | 7.8 | — | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: mm/list_lru: drain before clearing xarray entry on reparent memcg_reparent_list_lrus() clears the dying memcg's xarray entry with xas_store(&xas, NULL) before reparentin… |
CVE-2026-53148 | High | 7.8 | — | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Clamp XDomain response data copy to allocation size tb_xdp_properties_request() derives the per-packet copy length from the response header without checking… |
CVE-2026-53145 | High | 7.8 | — | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: drm/gem: Try to fix change_handle ioctl, attempt 4 [airlied: just added some comments on how to reenable] On-list because the cat is out of the bag and we're clearly not… |
CVE-2026-53036 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix off-by-one in check_imm signed range check check_imm(bits, imm) is used in the arm64 BPF JIT to verify that a branch displacement (in arm64 instruction u… |
CVE-2026-53033 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Take state lock for af_unix iter When a BPF iterator program updates a sockmap, there is a race condition in unix_stream_bpf_update_proto() where the `peer… |
CVE-2026-53031 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: bpf: Validate node_id in arena_alloc_pages() arena_alloc_pages() accepts a plain int node_id and forwards it through the entire allocation chain without any bounds check… |
CVE-2026-53025 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free on cdev close This addresses a use-after-free bug when a raw bundle is disconnected but its chardev is still opened by an application. |
CVE-2026-53024 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free if write is called after disconnect If a user writes to the chardev after disconnect has been called, the kernel panics with the followi… |
CVE-2026-53020 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: um: Fix potential race condition in TLB sync During the TLB sync, we need to traverse and modify the page table, so we should hold the page table lock. |
CVE-2026-53011 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch In advance_sched(), when should_change_schedules() returns true, switch_schedules() is called… |
CVE-2026-53004 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks sctp_getsockopt_peer_auth_chunks() checks that the caller's optval buffer is large enough for the pe… |
CVE-2026-52992 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfs_validate_bblk() Reject ADFS disc records with a zero zone count during boot block validation, before the disc record is used. |
CVE-2026-52975 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: bonding: 3ad: implement proper RCU rules for port->aggregator syzbot found a data-race in bond_3ad_get_active_agg_info / bond_3ad_state_machine_handler [1] which hints a… |
CVE-2026-52971 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net: ena: PHC: Fix potential use-after-free in get_timestamp Move the phc->active check and resp pointer assignment to after acquiring the spinlock. |
CVE-2026-52969 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() kvm_reset_dirty_gfn() guards the gfn range with if (!memslot || (offset + __fls(mask)) >= memslot->npages) return… |
CVE-2026-52962 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The old_blob in __ceph_setxattr() can store ci->i_xattrs.prealloc_blob value during the retry. |
CVE-2026-52959 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Do not use host-controlled page order in cleanup path When issuing an extended guest request (SVM_VMGEXIT_EXT_GUEST_REQUEST), get_ext_report() allocates… |
CVE-2026-52951 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: handle empty bo and UAF races There look to be some nasty races here when triggering the invalidate_mappings hook: 1) We do xe_bo_alloc() followed by th… |
CVE-2026-52947 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove In qrtr_port_remove(), the socket reference count is decremented via __sock_put() before the por… |
CVE-2026-52943 | High | 7.8 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskb_carve helpers pskb_carve_inside_header() and pskb_carve_inside_nonlinear() both copy the old skb_shared_info header i… |
CVE-2026-52910 | High | 7.8 | — | 2026-06-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. |
CVE-2026-46176 | High | 7.8 | — | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() mlx5_ib_dev_res_srq_init() allocates two SRQs, s0 and s1. |
CVE-2026-46145 | High | 7.8 | — | 2026-05-28 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko points out that rx_hash_key_len comes from a uAPI structure and is blindly passed to memcpy, allowing the userspace to trash… |
CVE-2026-53026 | High | 7.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg In nfsd4_add_rdaccess_to_wrdeleg, if fp->fi_fds[O_RDONLY] is already set by another thread, __nfs… |
CVE-2026-53003 | High | 7.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: pppoe: drop PFC frames RFC 2516 Section 7 states that Protocol Field Compression (PFC) is NOT RECOMMENDED for PPPoE. |
CVE-2026-52998 | High | 7.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check The nf_osf_ttl() function accessed skb->dev to perform a local interface address lookup without ver… |
CVE-2026-52983 | High | 7.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix BQL imbalance in TX path Fix a possible BQL imbalance in airoha_dev_xmit(), where inflight packets are accounted only for the AIROHA_NUM_TX_RING netdev… |
CVE-2026-52981 | High | 7.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: neigh: let neigh_xmit take skb ownership neigh_xmit always releases the skb, except when no neighbour table is found. |
CVE-2026-52974 | High | 7.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net: tls: fix strparser anchor skb leak on offload RX setup failure When tls_set_device_offload_rx() fails at tls_dev_add(), the error path calls tls_sw_free_resources_r… |
CVE-2026-52960 | High | 7.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ceph: put folios not suitable for writeback The batch holds references to the folios (see `filemap_get_folios`, `folio_batch_release`), so we need to `folio_put` the fol… |
CVE-2026-52957 | High | 7.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential null-ptr-deref in decode_choose_args() A message of type CEPH_MSG_OSD_MAP contains an OSD map that itself contains a CRUSH map. |
CVE-2026-52956 | High | 7.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() In __ceph_x_decrypt(), a part of the buffer p is interpreted as a ceph_x_encrypt_header, and the magic… |
CVE-2026-52954 | High | 7.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: libceph: handle rbtree insertion error in decode_choose_args() A message of type CEPH_MSG_OSD_MAP contains an OSD map that itself contains a CRUSH map. |
CVE-2026-52945 | High | 7.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: Revert "wireguard: device: enable threaded NAPI" This reverts commit 933466fc50a8e4eb167acbd0d8ec96a078462e9c which is commit db9ae3b6b43c79b1ba87eea849fd65efa05b4b2e up… |
CVE-2026-53203 | High | 7.1 | — | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS get_info_ioctl Add validation that the info size returned from the metric stream info query is not exceeded when checked agai… |
CVE-2026-53044 | High | 7.1 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: soc/tegra: cbb: Fix incorrect ARRAY_SIZE in fabric lookup tables Fix incorrect ARRAY_SIZE usage in fabric lookup tables which could cause out-of-bounds access during tar… |
CVE-2026-53041 | High | 7.1 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix listxattr handling when the buffer is full [BUG] If an OCFS2 inode has both inline and block-based xattrs, listxattr() can return a size larger than the calle… |
CVE-2026-53040 | High | 7.1 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate bg_bits during freefrag scan [BUG] A crafted filesystem can trigger an out-of-bounds bitmap walk when OCFS2_IOC_INFO is issued with OCFS2_INFO_FL_NON_COH… |
CVE-2026-52988 | High | 7.1 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase Publish new hooks in the list into the basechain/flowtable using splice_list_rcu() to ensure n… |
CVE-2026-52953 | High | 7.1 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix oops due to out of scope access Below oops triggers when kill QEMU process: Oops: general protection fault, probably for non-canonical address 0x7ffff… |
CVE-2026-53196 | Medium | 6.8 | — | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() reads le16_to_cpu(rom_desc->Size) bytes from the device I2C EEPROM into a buffer allocated wit… |
CVE-2026-53365 | Medium | 5.5 | — | 2026-07-13 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the… |
CVE-2026-53364 | Medium | 5.5 | — | 2026-07-13 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() hci_le_big_terminate() allocates iso_list_data via kzalloc_obj but returns 0 without freeing it when neith… |
CVE-2026-53042 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal CXL is linked before fwctl in drivers/Makefile. |
CVE-2026-53039 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate group add input before caching [BUG] OCFS2_IOC_GROUP_ADD can trigger a BUG_ON in ocfs2_set_new_buffer_uptodate(): kernel BUG at fs/ocfs2/uptodate.c:509! |
CVE-2026-53038 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ima_fs: Correctly create securityfs files for unsupported hash algos ima_tpm_chip->allocated_banks[i].crypto_id is initialized to HASH_ALGO__LAST if the TPM algorithm is… |
CVE-2026-53037 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix deadlock in hid_post_reset() You can build a USB device that includes a HID component and a storage or UAS component. |
CVE-2026-53035 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix af_unix iter deadlock bpf_iter_unix_seq_show() may deadlock when lock_sock_fast() takes the fast path and the iter prog attempts to update a sockmap. |
CVE-2026-53034 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix af_unix null-ptr-deref in proto update unix_stream_connect() sets sk_state (`WRITE_ONCE(sk->sk_state, TCP_ESTABLISHED)`) _before_ it assigns a peer (`u… |
CVE-2026-53032 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL deref in map_kptr_match_type for scalar regs Commit ab6c637ad027 ("bpf: Fix a bpf_kptr_xchg() issue with local kptr") refactored map_kptr_match_type() to b… |
CVE-2026-53030 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: renesas: Fix memory leak in renesas_i3c_i3c_xfers() The xfer structure allocated by renesas_i3c_alloc_xfer() was never freed in the renesas_i3c_i3c_xfers()… |
CVE-2026-53029 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: prevent uninitialized lcn caused by zero len syzbot reported a uninit-value in ntfs_iomap_begin [1]. |
CVE-2026-53028 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: Fix error pointer dereference The variable tps->partner is checked for an error pointer and then if it is, it sends an error message but does not return and… |
CVE-2026-53023 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: terminate the cached volume label after UTF-8 conversion ntfs_fill_super() loads the on-disk volume label with utf16s_to_utf8s() and stores the result in sbi->… |
CVE-2026-53022 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: bound enumeration string aggregation populate_enum_data() aggregates firmware-provided value-modifier and possible-value strings into fixe… |
CVE-2026-53021 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix integer overflow in UNMAP bounds check sbc_execute_unmap() checks LBA + range does not exceed the device capacity, but does not guard against LBA… |
CVE-2026-53019 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc() Fix inverted condition that skips frequency change trigger, causing kernel panics during cpufreq s… |
CVE-2026-53018 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid reading already updated pages during GC We found the following issue during fuzz testing: page: refcount:3 mapcount:0 mapping:00000000b6e89c65 index:0x18b2d… |
CVE-2026-53017 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix data loss caused by incorrect use of nat_entry flag Data loss can occur when fsync is performed on a newly created file (before any checkpoint has been written… |
CVE-2026-53015 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: erofs: unify lcn as u64 for 32-bit platforms As sashiko reported [1], `lcn` was typed as `unsigned long` (or `unsigned int` sometimes), which is only 32 bits wide on 32-… |
CVE-2026-53014 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir In tcf_blockcast_redir(), when iterating block ports to redirect packets to mult… |
CVE-2026-53013 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF macvlan_get_size() does not account for IFLA_MACVLAN_BC_CUTOFF, but macvlan_fill_info() co… |
CVE-2026-53012 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic [1] [2]. |
CVE-2026-53007 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ice: fix potential NULL pointer deref in error path of ice_set_ringparam() ice_set_ringparam nullifies tstamp_ring of temporary tx_rings, without clearing ICE_TX_RING_FL… |
CVE-2026-53001 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: restrict several matches to inet family This is a partial revert of: commit ab4f21e6fb1c ("netfilter: xtables: use NFPROTO_UNSPEC in more extensio… |
CVE-2026-52997 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_change() Fix dualpi2_change() to correctly enforce updated limit and memlimit values after a configurat… |
CVE-2026-52996 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open ksmbd_lookup_fd_cguid() returns a ksmbd_file with its refcount incremented via ksmbd_fp_get(). |
CVE-2026-52995 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net/rds: zero per-item info buffer before handing it to visitors rds_for_each_conn_info() and rds_walk_conn_path_info() both hand a caller-allocated on-stack u64 buffer… |
CVE-2026-52994 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting virtio_transport_init_zcopy_skb() uses iter->count as the size argument for msg_zerocopy_realloc(), which in turn… |
CVE-2026-52990 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: fsnotify: fix inode reference leak in fsnotify_recalc_mask() fsnotify_recalc_mask() fails to handle the return value of __fsnotify_recalc_mask(), which may return an ino… |
CVE-2026-52985 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: netdevsim: zero initialize struct iphdr in dummy sk_buff Syzbot reports a KMSAN uninit-value originating from nsim_dev_trap_skb_build, with the allocation also being per… |
CVE-2026-52984 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in netem_enqueue() uses q->t_len which only counts packets in the internal tfi… |
CVE-2026-52980 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: sched/fair: Clear rel_deadline when initializing forked entities A yield-triggered crash can happen when a newly forked sched_entity enters the fair class with se->rel_d… |
CVE-2026-52979 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net: psp: check for device unregister when creating assoc psp_assoc_device_get_locked() obtains a psp_dev reference via psp_dev_get_for_sock() (which uses psp_dev_tryget… |
CVE-2026-52978 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net: psp: require admin permission for dev-set and key-rotate The dev-set and key-rotate netlink operations modify shared device state (PSP version configuration and cry… |
CVE-2026-52970 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: fix missing expect put in obj eval nft_ct_expect_obj_eval() allocates an expectation and may call nf_ct_expect_related(), but never drops its local re… |
CVE-2026-52966 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: drm: Replace old pointer to new idr Commit 5e28b7b94408 introduced a logical error by failing to replace the newly generated IDR pointer to old id's pointer at the corre… |
CVE-2026-52965 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure When ttm_tt_swapout() fails, the current code calls ttm_resource_add_bulk_move() followed by ttm_resou… |
CVE-2026-52964 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans The USB MIDI 2.0 endpoint parser has the same descriptor walking pattern as the legacy MIDI parser. |
CVE-2026-52963 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI endpoint descriptor scans snd_usbmidi_get_ms_info() validates the internal MIDIStreaming endpoint descriptor size before using baAssocJackID[… |
CVE-2026-52961 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size The generic/642 test-case can reproduce the kernel crash: [40243.605254] ------------[ cut here ]-… |
CVE-2026-52949 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure Apply the same fix as b2ed01e7ad ("drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure")… |
CVE-2026-52948 | Medium | 5.5 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl While fuzzing with Syzkaller, a persistent `schedule_timeout: wrong timeout value` warning was observed, accompan… |
CVE-2026-46092 | Medium | 5.5 | — | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: check for PCI upstream bridge existence pci_upstream_bridge() returns NULL if the device is on a root bus. |
CVE-2026-53008 | Medium | 4.7 | — | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ice: fix race condition in TX timestamp ring cleanup Fix a race condition between ice_free_tx_tstamp_ring() and ice_tx_map() that can cause a NULL pointer dereference. |
N/a · 70 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-52348 | Critical | 9.8 | — | 2026-07-17 | cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java. |
CVE-2026-36669 | Critical | 9.8 | — | 2026-07-17 | An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers to upload malicious files (such as .html) to the web-accessible /tmp/ directory. |
CVE-2026-51080 | Critical | 9.8 | — | 2026-07-17 | libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability. |
CVE-2026-38158 | Critical | 9.8 | — | 2026-07-16 | A SQL injection vulnerability in the /ureport/datasource/previewData component of ureport v2.2.9 allows attackers to access sensitive database information via crafted SQL statements. |
CVE-2026-30623 | Critical | 9.8 | — | 2026-07-15 | LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. |
CVE-2026-30618 | Critical | 9.8 | — | 2026-07-15 | xszyou Fay 4.3.1 contains a remote code execution vulnerability in its MCP STDIO server management and command execution handling. |
CVE-2025-65720 | Critical | 9.8 | — | 2026-07-15 | An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page. |
CVE-2026-51380 | Critical | 9.8 | — | 2026-07-15 | Buffer Overflow vulnerability in Tenda AC10 v3 (firmware V03.03.16.09) allows attackers to cause a permanent Denial of Service (DoS) or potentially execute remote code via the /cgi-bin/UploadCfg endpoint |
CVE-2026-51808 | Critical | 9.8 | — | 2026-07-14 | Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the openhtj2k_decoder_impl::invoke, invoke_line_based, invoke_line_based_stream, and invoke_line_based_predecoded function in s… |
CVE-2026-51807 | Critical | 9.8 | — | 2026-07-14 | Heap-based out-of-bounds write in j2k_precinct_subband::parse_packet_header() in OpenHTJ2K versions 0.18.3 and earlier (fixed in v0.18.4) caused by missing bounds validation before coding-pass lengths are written to j2k_codeblock::pass_len… |
CVE-2026-38450 | Critical | 9.8 | — | 2026-07-14 | An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name and description parameter of the Add/Update Project function |
CVE-2026-52533 | Critical | 9.8 | — | 2026-07-13 | An issue in D-Link DIR-1253 v.1.0.1.250923.142435 allows an attacker to escalate privileges via the etc/shadow component file |
CVE-2026-51821 | Critical | 9.8 | — | 2026-07-13 | SQL Injection vulnerability in Shenzhou Shihan Video Conference System v.1.0 allows a remote attacker to execute arbitrary code via the /user/getUserLogin endpoint |
CVE-2026-51540 | Critical | 9.8 | — | 2026-07-13 | OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the processing of connected explicit messages (SendUnitData). |
CVE-2026-31309 | Critical | 9.8 | — | 2026-07-08 | Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node from v1.21.1-rc0 before v1.36.0 allows an unauthenticated attacker to arbitrarily overwrite the node's configuration and achieve a full node takeover via a cra… |
CVE-2026-52199 | Critical | 9.1 | — | 2026-07-17 | An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd component |
CVE-2026-42168 | Critical | 9.1 | — | 2026-07-17 | django-pyas2 through 1.2.3 is vulnerable to OS command injection via the cmd_receive and cmd_send fields on the Partner model. |
CVE-2025-51677 | Critical | 9.1 | — | 2026-07-17 | An issue was discovered in openRISC OR1200 commit 83ac6b. |
CVE-2026-26718 | Critical | 9.1 | — | 2026-07-15 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the xxl-job-admin web application v.3.0.0 that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. |
CVE-2026-52101 | Critical | 9.1 | — | 2026-07-14 | An issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain sensitive information via the function uploadRemote function in upload.go |
CVE-2026-51541 | Critical | 9.1 | — | 2026-07-13 | OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged EPath size. |
CVE-2026-51538 | Critical | 9.1 | — | 2026-07-13 | EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an Incorrect Access Control vulnerability in its handling of encapsulation sessions. |
CVE-2026-51537 | Critical | 9.1 | — | 2026-07-13 | EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. |
CVE-2026-51536 | Critical | 9.1 | — | 2026-07-13 | In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the length parameter is inconsistently typed across the call stack. |
CVE-2025-45868 | High | 8.8 | — | 2026-07-16 | LogicalDOC Enterprise up to and for v9.1.1 is vulnerable to blind SQL injection in the ComparisonServlet component, allowing authenticated user to manipulate SQL queries via crafted input. |
CVE-2026-34253 | High | 8.2 | — | 2026-05-15 | A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. |
CVE-2026-57919 | High | 7.8 | — | 2026-06-29 | PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\PBackupVSS) with a DACL that grants GENERIC_READ and GENERIC_WRITE permissions to all authenticated users. |
CVE-2026-52203 | High | 7.5 | — | 2026-07-17 | An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter. |
CVE-2026-51833 | High | 7.5 | — | 2026-07-17 | Xenforo 2.3.8 is vulnerable to SSRF. |
CVE-2025-51678 | High | 7.5 | — | 2026-07-17 | An issue was discovered in RISC-V PicoRV32 commit 87c89a. |
CVE-2026-61371 | High | 7.5 | — | 2026-07-15 | Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/overwrite of the symlink target. |
CVE-2026-52100 | High | 7.5 | — | 2026-07-14 | Cross Site Request Forgery vulnerability in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to execute arbitrary code via the uploadPutHandler function |
CVE-2026-51105 | High | 7.5 | — | 2026-07-14 | Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service via the OP_SERVERMESSAGE Handler. |
CVE-2026-51539 | High | 7.5 | — | 2026-07-13 | A Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when running on Windows. |
CVE-2026-39042 | High | 7.5 | — | 2026-07-13 | An issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a remote attacker to cause a denial of service via the unflatten() function in libumsg.so. |
CVE-2026-26396 | High | 7.5 | — | 2026-07-13 | OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/application/routers/workspace.py. |
CVE-2025-61028 | High | 7.5 | — | 2026-06-23 | An issue in the time_t_to_dt component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
CVE-2025-61023 | High | 7.5 | — | 2026-06-23 | An issue in the st_compare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
CVE-2025-61020 | High | 7.5 | — | 2026-06-23 | An issue in the sqlo_strip_in_join component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
CVE-2025-61018 | High | 7.5 | — | 2026-06-23 | An issue in the sqlo_place_dt_set component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. |
CVE-2024-32386 | High | 7.3 | — | 2026-07-16 | Directory traversal vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the SNMP update mechanism. |
CVE-2025-45869 | High | 7.3 | — | 2026-07-13 | LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). |
CVE-2026-51082 | High | 7.2 | — | 2026-07-17 | A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment (PVE) 9.x pve-manager before 9.1.9 and 8.x before 8.4.19; qemu-server 9.x before 9.1.7 and 8.x before 8.4.7; and pve-container before 6.1.3 (PV… |
CVE-2026-52584 | High | 7.1 | — | 2026-07-17 | Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG function |
CVE-2024-34268 | High | 7.1 | — | 2026-07-16 | EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth connections. |
CVE-2026-51083 | Medium | 6.5 | — | 2026-07-17 | Incorrect access control in Proxmox Virtual Environment (PVE) 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users within limited privileges to obtain hashed passwords via the cloudinit/dump API. |
CVE-2026-36425 | Medium | 6.5 | — | 2026-07-16 | An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. |
CVE-2025-45870 | Medium | 6.5 | — | 2026-07-16 | LogicalDOC Enterprise up to and for v9.1.1 is vulnerable to Local File Inclusion (LFI) in the OnlyOfficeEditor servlet class, allowing authenticated user to exploit path traversal flaws in the fileExt parameter, enabling unauthorized acces… |
CVE-2026-36035 | Medium | 6.5 | — | 2026-07-14 | Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows authenticated attackers with low-level privileges to cause a Denial of Service (DoS) via removing the… |
CVE-2026-36214 | Medium | 6.4 | — | 2026-07-14 | osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitization, allowing remote attackers to execute arbitrary JavaScr… |
CVE-2026-15702 | Medium | 6.3 | — | 2026-07-14 | A security vulnerability has been detected in tamagui up to 2.3.0. |
CVE-2026-15510 | Medium | 6.3 | — | 2026-07-12 | A vulnerability was found in Leantime up to 3.8.0. |
CVE-2026-15509 | Medium | 6.3 | — | 2026-07-12 | A vulnerability has been found in Leantime up to 3.8.0. |
CVE-2026-15478 | Medium | 6.3 | — | 2026-07-12 | A flaw has been found in IceHRM up to 35.0.1. |
CVE-2026-51081 | Medium | 6.1 | — | 2026-07-17 | A cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment (PVE) 9.x 5.1.8 and Proxmox Virtual Environment (PVE) 8.x 4.3.16 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload. |
CVE-2026-26719 | Medium | 6.1 | — | 2026-07-15 | Cross Site Scripting vulnerability in xxl-job-admin v.3.0.0 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request containing a malicious script |
CVE-2024-32387 | Medium | 5.7 | — | 2026-07-16 | An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the community string component. |
CVE-2026-15516 | Medium | 5.6 | — | 2026-07-13 | A vulnerability was detected in MacCMS Pro up to 2022.1000.3005. |
CVE-2026-38974 | Medium | 5.3 | — | 2026-07-15 | Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py. |
CVE-2026-15530 | Medium | 5.3 | — | 2026-07-13 | A flaw has been found in WuzhiCMS up to 4.1.0. |
CVE-2026-15700 | Medium | 4.7 | — | 2026-07-14 | A security flaw has been discovered in DedeCMS 5.7.118. |
CVE-2026-15533 | Medium | 4.7 | — | 2026-07-13 | A security flaw has been discovered in DedeCMS 5.7.118. |
CVE-2024-32385 | Medium | 4.3 | — | 2026-07-16 | An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via a boardID and revisionID components |
CVE-2024-32389 | Low | 3.5 | — | 2026-07-16 | Buffer Overflow vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the update URLs component. |
CVE-2026-14686 | Low | 3.3 | — | 2026-07-05 | A vulnerability was found in HdrHistogram up to 2.2.2. |
CVE-2026-14685 | Low | 3.3 | — | 2026-07-05 | A vulnerability has been found in HdrHistogram up to 2.2.2. |
CVE-2026-14684 | Low | 3.3 | — | 2026-07-05 | A flaw has been found in HdrHistogram up to 2.2.2. |
CVE-2026-14683 | Low | 3.3 | — | 2026-07-04 | A vulnerability was detected in HdrHistogram up to 2.2.2. |
CVE-2026-15690 | Low | 3.1 | — | 2026-07-14 | A vulnerability was identified in open62541 up to 1.5.5. |
CVE-2026-15605 | Low | 3.1 | — | 2026-07-13 | A security vulnerability has been detected in wandb 0.25.2.dev1. |
Adobe · 53 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48322 | Critical | 9.9 | — | 2026-07-14 | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48318 | Critical | 9.9 | — | 2026-07-14 | ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. |
CVE-2026-48284 | Critical | 9.6 | — | 2026-07-14 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48359 | Critical | 9.6 | — | 2026-07-14 | Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48259 | Critical | 9.6 | — | 2026-07-14 | Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48325 | Critical | 9.3 | — | 2026-07-14 | ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48321 | Critical | 9.3 | — | 2026-07-14 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. |
CVE-2026-48356 | Critical | 9.3 | — | 2026-07-14 | Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim… |
CVE-2026-48324 | Critical | 9.1 | — | 2026-07-14 | ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48319 | Critical | 9.1 | — | 2026-07-14 | ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48358 | Critical | 9.1 | — | 2026-07-14 | Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48327 | Critical | 9.0 | — | 2026-07-14 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47994 | High | 8.7 | — | 2026-07-14 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. |
CVE-2026-48310 | High | 8.6 | — | 2026-07-14 | Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. |
CVE-2026-48252 | High | 8.6 | — | 2026-07-14 | Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass. |
CVE-2026-47988 | High | 8.6 | — | 2026-07-14 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. |
CVE-2026-48320 | High | 8.5 | — | 2026-07-14 | ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-47984 | High | 8.2 | — | 2026-07-14 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. |
CVE-2026-48364 | High | 8.2 | — | 2026-07-13 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48363 | High | 8.2 | — | 2026-07-13 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47995 | High | 8.1 | — | 2026-07-14 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. |
CVE-2026-48370 | High | 7.8 | — | 2026-07-14 | Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48369 | High | 7.8 | — | 2026-07-14 | Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48367 | High | 7.8 | — | 2026-07-14 | After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48366 | High | 7.8 | — | 2026-07-14 | Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48274 | High | 7.8 | — | 2026-07-14 | After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48270 | High | 7.8 | — | 2026-07-14 | Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48269 | High | 7.8 | — | 2026-07-14 | Premiere Pro is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47976 | High | 7.8 | — | 2026-07-14 | Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-47971 | High | 7.8 | — | 2026-07-14 | Media Encoder is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48332 | High | 7.7 | — | 2026-07-14 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. |
CVE-2026-48328 | High | 7.7 | — | 2026-07-14 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. |
CVE-2026-47992 | High | 7.2 | — | 2026-07-14 | Adobe Commerce is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. |
CVE-2026-48338 | Medium | 6.8 | — | 2026-07-14 | ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. |
CVE-2026-47996 | Medium | 6.8 | — | 2026-07-14 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. |
CVE-2026-48000 | Medium | 6.1 | — | 2026-07-14 | Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. |
CVE-2026-48308 | Medium | 5.9 | — | 2026-07-14 | Premiere Pro is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. |
CVE-2026-47998 | Medium | 5.9 | — | 2026-07-14 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. |
CVE-2026-47997 | Medium | 5.9 | — | 2026-07-14 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. |
CVE-2026-47979 | Medium | 5.5 | — | 2026-07-14 | Media Encoder is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. |
CVE-2026-48371 | Medium | 5.4 | — | 2026-07-14 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. |
CVE-2026-48355 | Medium | 5.4 | — | 2026-07-14 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. |
CVE-2026-48263 | Medium | 5.4 | — | 2026-07-14 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. |
CVE-2026-48262 | Medium | 5.4 | — | 2026-07-14 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48261 | Medium | 5.4 | — | 2026-07-14 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48260 | Medium | 5.4 | — | 2026-07-14 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48257 | Medium | 5.4 | — | 2026-07-14 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48255 | Medium | 5.4 | — | 2026-07-14 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48254 | Medium | 5.4 | — | 2026-07-14 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-48253 | Medium | 5.4 | — | 2026-07-14 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. |
CVE-2026-47999 | Medium | 4.8 | — | 2026-07-14 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. |
CVE-2026-48001 | Low | 3.7 | — | 2026-07-14 | Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information. |
CVE-2026-48329 | Low | 2.7 | — | 2026-07-14 | ColdFusion is affected by an Insufficient Session Expiration vulnerability that could result in a Security feature bypass. |
Openclaw · 46 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8634 | Critical | 9.1 | — | 2026-05-14 | Crabbox prior to v0.12.0 contains an environment variable exposure vulnerability that allows attackers with access to a malicious or compromised repository to forward local secrets such as API tokens, cloud credentials, and broker tokens i… |
CVE-2026-62229 | High | 8.8 | — | 2026-07-17 | OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that allows lower-trust callers to execute actions beyond intended authorization. |
CVE-2026-62228 | High | 8.8 | — | 2026-07-17 | OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust callers to execute actions beyond their intended authorization by using different gateway and node environments. |
CVE-2026-62223 | High | 8.8 | — | 2026-07-17 | OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature that allows lower-trust callers to execute actions beyond their intended authorization. |
CVE-2026-62218 | High | 8.8 | — | 2026-07-17 | OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerability in the device.pair.approve feature that allows lower-trust callers to bypass role-management checks. |
CVE-2026-62217 | High | 8.8 | — | 2026-07-17 | OpenClaw 2026.5.14-beta.1 before 2026.5.27 contain an authorization flaw in the QQBot exec approvals feature. |
CVE-2026-62207 | High | 8.8 | — | 2026-07-17 | OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust callers to reach admin-scoped tools. |
CVE-2026-62203 | High | 8.8 | — | 2026-07-17 | OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. |
CVE-2026-62202 | High | 8.8 | — | 2026-07-17 | OpenClaw versions 2026.6.1 before 2026.6.9 contain a privilege escalation vulnerability in isolated cron jobs that allows lower-trust callers to regain denied execution tools. |
CVE-2026-62200 | High | 8.8 | — | 2026-07-13 | OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. |
CVE-2026-62199 | High | 8.8 | — | 2026-07-13 | OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter startup variables. |
CVE-2026-62194 | High | 8.8 | — | 2026-07-13 | OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in plugin install commands that allows lower-trust callers to execute or persist actions beyond their intended authorization. |
CVE-2026-62190 | High | 8.8 | — | 2026-07-13 | OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allows lower-trust callers to execute or persist actions beyond their intended authorization. |
CVE-2026-8621 | High | 8.8 | — | 2026-05-14 | Crabbox prior to v0.12.0 contains an authentication bypass vulnerability that allows non-admin shared-token callers to impersonate other owners or organizations by spoofing identity headers. |
CVE-2026-62226 | High | 8.5 | — | 2026-07-17 | OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. |
CVE-2026-62197 | High | 8.5 | — | 2026-07-13 | OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket URLs. |
CVE-2026-62196 | High | 8.3 | — | 2026-07-13 | OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can satisfy elevated sender allowlists. |
CVE-2026-62195 | High | 8.3 | — | 2026-07-13 | OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the MCP loopback feature that allows lower-trust callers to execute owner-only tools. |
CVE-2026-62209 | High | 8.1 | — | 2026-07-17 | OpenClaw versions 2026.5.10-beta.1 before 2026.6.5 contain an authorization bypass in the ClickClack agent-mode dispatch feature, which could ignore the toolsAllow policy check. |
CVE-2026-62192 | High | 8.1 | — | 2026-07-13 | OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions that allows lower-trust callers to perform actions requiring stronger authorization checks. |
CVE-2026-62188 | High | 8.1 | — | 2026-07-13 | OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which the Feishu permission tools could ignore per-account disablement settings. |
CVE-2026-62187 | High | 8.1 | — | 2026-07-13 | OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. |
CVE-2026-8629 | High | 8.1 | — | 2026-05-14 | Crabbox prior to v0.12.0 contains a privilege escalation vulnerability that allows users with shared visibility-only access to obtain Code, WebVNC, and Egress agent tickets by sending POST requests to ticket endpoints. |
CVE-2026-62215 | High | 8.0 | — | 2026-07-17 | OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas responses that allows lower-trust callers to forge trusted A2UI actions. |
CVE-2026-62222 | High | 7.8 | — | 2026-07-17 | OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. |
CVE-2026-62227 | High | 7.7 | — | 2026-07-17 | OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that fail to validate post-navigation destinations. |
CVE-2026-62201 | High | 7.7 | — | 2026-07-17 | OpenClaw versions before 2026.6.6 contain a network policy bypass vulnerability in the sandbox exec-server that allows lower-trust callers to reach internal network destinations blocked by OpenClaw policy. |
CVE-2026-62186 | High | 7.6 | — | 2026-07-13 | OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model overrides that allows lower-trust callers to perform actions requiring stronger authorization checks. |
CVE-2026-62219 | High | 7.1 | — | 2026-07-17 | OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks allowedAgentIds validation. |
CVE-2026-62212 | High | 7.1 | — | 2026-07-17 | OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check. |
CVE-2026-62206 | High | 7.1 | — | 2026-07-17 | OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions. |
CVE-2026-62205 | High | 7.1 | — | 2026-07-17 | OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message actions feature. |
CVE-2026-62191 | High | 7.1 | — | 2026-07-13 | OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in message mutation handling that allows lower-trust callers to perform actions requiring stronger authorization checks. |
CVE-2026-62189 | High | 7.1 | — | 2026-07-13 | OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower-trust callers to perform actions requiring stronger authorization. |
CVE-2026-62214 | Medium | 6.5 | — | 2026-07-17 | OpenClaw versions before 2026.5.28 Bot Framework contains an improper input validation vulnerability that allows lower-trust callers to expose bot tokens and credentials by failing to properly validate serviceUrl parameters. |
CVE-2026-62213 | Medium | 6.5 | — | 2026-07-17 | OpenClaw versions before 2026.5.27 contain a token leakage vulnerability in MS Teams outbound requests that allows lower-trust callers to expose Bot Framework tokens. |
CVE-2026-62210 | Medium | 6.5 | — | 2026-07-17 | OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-read attacks that exhaust gateway worker resources. |
CVE-2026-62208 | Medium | 6.5 | — | 2026-07-17 | OpenClaw before 2026.6.5 could forward Authorization headers during MCP SSE redirects. |
CVE-2026-62225 | Medium | 5.4 | — | 2026-07-17 | OpenClaw versions before 2026.5.18 contain an authorization bypass vulnerability in skill command dispatch that allows lower-trust callers to execute or persist actions beyond their intended authorization. |
CVE-2026-62224 | Medium | 5.4 | — | 2026-07-17 | OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable display names. |
CVE-2026-62221 | Medium | 5.4 | — | 2026-07-17 | OpenClaw 2026.5.12 before 2026.5.26 contain an incorrect authorization vulnerability in the ClickClack allowFrom feature. |
CVE-2026-62220 | Medium | 5.3 | — | 2026-07-17 | OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser rate limits on WebSocket authentication attempts. |
CVE-2026-62216 | Medium | 5.0 | — | 2026-07-17 | OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. |
CVE-2026-62211 | Medium | 5.0 | — | 2026-07-17 | OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted boundaries. |
CVE-2026-62193 | Medium | 4.9 | — | 2026-07-13 | OpenClaw versions 2026.6.5 before 2026.6.9 contain a vulnerability in the plugin install wrappers that could skip the install policy (authorization) check. |
CVE-2026-62198 | Medium | 4.3 | — | 2026-07-13 | OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. |
Unknown · 41 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9810 | Critical | 9.8 | — | 2026-07-17 | The AI Copilot WordPress plugin before 1.5.4 does not bind OAuth access tokens to a WordPress user, and accepts any valid token as an administrator session, allowing unauthenticated attackers who complete the public OAuth flow to execute… |
CVE-2026-12492 | Critical | 9.8 | — | 2026-07-16 | The Happy Coders OTP Login for WooCommerce WordPress plugin before 2.8 does not verify that a one-time password was actually validated before authenticating a user based on a supplied identifier, allowing unauthenticated attackers to log i… |
CVE-2026-11563 | Critical | 9.6 | — | 2026-07-14 | The Word Count and Social Shares WordPress plugin through 1.0 does not validate a user-supplied file path before deletion, nor does it have proper authorization or CSRF checks, allowing any authenticated user, such as a Subscriber, to dele… |
CVE-2026-11964 | Critical | 9.1 | — | 2026-07-13 | The User Registration & Membership WordPress plugin before 5.2.2 does not verify the authenticity of incoming payment-provider webhook notifications before acting on them, allowing unauthenticated attackers to forge a payment-approved eve… |
CVE-2026-12525 | High | 8.8 | — | 2026-07-16 | The Redux Framework WordPress plugin before 4.5.13 does not restrict which user meta keys can be written when saving custom profile fields, allowing users with at least the Subscriber role to escalate their privileges to Administrator by s… |
CVE-2026-12512 | High | 8.6 | — | 2026-07-15 | The Quotes llama WordPress plugin before 3.1.6 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform UNION-based SQL injection and read arbitrary data… |
CVE-2026-12582 | High | 8.6 | — | 2026-07-13 | The Library Management System WordPress plugin before 3.5.8 does not sanitize and escape a user-supplied parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection and extract arbitrary data f… |
CVE-2026-11961 | High | 8.1 | — | 2026-07-17 | The User Registration & Membership WordPress plugin before 5.2.3 does not validate that the membership tier submitted during public registration is one of the tiers allowed by the registration form before assigning that tier's associated… |
CVE-2026-12585 | High | 8.1 | — | 2026-07-16 | The Abandoned Cart Lite for WooCommerce WordPress plugin before 6.8.2 does not protect the integrity of its cart-recovery tokens or bind them to the requesting account, allowing unauthenticated attackers to forge a recovery link that logs… |
CVE-2026-12281 | High | 8.1 | — | 2026-07-15 | The Shibboleth WordPress plugin before 2.5.4 does not fail closed when its HTTP header identity mode is enabled without an anti-spoofing key, treating any request that carries identity headers as an authenticated session without verifying… |
CVE-2026-12583 | High | 8.1 | — | 2026-07-14 | The Newsletters WordPress plugin before 4.15 does not prevent deserialization of untrusted input that is stored through a public form, allowing unauthenticated attackers to inject a PHP object and, via a property-oriented gadget chain bund… |
CVE-2026-12511 | High | 8.1 | — | 2026-07-14 | The AI Engine WordPress plugin before 3.5.5 does not sanitize a user-supplied filename before using it to write a downloaded file, allowing authenticated users with editor-level access to write attacker-controlled bytes to an arbitrary lo… |
CVE-2026-11963 | High | 8.1 | — | 2026-07-13 | The User Registration & Membership WordPress plugin before 5.2.2 does not perform an authorization check on a membership-upgrade action and derives the user to modify from a caller-supplied identifier instead of the current user, allowing… |
CVE-2026-11575 | High | 7.5 | — | 2026-07-17 | The PhonePe Payment Solutions WordPress plugin before 3.1.0 does not properly verify the authenticity of incoming payment callbacks: the secret used to validate the callback signature is empty on sites configured through the current setup… |
CVE-2026-12978 | High | 7.1 | — | 2026-07-16 | The FunnelKit WordPress plugin before 3.15.0.6 does not escape a user-supplied parameter before reflecting it into the HTML response of one of its page-builder AJAX actions, allowing unauthenticated attackers to perform Reflected Cross-Si… |
CVE-2026-12275 | High | 7.1 | — | 2026-07-13 | The Tutor LMS WordPress plugin before 3.9.13 does not, in its Droip and Kirki page-builder integration, perform the enrollment, purchase, and private-course capability checks it enforces in its core course handler, allowing authenticated… |
CVE-2026-12684 | Medium | 6.5 | — | 2026-07-16 | The Customer Reviews for WooCommerce WordPress plugin before 5.113.0 does not perform authentication, capability, or nonce checks on one of its media upload AJAX actions when the review media attachment feature is enabled, allowing unauthe… |
CVE-2026-12395 | Medium | 6.5 | — | 2026-07-16 | The WP Job Portal WordPress plugin before 2.5.5 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with a subscriber-level (self-registerable) account to perform SQL injection at… |
CVE-2026-12274 | Medium | 6.5 | — | 2026-07-13 | The Tutor LMS WordPress plugin before 3.9.13 does not verify that the requesting user is allowed to edit a target post before overwriting it in one of its content-builder save handlers, authorizing the request only against an unrelated id… |
CVE-2026-12988 | Medium | 6.4 | — | 2026-07-14 | The WP 2FA WordPress plugin before 3.1.1.2 does not verify that the email address supplied during two-factor authentication setup belongs to the user, allowing an attacker who has obtained a user's credentials to redirect the setup verifi… |
CVE-2026-10525 | Medium | 6.1 | — | 2026-07-17 | The NEX-Forms WordPress plugin before 9.2.3 does not sanitise and escape some submitted form data before storing it and outputting it back in the admin dashboard, leading to a Stored Cross-Site Scripting vulnerability which could allow un… |
CVE-2026-12869 | Medium | 6.1 | — | 2026-07-16 | The Header Footer Builder for Elementor WordPress plugin before 1.2.1 does not require an administrative capability for its dashboard template-import action (it allows any edit_posts user), so a Contributor can import a template containing… |
CVE-2026-11371 | Medium | 6.1 | — | 2026-07-16 | The BetterDocs WordPress plugin before 4.5.5 does not sanitise an AI-generated documentation summary before storing and outputting it, and the feature that generates it is exposed to unauthenticated users, allowing them to store a malicio… |
CVE-2026-10551 | Medium | 6.1 | — | 2026-07-13 | The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) due to a predictable replacement hash used during the HTML minification process and abusing a regular expression. |
CVE-2026-12510 | Medium | 5.9 | — | 2026-07-16 | The AI Engine WordPress plugin before 3.5.5 does not verify that a user owns the chatbot conversation referenced by a client-supplied identifier, allowing users with subscriber-level access to read other users' private conversations and t… |
CVE-2026-11567 | Medium | 5.9 | — | 2026-07-14 | The SureForms WordPress plugin before 2.11.1 does not properly validate the payment amount on forms that use a dynamically-sourced (variable/hidden) payment amount, allowing unauthenticated users to underpay for the configured product or… |
CVE-2026-12979 | Medium | 5.5 | — | 2026-07-16 | The FunnelKit WordPress plugin before 3.15.0.6 does not validate a user-supplied path before deleting a file during a template-import operation, allowing users with administrator privileges to delete arbitrary .json files outside the inte… |
CVE-2026-11580 | Medium | 5.5 | — | 2026-07-15 | The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.17 does not perform a per-object capability check in its post-duplication AJAX action, allowing users with Contributor-level access or above to duplicate any… |
CVE-2026-12393 | Medium | 5.4 | — | 2026-07-17 | The WPS Bookings for WooCommerce WordPress plugin before 3.11.7 does not verify that a booking order belongs to the requesting user before cancelling it, allowing any authenticated user, such as a Subscriber or Customer, to cancel and void… |
CVE-2026-11866 | Medium | 5.4 | — | 2026-07-16 | The Appointment Booking Plugin WordPress plugin before 5.6.3 does not validate a CSRF nonce on several state-changing actions handled by its central request dispatcher, allowing attackers to perform privileged actions, such as overwriting… |
CVE-2025-15665 | Medium | 5.4 | — | 2026-07-14 | The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.1 does not escape the value of the BEAF Slider widget's shortcode field before outputting it on the front end (the value is passed through do_shortcode, which ec… |
CVE-2026-12396 | Medium | 5.4 | — | 2026-07-13 | The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks before allowing job moderation actions, allowing authenticated users with a subscriber-level (self-registerable) account to approve, feature… |
CVE-2026-12271 | Medium | 5.4 | — | 2026-07-13 | The Tutor LMS WordPress plugin before 3.9.13 does not verify ownership of the targeted quiz attempt before writing to it, allowing authenticated users with subscriber-level access and above to modify and force-complete other students' qui… |
CVE-2026-13402 | Medium | 5.3 | — | 2026-07-17 | The Royal Addons for Elementor WordPress plugin before 1.7.1063 does not check the post status of menu items or the templates they reference in one of its REST endpoints, allowing unauthenticated users to retrieve the rendered HTML conten… |
CVE-2026-11966 | Medium | 5.3 | — | 2026-07-17 | The User Registration & Membership WordPress plugin before 5.2.3 does not perform a capability check for unauthenticated callers on one of its membership payment actions and acts on a caller-supplied user identifier, allowing unauthentica… |
CVE-2026-11579 | Medium | 5.3 | — | 2026-07-15 | The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.17 does not verify that a file upload is made against an existing form configured with a file-upload field, accepting uploads regardless of whether any such… |
CVE-2026-12081 | Medium | 5.0 | — | 2026-07-13 | The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.2 does not restrict the PHP classes allowed when unserializing an attacker-supplied form-field value, allowing unauthenticated users to inject arbitrary… |
CVE-2026-12397 | Medium | 4.3 | — | 2026-07-13 | The WP Job Portal WordPress plugin before 2.5.5 does not verify ownership when returning an employer's contact email for a given job, allowing authenticated users with a subscriber-level (self-registerable) account to read other employers… |
CVE-2026-12273 | Medium | 4.3 | — | 2026-07-13 | The Tutor LMS WordPress plugin before 3.9.13 does not perform any authorization or post-target validation before creating a comment in one of its handlers, and stores the comment pre-approved, allowing authenticated users with subscriber-… |
CVE-2026-12907 | Low | 2.7 | — | 2026-07-16 | The RTMKit WordPress plugin before 2.0.9 does not perform a proper capability check on one of its -builder AJAX actions, allowing users with at least the Author role to create and activate a site-wide template that overrides the header, fo… |
CVE-2026-12906 | Low | 2.7 | — | 2026-07-16 | The RTMKit WordPress plugin before 2.0.9 does not perform a capability check in one of its AJAX actions and resolves a request-supplied post identifier directly, allowing users with at least the Contributor role to read the titles of other… |
Red Hat · 39 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11807 | Critical | 9.6 | — | 2026-06-23 | A missing authorization vulnerability was found in the Event-Driven Ansible (EDA) websocket API. |
CVE-2026-5674 | High | 8.8 | — | 2026-07-16 | A flaw was found in PipeWire, a multimedia server. |
CVE-2026-12856 | High | 8.8 | — | 2026-06-29 | A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. |
CVE-2026-12382 | High | 8.2 | — | 2026-07-15 | A flaw was found in the AAP Gateway Envoy proxy configuration. |
CVE-2026-11800 | High | 8.1 | — | 2026-06-25 | A flaw was found in Keycloak. |
CVE-2026-7504 | High | 8.1 | — | 2026-05-19 | A flaw was found in Keycloak's URL validation logic during redirect operations. |
CVE-2026-3842 | High | 7.8 | — | 2026-07-16 | A flaw was found in QEMU. |
CVE-2026-15809 | High | 7.8 | — | 2026-07-15 | A flaw was found in CRI-O. |
CVE-2026-12112 | High | 7.8 | — | 2026-06-23 | A flaw was found in the foreman-mcp-server. |
CVE-2026-14251 | High | 7.7 | — | 2026-07-15 | A flaw was found in the OpenShift GitOps operator. |
CVE-2026-9099 | High | 7.7 | — | 2026-06-25 | A flaw was found in Keycloak. |
CVE-2026-11774 | High | 7.6 | — | 2026-06-11 | An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). |
CVE-2026-15711 | High | 7.5 | — | 2026-07-14 | A vulnerability was found in libsoup's WebSocket frame parsing implementation. |
CVE-2026-15709 | High | 7.5 | — | 2026-07-14 | A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. |
CVE-2026-15584 | High | 7.5 | — | 2026-07-13 | A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. |
CVE-2026-15574 | High | 7.5 | — | 2026-07-13 | A flaw was found in the vllm-orchestrator-gateway component. |
CVE-2026-7507 | High | 7.5 | — | 2026-05-19 | A session fixation vulnerability was found in Keycloak's login-actions endpoints. |
CVE-2026-3195 | High | 7.4 | — | 2026-06-19 | A flaw was found in QEMU. |
CVE-2026-58379 | High | 7.3 | — | 2026-07-03 | A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. |
CVE-2026-9086 | High | 7.3 | — | 2026-06-25 | A flaw was found in Keycloak. |
CVE-2026-9795 | High | 7.3 | — | 2026-05-28 | A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. |
CVE-2026-16118 | High | 7.1 | — | 2026-07-17 | A flaw was found in xdgmime. |
CVE-2026-15714 | Medium | 6.5 | — | 2026-07-14 | An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. |
CVE-2026-62147 | Medium | 6.5 | — | 2026-07-13 | The Tempo Operator's gateway component failed to consistently apply namespace-scoped redaction on some query API response paths when query RBAC was enabled, allowing an authenticated user to read span attributes belonging to other tenants'… |
CVE-2026-15044 | Medium | 6.3 | — | 2026-07-08 | A flaw was found in the TrustyAI Service Operator. |
CVE-2026-9073 | Medium | 6.2 | — | 2026-06-23 | A flaw was found in foreman-mcp-server. |
CVE-2026-15779 | Medium | 6.1 | — | 2026-07-15 | A flaw was found in samba's pam_winbind. |
CVE-2026-15713 | Medium | 5.9 | — | 2026-07-14 | A vulnerability was found in libsoup's HTTP/2 protocol implementation. |
CVE-2026-15712 | Medium | 5.9 | — | 2026-07-14 | A heap buffer over-read vulnerability was discovered in libsoup's (versions: libsoup 3.0 to 3.7.0) HTTP/2 connection tracking framework. |
CVE-2026-15943 | Medium | 5.5 | — | 2026-07-17 | A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. |
CVE-2026-16093 | Medium | 5.4 | — | 2026-07-17 | Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them to use signed JWTs for authentication. |
CVE-2026-16089 | Medium | 5.4 | — | 2026-07-17 | A flaw was found in the keycloak-services component of Red Hat Build of Keycloak. |
CVE-2026-16106 | Medium | 4.9 | — | 2026-07-17 | A flaw was found in the admin REST API of Keycloak, a solution for identity and access management. |
CVE-2026-16072 | Medium | 4.9 | — | 2026-07-17 | A flaw was found in the organization management component of Keycloak. |
CVE-2026-12478 | Medium | 4.8 | — | 2026-07-14 | The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside the if (masked) block, leaving unmasked server-to-client frames unprotected. |
CVE-2026-16108 | Medium | 4.3 | — | 2026-07-17 | A flaw was found in the default-groups REST endpoint and realm representation of Keycloak. |
CVE-2026-16104 | Medium | 4.3 | — | 2026-07-17 | A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. |
CVE-2026-16103 | Medium | 4.3 | — | 2026-07-17 | A flaw was found in the keycloak-services component of Keycloak. |
CVE-2026-15945 | Medium | 4.3 | — | 2026-07-16 | A flaw was found in the group search functionality of the Keycloak server's administrative API. |
Zephyrproject · 32 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10673 | High | 8.3 | — | 2026-07-15 | The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reassembles received Ethernet frames in OPEN Alliance (OA) SPI mode by copying device-supplied 64-byte data chunks into a fixed static buffer ctx… |
CVE-2026-10672 | High | 8.2 | — | 2026-07-14 | subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmware-update Package URI into a fixed static buffer (context.uri, size CONFIG_LWM2M_SWMGMT_PACKAGE_URI_LEN, default 128) with memcpy(context.uri, uri, LWM2M_PACKAGE_URI_LEN), copying… |
CVE-2026-10666 | High | 8.1 | — | 2026-07-12 | parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port") copies the port substring into a fixed 17-byte stack buffer (char ipaddr[NET_IPV4_ADDR_LEN + 1]) using a length of str_len - end… |
CVE-2026-10669 | High | 7.8 | — | 2026-07-14 | On Xtensa SoCs built with CONFIG_XTENSA_MPU and CONFIG_USERSPACE, arch_buffer_validate() in arch/xtensa/core/mpu.c — the architecture hook that verifies a user-mode-supplied buffer is accessible to the calling user thread with the requeste… |
CVE-2026-10667 | High | 7.8 | — | 2026-07-12 | Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c) maintains a doubly-linked list (obj_list) of dynamically allocated kernel objects. |
CVE-2026-8023 | High | 7.5 | — | 2026-06-29 | Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that serves files from a configured root directory. |
CVE-2026-10665 | High | 7.4 | — | 2026-07-12 | In Zephyr's WireGuard subsystem (subsys/net/lib/wireguard), wg_process_data_message() in wg_crypto.c linearizes an inbound transport-data payload into a fixed pool buffer of CONFIG_WIREGUARD_BUF_LEN bytes before decryption. |
CVE-2026-10671 | High | 7.1 | — | 2026-07-14 | In Zephyr's kernel pipe implementation, the userspace syscall verifier z_vrfy_k_pipe_init() in kernel/pipe.c used K_SYSCALL_OBJ() (which requires the kernel object to already be initialized) instead of K_SYSCALL_OBJ_NEVER_INIT() (which rej… |
CVE-2026-10658 | High | 7.1 | — | 2026-06-23 | bt_iso_recv() in subsys/bluetooth/host/iso.c pulled the ISO SDU header (4 bytes) or, when the timestamp flag is set, the timestamped SDU header (8 bytes) from the inbound HCI ISO Data buffer via net_buf_pull_mem() without first checking bu… |
CVE-2026-10651 | High | 7.1 | — | 2026-06-23 | bt_sdp_parse_attribute() in subsys/bluetooth/host/classic/sdp.c validated only that the SDP record buffer held the type-marker byte plus the 2-byte attribute ID (a check of buf->len < 3) but then read a fourth byte, the data-element descri… |
CVE-2026-10641 | High | 7.1 | — | 2026-06-17 | Zephyr's Bluetooth Classic Hands-Free Profile (HFP) Hands-Free role parser (subsys/bluetooth/host/classic/hfp_hf.c) contains an out-of-bounds write. |
CVE-2026-9263 | Medium | 6.5 | — | 2026-06-30 | The Zephyr Bluetooth controller ISO Adaptation Layer (subsys/bluetooth/controller/ll_sw/isoal.c) fails to validate the length field of a framed ISO PDU start segment. |
CVE-2026-10655 | Medium | 6.5 | — | 2026-06-30 | The asynchronous SNTP client in Zephyr (subsys/net/lib/sntp/sntp.c, sntp_close_async) closed the UDP socket file descriptor directly from the calling thread immediately after detaching it from the network socket service, without synchroniz… |
CVE-2026-10593 | Medium | 6.5 | — | 2026-06-28 | The Zephyr Bluetooth LE Audio Basic Audio Profile (BAP) unicast client mishandles peer-supplied ASE state notifications. |
CVE-2026-10660 | Medium | 6.4 | — | 2026-07-11 | The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bap_broadcast_assistant.c reassembled remote Broadcast Receive State data into a single file-static net_buf_simple (att_buf, BT_ATT_MAX_ATTRIBUTE_LEN = 512 bytes)… |
CVE-2026-10635 | Medium | 6.3 | — | 2026-06-16 | On Xtensa targets with CONFIG_USERSPACE and CONFIG_XTENSA_MMU, the page-table code (arch/xtensa/core/ptables.c) maintains a global list, xtensa_domain_list, of active memory domains using a list node embedded inside the caller-owned struct… |
CVE-2026-10648 | Medium | 6.2 | — | 2026-06-29 | mcumgr_serial_process_frag() in subsys/mgmt/mcumgr/transport/src/serial_util.c calls net_buf_reset() on the result of smp_packet_alloc() before checking it for NULL. |
CVE-2026-10663 | Medium | 6.1 | — | 2026-07-12 | In Zephyr's experimental USB host stack (CONFIG_USB_HOST_STACK), usbh_device_disconnect() (subsys/usb/host/usbh_device.c) freed the root usb_device slab object without clearing the cached pointer ctx->root. |
CVE-2026-10638 | Medium | 5.9 | — | 2026-06-16 | subsys/net/ip/icmpv6.c reads the network interface from a net_pkt after that packet has been handed to net_try_send_data(). |
CVE-2026-10637 | Medium | 5.9 | — | 2026-06-16 | subsys/net/ip/ipv6_mld.c:mld_send() read the packet interface via net_pkt_iface(pkt) after net_send_data(pkt) returned successfully. |
CVE-2026-10670 | Medium | 5.5 | — | 2026-07-14 | The CONFIG_USERSPACE verification handler for the k_thread_name_copy() system call (z_vrfy_k_thread_name_copy() in kernel/thread.c) calls k_object_find() on the caller-supplied thread pointer and then dereferences the returned struct k_obj… |
CVE-2026-10664 | Medium | 5.0 | — | 2026-07-12 | The nRF70 Wi-Fi driver's power-save event handler nrf_wifi_event_proc_get_power_save_info() in drivers/wifi/nrf_wifi/src/wifi_mgmt.c copied TWT (Target Wake Time) flow entries from an nrf_wifi_umac_event_power_save_info event into the fixe… |
CVE-2026-10645 | Medium | 4.9 | — | 2026-06-23 | The Zephyr ext2 filesystem driver (subsys/fs/ext2) trusted the on-disk directory entry fields de_rec_len and de_name_len when walking a directory block. |
CVE-2026-10659 | Medium | 4.7 | — | 2026-07-07 | The Dhara flash translation layer disk driver (drivers/disk/ftl_dhara.c) implemented the dhara_nand_ callbacks so that, on a flash error, the error code was written unconditionally through the caller-supplied dhara_error_t err pointer (e.g. |
CVE-2026-10656 | Medium | 4.6 | — | 2026-07-05 | The MAX32xxx USB device controller driver (drivers/usb/udc/udc_max32.c, compatible adi_max32_usbhs) dereferenced an endpoint buffer in its OUT and IN transfer-completion handlers without checking it for NULL. |
CVE-2026-10642 | Medium | 4.6 | — | 2026-06-24 | The Zephyr PL011 UART driver (drivers/serial/uart_pl011.c) contains an unbounded software loop in pl011_irq_tx_enable() that repeatedly invokes the interrupt-driven application callback while the TX interrupt mask bit (PL011_IMSC_TXIM) is… |
CVE-2026-10644 | Medium | 4.2 | — | 2026-06-28 | The Microchip SERCOM-G1 UART driver (drivers/serial/uart_mchp_sercom_g1.c), used by the PIC32CM-JH SoC family, contains an out-of-bounds write in its asynchronous (DMA) receive path. |
CVE-2026-10640 | Medium | 4.2 | — | 2026-06-16 | Zephyr's IPv6 Neighbor Discovery send paths (net_ipv6_send_na, net_ipv6_send_ns, net_ipv6_send_rs in subsys/net/ip/ipv6_nbr.c) updated the per-interface ICMP-sent statistics by calling net_pkt_iface(pkt) after net_send_data(pkt) had alread… |
CVE-2026-10657 | Low | 3.7 | — | 2026-07-05 | Zephyr's DNS resolver detects mDNS (.local) queries in dns_resolve_name_internal() (subsys/net/lib/dns/resolve.c) with memcmp(strrchr(query, '.'), ".local", 7), which always reads a fixed 7 bytes from the suffix pointer. |
CVE-2026-10636 | Low | 3.7 | — | 2026-06-16 | In Zephyr's IPv4 IGMP implementation, igmp_send() in subsys/net/ip/igmp.c read the network interface back out of the packet via net_pkt_iface(pkt) after the packet had been handed to net_send_data(). |
CVE-2026-10654 | Low | 3.1 | — | 2026-06-30 | A race condition in the Zephyr Bluetooth Classic RFCOMM host stack (subsys/bluetooth/host/classic/rfcomm.c) mishandles a simultaneous bidirectional session disconnect. |
CVE-2026-10668 | Low | 2.4 | — | 2026-07-12 | The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) armed the control Data IN stage unconditionally (base->CEPTXCNT = len in numaker_hsusbd_ep_trigger). |
Sensiolabs · 26 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47767 | Critical | 9.8 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45069 | Critical | 9.1 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45063 | Critical | 9.1 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-48736 | High | 8.6 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45077 | High | 8.6 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45075 | High | 8.2 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45074 | High | 8.1 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-48489 | High | 7.5 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45071 | High | 7.5 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45068 | High | 7.5 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45305 | High | 7.5 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45304 | High | 7.5 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45133 | High | 7.5 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45756 | High | 7.5 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45070 | Medium | 6.5 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-48784 | Medium | 6.1 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-48761 | Medium | 6.1 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-48760 | Medium | 6.1 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45753 | Medium | 6.1 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45064 | Medium | 6.1 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45066 | Medium | 6.1 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45065 | Medium | 6.1 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45072 | Medium | 5.4 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-48747 | Medium | 5.3 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-47212 | Medium | 5.3 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
CVE-2026-45754 | Medium | 5.3 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
Symfony · 26 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46634 | Critical | 9.8 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-46633 | Critical | 9.8 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-48807 | Critical | 9.1 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-48806 | Critical | 9.1 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-48805 | Critical | 9.1 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-46640 | High | 8.8 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-49981 | High | 8.2 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-46638 | High | 8.1 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-49212 | High | 7.5 | — | 2026-07-17 | Symfony UX is a JavaScript ecosystem for Symfony. |
CVE-2026-49211 | High | 7.5 | — | 2026-07-17 | Symfony UX is a JavaScript ecosystem for Symfony. |
CVE-2026-48808 | High | 7.5 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-49209 | Medium | 6.5 | — | 2026-07-17 | Symfony UX is a JavaScript ecosystem for Symfony. |
CVE-2026-47732 | Medium | 6.5 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-46639 | Medium | 6.5 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-46629 | Medium | 6.5 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-46627 | Medium | 6.5 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-49210 | Medium | 6.1 | — | 2026-07-17 | Symfony UX is a JavaScript ecosystem for Symfony. |
CVE-2026-49216 | Medium | 5.4 | — | 2026-07-17 | Symfony UX is a JavaScript ecosystem for Symfony. |
CVE-2026-49215 | Medium | 5.4 | — | 2026-07-17 | Symfony UX is a JavaScript ecosystem for Symfony. |
CVE-2026-47730 | Medium | 5.4 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-46637 | Medium | 5.4 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-46628 | Medium | 5.4 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-49208 | Medium | 5.3 | — | 2026-07-17 | Symfony UX is a JavaScript ecosystem for Symfony. |
CVE-2026-46635 | Medium | 4.3 | — | 2026-07-14 | Twig is a template language for PHP. |
CVE-2026-46644 | — | — | — | 2026-07-14 | Symfony Polyfill backports PHP features and provides compatibility layers for extensions and functions. |
CVE-2026-45067 | — | — | — | 2026-07-14 | ### Description `Symfony\Component\Mime\Address` is the value-object every Symfony Mailer address (to/cc/bcc/from/reply-to) flows through; its constructor is documented as validating the address and throwing on invalid input, so developer… |
Hclsoftware · 23 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2024-23566 | Medium | 6.5 | — | 2026-07-17 | HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented. |
CVE-2026-21770 | Medium | 6.5 | — | 2026-07-17 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content. |
CVE-2026-56460 | Medium | 6.5 | — | 2026-07-09 | HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system. |
CVE-2026-35146 | Medium | 6.3 | — | 2026-07-16 | HCL DFXServer is affected by an Unencrypted Communication vulnerability. |
CVE-2024-42214 | Medium | 5.3 | — | 2026-07-17 | HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. |
CVE-2024-23575 | Medium | 5.3 | — | 2026-07-17 | HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak information about the processing on the server. |
CVE-2024-23574 | Medium | 5.3 | — | 2026-07-17 | HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use brute-force techniques to either guess or confirm valid users in the system. |
CVE-2024-23568 | Medium | 5.3 | — | 2026-07-17 | HCL Aftermarket EPC is vulnerable to attacks since the server software version used by the application is revealed by the web server. |
CVE-2024-23565 | Medium | 5.3 | — | 2026-07-17 | HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper mail limitation mechanism at Forget Password functionality. |
CVE-2026-21760 | Medium | 4.6 | — | 2026-07-17 | HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. |
CVE-2024-23577 | Medium | 4.3 | — | 2026-07-17 | HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary hosts when requested in http protocol. |
CVE-2024-23571 | Medium | 4.3 | — | 2026-07-17 | HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which the page and its form fields should be cached. |
CVE-2024-23570 | Medium | 4.3 | — | 2026-07-17 | HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique where an attacker loads a vulnerable application in an iFrame on his malicious site. |
CVE-2024-23569 | Medium | 4.3 | — | 2026-07-17 | HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header |
CVE-2024-23567 | Medium | 4.3 | — | 2026-07-17 | HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. |
CVE-2026-21761 | Medium | 4.2 | — | 2026-07-17 | HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. |
CVE-2024-23578 | Medium | 4.2 | — | 2026-07-17 | HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource sharing (CORS) policy for this request that allows access from any domain (*-Wildcard). |
CVE-2024-23572 | Medium | 4.2 | — | 2026-07-17 | HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this issue. |
CVE-2026-21762 | Low | 3.7 | — | 2026-07-17 | HCL DevOps Loop is affected by missing HTTP security headers. |
CVE-2024-23573 | Low | 3.7 | — | 2026-07-17 | HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. |
CVE-2025-59866 | Low | 3.3 | — | 2026-07-17 | The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable fil… |
CVE-2026-21764 | Low | 3.1 | — | 2026-07-17 | HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. |
CVE-2026-21840 | Low | 3.1 | — | 2026-07-14 | HCL BigFix Platform is affected by a user enumeration vulnerability which might allow an attacker, through careful system control and response time monitoring, to perform some level of user enumeration for the BigFix service. |
Imagemagick · 23 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56379 | High | 8.1 | — | 2026-06-23 | ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. |
CVE-2026-61871 | Low | 3.7 | — | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs when a memory allocation fails. |
CVE-2026-61868 | Low | 3.7 | — | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.x before 6.9.13-51 contains a memory leak in the YUV decoder that occurs when opening of the blob fails. |
CVE-2026-61860 | Low | 3.7 | — | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initialization fails: the method does not exit and continues to use memory that was already freed. |
CVE-2026-61861 | Low | 3.7 | — | 2026-07-11 | ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. |
CVE-2026-61857 | Low | 3.7 | — | 2026-07-11 | ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. |
CVE-2026-56373 | Low | 3.7 | — | 2026-07-10 | ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. |
CVE-2026-61859 | Low | 3.3 | — | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks. |
CVE-2026-56375 | Low | 3.3 | — | 2026-07-15 | ImageMagick through 7.1.2-18 contains a memory leak vulnerability in the ASHLAR coder when an action fails. |
CVE-2026-61858 | Low | 3.3 | — | 2026-07-11 | ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. |
CVE-2026-61465 | Low | 3.3 | — | 2026-07-11 | ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. |
CVE-2026-56372 | Low | 3.3 | — | 2026-07-11 | ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allows attackers to read out of bounds memory. |
CVE-2026-56366 | Low | 3.3 | — | 2026-07-10 | ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. |
CVE-2026-61869 | Low | 2.9 | — | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the MIFF encoder that occurs when a memory allocation fails during MIFF image processing, which can lead to denial of service. |
CVE-2026-61867 | Low | 2.9 | — | 2026-07-15 | ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation fails. |
CVE-2026-61866 | Low | 2.9 | — | 2026-07-15 | ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened. |
CVE-2026-61865 | Low | 2.9 | — | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the hough lines operation: when a specific operation fails, a small memory leak occurs. |
CVE-2026-61864 | Low | 2.9 | — | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace: when the operation fails, a small amount of memory is not released. |
CVE-2026-61863 | Low | 2.9 | — | 2026-07-15 | ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak. |
CVE-2026-61862 | Low | 2.9 | — | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is displayed with the identify command and the profile value is not printable, a single byte at the end of the profile can be printe… |
CVE-2026-61870 | Low | 2.9 | — | 2026-07-11 | ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. |
CVE-2026-61872 | Low | 2.5 | — | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid tiff:tile-geometry is specified. |
CVE-2026-61464 | Low | 1.8 | — | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service. |
Nvidia · 23 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-24233 | High | 8.4 | — | 2026-07-14 | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. |
CVE-2026-47472 | High | 7.8 | — | 2026-07-14 | NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. |
CVE-2026-24272 | High | 7.8 | — | 2026-07-14 | NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. |
CVE-2026-24268 | High | 7.8 | — | 2026-07-14 | NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. |
CVE-2026-24238 | High | 7.8 | — | 2026-07-14 | NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. |
CVE-2026-47471 | High | 7.5 | — | 2026-07-14 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. |
CVE-2026-47482 | High | 7.5 | — | 2026-07-14 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. |
CVE-2026-47480 | High | 7.5 | — | 2026-07-14 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. |
CVE-2026-47479 | High | 7.5 | — | 2026-07-14 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. |
CVE-2026-47478 | High | 7.5 | — | 2026-07-14 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor. |
CVE-2026-47477 | High | 7.5 | — | 2026-07-14 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. |
CVE-2026-47476 | High | 7.5 | — | 2026-07-14 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. |
CVE-2026-47473 | High | 7.4 | — | 2026-07-14 | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. |
CVE-2026-24229 | High | 7.3 | — | 2026-07-14 | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. |
CVE-2026-24234 | Medium | 6.8 | — | 2026-07-14 | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. |
CVE-2026-47481 | Medium | 6.5 | — | 2026-07-14 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. |
CVE-2026-24259 | Medium | 6.4 | — | 2026-07-14 | NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. |
CVE-2026-24220 | Medium | 6.4 | — | 2026-07-14 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. |
CVE-2026-24226 | Medium | 6.3 | — | 2026-07-14 | NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. |
CVE-2026-47475 | Medium | 6.2 | — | 2026-07-14 | NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. |
CVE-2026-47470 | Medium | 6.2 | — | 2026-07-14 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an attacker could cause CWE-20 by local attack. |
CVE-2026-24271 | Medium | 6.2 | — | 2026-07-14 | NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. |
CVE-2026-24227 | Medium | 5.3 | — | 2026-07-14 | NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. |
Mervinpraison · 22 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61447 | Critical | 10.0 | — | 2026-07-11 | PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. |
CVE-2026-61445 | Critical | 9.9 | — | 2026-07-11 | PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing path validation and command sanitization in LLM tool calls. |
CVE-2026-60090 | Critical | 9.8 | — | 2026-07-11 | PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection() backends. |
CVE-2026-61436 | High | 8.6 | — | 2026-07-15 | PraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail webhook mode, allowing unauthenticated attackers to forge message.received events. |
CVE-2026-61426 | High | 8.6 | — | 2026-07-11 | PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requirement and wildcard CORS. |
CVE-2026-61430 | High | 8.5 | — | 2026-07-15 | PraisonAI before 1.6.78 contains a server-side request forgery vulnerability in the web_crawl tool that validates hostnames at check time but re-resolves them at connection time without IP pinning. |
CVE-2026-61429 | High | 8.5 | — | 2026-07-11 | PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows attackers to bypass SSRF validation by exploiting DNS rebinding and HTTP redirects. |
CVE-2026-61446 | High | 8.4 | — | 2026-07-15 | PraisonAI (praisonaiagents) before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which loads and executes arbitrary Python (.py) files from project-level and user-home .praisonai/plugins/ directories using im… |
CVE-2026-61435 | High | 8.2 | — | 2026-07-15 | PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints (src/praisonai/praisonai/api/agent_invoke.py) when PRAISONAI_CALL_AUTH=disabled is configured. |
CVE-2026-61443 | High | 8.1 | — | 2026-07-15 | PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.run_skill_script() that executes scripts without path containment validation. |
CVE-2026-61433 | High | 7.8 | — | 2026-07-15 | PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. |
CVE-2026-61437 | High | 7.8 | — | 2026-07-10 | PraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading vulnerability in AgentFlow._resolve_pydantic_class (src/praisonai-agents/praisonaiagents/workflows/workflows.py). |
CVE-2026-60085 | High | 7.5 | — | 2026-07-15 | PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backend where blocked_commands, blocked_paths, blocked_imports, allow_subprocess, and allow_file_write restrictions are complete… |
CVE-2026-61439 | High | 7.5 | — | 2026-07-11 | PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults to CRITICAL severity, allowing HIGH-level threats to pass through unblocked. |
CVE-2026-61438 | High | 7.3 | — | 2026-07-15 | PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_python() due to insufficient AST validation of workflow script steps. |
CVE-2026-61427 | High | 7.3 | — | 2026-07-15 | PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key option defaults to None, and the server only enforces Authorization/Bearer checks when an API key is configured. |
CVE-2026-61428 | High | 7.3 | — | 2026-07-11 | PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attackers to inject messages with spoofed sender addresses. |
CVE-2026-61442 | High | 7.1 | — | 2026-07-11 | PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization on the PATCH routes for projects, issues, and agents, which only require workspace-member role. |
CVE-2026-61440 | Medium | 6.5 | — | 2026-07-15 | PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. |
CVE-2026-60087 | Medium | 6.1 | — | 2026-07-15 | PraisonAI before 1.6.78 caches tool approval decisions by tool name only, allowing attackers to reuse initial approvals for subsequent calls with arbitrary arguments. |
CVE-2026-60088 | Medium | 5.5 | — | 2026-07-11 | PraisonAI before 4.6.78 fails to validate file path references in custom command templates, allowing attackers to read files outside the workspace. |
CVE-2026-60086 | Medium | 5.3 | — | 2026-07-10 | PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. |
Mozilla · 21 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12293 | Critical | 9.8 | — | 2026-06-16 | Use-after-free in the Graphics: WebGPU component. |
CVE-2026-12297 | Critical | 9.6 | — | 2026-06-16 | Sandbox escape due to incorrect boundary conditions in the Networking component. |
CVE-2026-12296 | Critical | 9.6 | — | 2026-06-16 | Sandbox escape in the Security: Process Sandboxing component. |
CVE-2026-12295 | Critical | 9.6 | — | 2026-06-16 | Sandbox escape in the DOM: Navigation component. |
CVE-2026-12294 | Critical | 9.6 | — | 2026-06-16 | Sandbox escape in the DOM: Workers component. |
CVE-2026-8948 | Critical | 9.1 | — | 2026-05-19 | Same-origin policy bypass in the DOM: Networking component. |
CVE-2026-12291 | High | 8.8 | — | 2026-06-16 | Use-after-free in the Networking: HTTP component. |
CVE-2026-12289 | High | 8.8 | — | 2026-06-16 | Privilege escalation in the Graphics: WebRender component. |
CVE-2026-12328 | High | 8.1 | — | 2026-06-16 | Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. |
CVE-2026-12326 | High | 8.1 | — | 2026-06-16 | Memory safety bugs present in Firefox 151 and Thunderbird 151. |
CVE-2026-12292 | High | 8.1 | — | 2026-06-16 | Incorrect boundary conditions in the Web Audio component. |
CVE-2026-12290 | High | 8.1 | — | 2026-06-16 | Memory safety bug fixed in Firefox 152. |
CVE-2026-8946 | High | 7.5 | — | 2026-05-19 | Incorrect boundary conditions in the Audio/Video: Web Codecs component. |
CVE-2026-8945 | High | 7.5 | — | 2026-05-19 | Sandbox escape in Firefox and Firefox Focus for Android. |
CVE-2026-8947 | High | 7.3 | — | 2026-05-19 | Use-after-free in the DOM: Bindings (WebIDL) component. |
CVE-2026-15719 | Medium | 5.4 | — | 2026-07-14 | We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. |
CVE-2026-12299 | Medium | 5.4 | — | 2026-06-16 | JIT miscompilation in the DOM: Core & HTML component. |
CVE-2026-12298 | Medium | 5.4 | — | 2026-06-16 | Memory safety bug fixed in Firefox 152. |
CVE-2026-14906 | Medium | 5.3 | — | 2026-07-13 | Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. |
CVE-2026-12329 | Medium | 5.3 | — | 2026-06-16 | Memory safety bug fixed in Thunderbird ESR 140.12. |
CVE-2026-15718 | Medium | 4.3 | — | 2026-07-14 | We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. |
Getgrav · 20 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61451 | Critical | 9.6 | — | 2026-07-15 | The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of the client-supplied admin_base_url field in the POST /api/v1/auth/forgot-password endpoint. |
CVE-2026-62233 | High | 8.8 | — | 2026-07-17 | grav-plugin-api before 1.0.6 fails to validate super-admin status in createApiKey, generate2fa, and disable2fa endpoints, allowing non-super api.users.write managers to escalate to super-admin. |
CVE-2026-61457 | High | 8.8 | — | 2026-07-15 | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 contains a file upload extension bypass in the API media controller. |
CVE-2026-58655 | High | 8.8 | — | 2026-07-15 | The bundled Grav Flex Objects plugin (getgrav/grav-plugin-flex-objects) before 1.4.0 contains a stored server-side template injection vulnerability. |
CVE-2026-62234 | High | 8.1 | — | 2026-07-17 | Grav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated users with api.webhooks.write permission to create webhooks with file://, dict://, or gopher:// URLs. |
CVE-2026-62231 | High | 8.1 | — | 2026-07-17 | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.6 contains an authorization bypass: API keys can be created with a restricted scopes array, but the ApiKeyAuthenticator class never reads or enforces these scopes. |
CVE-2026-61873 | High | 8.1 | — | 2026-07-15 | Grav before 9.1.8 contains an arbitrary file write vulnerability in the Form plugin's process.save.filename parameter, which is validated against path traversal before Twig processing but never re-validated after rendering. |
CVE-2026-62386 | High | 7.5 | — | 2026-07-17 | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT access tokens through the ?token= URL query parameter on every API route (JwtAuthenticator::extractBearerToken fallback). |
CVE-2026-62230 | High | 7.5 | — | 2026-07-17 | Grav before 2.0.4 ships a default .htaccess (and reference webserver-configs/htaccess.txt) whose rules blocking access to sensitive file types (.yaml, .php, .json, etc.) lack the [NC] flag, making extension matching case-sensitive. |
CVE-2026-62232 | High | 7.4 | — | 2026-07-17 | Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin where the regenerate2FASecret task checks only user existence, not authorization, during the pending TOTP challenge window. |
CVE-2026-62387 | High | 7.1 | — | 2026-07-17 | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 shipped Access-Control-Allow-Origin: * as its default CORS configuration on all responses, including authenticated endpoints and preflight (OPTIONS) responses. |
CVE-2026-55885 | Medium | 6.8 | — | 2026-07-10 | Grav is a file-based Web platform. |
CVE-2026-62237 | Medium | 6.5 | — | 2026-07-17 | Grav before 2.0.4 contains a regular expression denial of service (ReDoS) vulnerability in the regex_replace filter and function, which are allowlisted in the Twig content sandbox. |
CVE-2026-61449 | Medium | 6.5 | — | 2026-07-15 | Grav 2.0.1 contains a decompression-bomb size-cap bypass in ZipArchiver and GPM\Installer. |
CVE-2026-62235 | Medium | 6.3 | — | 2026-07-17 | Grav Flex-Objects before version 1.4.3 contains a broken access control vulnerability in the admin-next REST API that allows authenticated users with only api.access permission to perform unauthorized CRUD operations on permission-less dir… |
CVE-2026-61453 | Medium | 6.1 | — | 2026-07-15 | Grav v2.0.0 contains a cross-site scripting vulnerability (fixed in 2.0.1). |
CVE-2026-62236 | Medium | 5.4 | — | 2026-07-17 | grav-plugin-login before 3.8.11 contains a cross-site request forgery (CSRF) vulnerability in the login.regenerate2FASecret frontend task, which regenerates and persists a new TOTP secret for the authenticated session user without any anti… |
CVE-2026-61452 | Medium | 5.3 | — | 2026-07-15 | The Grav API plugin (getgrav/grav-plugin-api) before 2.0.4 contains an improper session invalidation vulnerability where JWT access tokens are issued without a jti (JWT ID) claim and therefore cannot be revoked server-side. |
CVE-2026-61454 | Medium | 5.3 | — | 2026-07-11 | The Grav Admin2 plugin (getgrav/grav-plugin-admin2) before 2.0.4 embeds a global JavaScript variable window.__GRAV_CONFIG__ in the Admin2 SPA bootstrap page at /grav/admin (and its subroutes). |
CVE-2026-58493 | — | — | — | 2026-07-10 | grav-plugin-database is the database plugin for Grav CMS. |
Juniper · 19 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57026 | High | 7.5 | — | 2026-07-09 | An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS… |
CVE-2026-57023 | High | 7.5 | — | 2026-07-09 | An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial of… |
CVE-2026-57028 | High | 7.3 | — | 2026-07-09 | An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause license exhaustion. |
CVE-2026-57032 | Medium | 6.5 | — | 2026-07-09 | An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on EX Series devices allows an authenticated attacker with low privileges to cause a Denial-of-Service (DoS). |
CVE-2026-57027 | Medium | 6.5 | — | 2026-07-09 | A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX Series devices allows an unauthenticated adjacent attacker to cause a Denial-of-Service (D… |
CVE-2026-57020 | Medium | 6.5 | — | 2026-07-09 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on QFX10000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). |
CVE-2026-57019 | Medium | 6.5 | — | 2026-07-09 | An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). |
CVE-2026-33803 | Medium | 6.5 | — | 2026-07-09 | An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact t… |
CVE-2026-33801 | Medium | 6.5 | — | 2026-07-09 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker sending a specific BGP update over an… |
CVE-2026-57030 | Medium | 5.9 | — | 2026-07-09 | A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker… |
CVE-2026-57022 | Medium | 5.9 | — | 2026-07-09 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-… |
CVE-2026-33794 | Medium | 5.9 | — | 2026-07-09 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced forwarding toolkit (evo-aftmand) of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated network-based attacker generating conti… |
CVE-2026-57054 | Medium | 5.8 | — | 2026-07-09 | A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass web filtering and access downstream resources t… |
CVE-2026-57025 | Medium | 5.5 | — | 2026-07-09 | A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privilged attacker to cause a Denial-of-Service (DoS). |
CVE-2026-33802 | Medium | 5.5 | — | 2026-07-09 | A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated attacker to cause a Denial-of-Service (DoS). |
CVE-2026-57029 | Medium | 5.3 | — | 2026-07-09 | A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated attacker to cause a Denial-of-Service (DoS). |
CVE-2026-57024 | Medium | 5.3 | — | 2026-07-09 | A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). |
CVE-2026-57021 | Medium | 5.3 | — | 2026-07-09 | An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). |
CVE-2026-33799 | Medium | 4.3 | — | 2026-07-09 | An Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker sending specific valid SNMPv3 queries to trigger a memory leak. |
Apache · 18 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62392 | Critical | 9.8 | — | 2026-07-14 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. |
CVE-2026-62390 | Critical | 9.8 | — | 2026-07-14 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. |
CVE-2026-47323 | Critical | 9.8 | — | 2026-05-19 | Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and… |
CVE-2026-58319 | Critical | 9.1 | — | 2026-07-14 | Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication. |
CVE-2026-59084 | Critical | 9.1 | — | 2026-07-14 | Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. |
CVE-2026-59083 | Critical | 9.1 | — | 2026-07-14 | Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. |
CVE-2026-41041 | Critical | 9.1 | — | 2026-07-13 | URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. |
CVE-2026-35152 | High | 8.8 | — | 2026-07-15 | A SQL Injection vulnerability exists in Apache Fineract's Report Execution API (runreports endpoint) in versions up to and including 1.14.0. |
CVE-2026-57821 | High | 8.1 | — | 2026-07-15 | A SQL Injection vulnerability exists in Apache Fineract's Office Search API (GET /api/v1/offices) in versions up to and including 1.14.0. |
CVE-2026-56287 | High | 8.1 | — | 2026-07-15 | A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API (GET /api/v1/clients) in versions up to and including 1.14.0. |
CVE-2026-59245 | High | 8.1 | — | 2026-07-13 | In the Apache Airflow FAB auth manager, a DAG whose `dag_id` is `DAGs` collided with the global all-DAGs permission resource name produced by `resource_name()`, so a user granted per-DAG `access_control` on that one DAG was silently grante… |
CVE-2026-58065 | High | 8.1 | — | 2026-07-13 | The Apache Airflow Git provider runs its git-over-SSH operations with `StrictHostKeyChecking=no` by default, disabling SSH host-key verification. |
CVE-2026-62764 | Medium | 6.5 | — | 2026-07-17 | Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. |
CVE-2026-49488 | Medium | 6.5 | — | 2026-07-14 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OpenMeetings. |
CVE-2026-49876 | Medium | 6.5 | — | 2026-07-13 | Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. |
CVE-2026-49844 | Medium | 5.9 | — | 2026-07-10 | Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. |
CVE-2026-26032 | Medium | 5.4 | — | 2026-07-15 | The PackagerResolver of Apache Ivy is able to download online artifacts and to (re)package them in a format defined by a packager.xml file. |
CVE-2026-62393 | Medium | 4.3 | — | 2026-07-14 | Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to unauthorized jobs in other projects. |
Ibm · 17 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9202 | Critical | 9.8 | — | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEW_USER_IS_ACTIVE=true (documented deployment option), newly created accounts are immediately active a… |
CVE-2026-9198 | Critical | 9.8 | KEV | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Lan… |
CVE-2026-15091 | Critical | 9.3 | — | 2026-07-17 | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary scripts due to improper neutralization of input during web page generation. |
CVE-2026-9762 | High | 7.8 | — | 2026-07-17 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control. |
CVE-2026-15322 | High | 7.5 | — | 2026-07-17 | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to obtain sensitive information due to the exposure of session tokens in URLs. |
CVE-2026-9171 | High | 7.5 | — | 2026-07-17 | IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. |
CVE-2026-4938 | Medium | 6.5 | — | 2026-07-17 | IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 could allow an… |
CVE-2026-4942 | Medium | 5.9 | — | 2026-07-17 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted message and downgrade the Transport Layer Security (TLS) protocol to a version disabled in the server configuration. |
CVE-2026-7771 | Medium | 5.5 | — | 2026-07-17 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service. |
CVE-2026-15995 | Medium | 5.4 | — | 2026-07-17 | IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's… |
CVE-2026-15069 | Medium | 5.4 | — | 2026-07-17 | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary script code due to improper neutralization of input during web page generation. |
CVE-2026-8861 | Medium | 5.3 | — | 2026-07-17 | IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. |
CVE-2026-14979 | Medium | 5.3 | — | 2026-07-17 | IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001 through ) Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service… |
CVE-2026-15093 | Medium | 4.3 | — | 2026-07-17 | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to malicious websites due to improper validation of user-supplied URLs. |
CVE-2026-14501 | Medium | 4.3 | — | 2026-07-17 | IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous functions without sufficient restrictions. |
CVE-2026-14971 | Low | 3.9 | — | 2026-07-17 | IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions. |
CVE-2026-7364 | Low | 3.1 | — | 2026-07-17 | IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 could allow a r… |
Rockwell Automation · 17 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9128 | High | 7.5 | — | 2026-07-14 | A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. |
CVE-2026-9127 | High | 7.5 | — | 2026-07-14 | A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a configuration file. This can allow any authenticated user to modify the paths of external tools configured within the appl… |
CVE-2026-9108 | High | 7.5 | — | 2026-07-14 | A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ACD project files. |
CVE-2026-8314 | High | 7.3 | — | 2026-07-14 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe (Siman) component. |
CVE-2026-8313 | High | 7.3 | — | 2026-07-14 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the linker.exe (Siman) component. |
CVE-2026-8085 | High | 7.3 | — | 2026-07-14 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the model.exe (Siman) component. |
CVE-2026-9636 | — | — | — | 2026-07-14 | A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. |
CVE-2026-9292 | — | — | — | 2026-07-14 | A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. |
CVE-2026-12659 | — | — | — | 2026-07-14 | A denial-of-service security issue exists in the affected products. |
CVE-2026-11917 | — | — | — | 2026-07-14 | A path traversal security issue exists within Rockwell Automation ThinManager® software due to improper limitation of file save operations within the API. |
CVE-2025-11698 | — | — | — | 2026-07-14 | A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a… |
CVE-2026-9653 | — | — | — | 2026-07-14 | A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper validation of CIP Implicit Connection packets. |
CVE-2026-9140 | — | — | — | 2026-07-14 | A denial-of-service security issue exists in the 1719-AENTR. |
CVE-2026-10714 | — | — | — | 2026-07-14 | A security issue exists within FactoryTalk® Services Platform (FTSP), allowing an attacker to bypass JWT signature validation during Okta Web Authentication. |
CVE-2026-10573 | — | — | — | 2026-07-14 | A denial-of-service security issue exists in 1734 POINT I/O™ module. |
CVE-2025-12012 | — | — | — | 2026-07-14 | A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF). |
CVE-2025-12011 | — | — | — | 2026-07-14 | A denial-of-service issue exists in 5370/5570 controllers. |
Guardian · 16 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-34117 | Critical | 9.8 | — | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in text_to_subtitles.php (line 19) without sanitization: exec(\"php jobs/text_to_subtitles.php \".$login_session.\" \".$_GET['id'].\" ...\"). |
CVE-2026-34116 | Critical | 9.8 | — | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in transcribe.php (line 15) without sanitization: exec(\"php jobs/transcribe.php \".$login_session.\" \".$_GET['id'].\" ...\"). |
CVE-2026-34115 | Critical | 9.8 | — | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in transcribe_amazon.php (line 15) without sanitization: exec(\"php jobs/transcribe_amazon.php \".$login_session.\" \".$_GET['id'].\" ...\"). |
CVE-2026-34114 | Critical | 9.8 | — | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate_text.php (line 18) without sanitization: exec(\"php jobs/translate_text.php \".$login_session.\" \".$_GET['id'].\" ...\"). |
CVE-2026-34113 | Critical | 9.8 | — | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech_text.php (line 18) without sanitization: exec(\"php jobs/speech_audio_text.php \".$login_session.\" \".$_GET['id'].\" ...\"). |
CVE-2026-34112 | Critical | 9.8 | — | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac.php (line 18) without sanitization: exec(\"php jobs/speech_audio_mac.php \".$login_session.\" \".$_GET['id'].\" ...\"). |
CVE-2026-34111 | Critical | 9.8 | — | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac_text.php (line 18) without sanitization: exec(\"php jobs/speech_audio_mac_text.php \".$login_session.\" \".$_GET['id'].\" ...\"). |
CVE-2026-34110 | Critical | 9.8 | — | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in complex_start.php (line 14) without sanitization: exec(\"php jobs/complex.php \".$login_session.\" \".$_GET['id'].\" ...\"). |
CVE-2026-34109 | Critical | 9.8 | — | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech.php (line 18) without sanitization: exec(\"php jobs/speech_audio.php \".$login_session.\" \".$_GET['id'].\" ...\"). |
CVE-2026-34108 | Critical | 9.8 | — | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in text.php (line 15) without sanitization: exec(\"php jobs/text.php \".$login_session.\" \".$_GET['id'].\" ...\"). |
CVE-2026-34107 | Critical | 9.8 | — | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate.php (line 14) without sanitization: exec(\"php jobs/translate.php \".$login_session.\" \".$_GET['id'].\" ...\"). |
CVE-2026-34106 | Critical | 9.8 | — | 2026-07-01 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in subtitles.php (line 19) without sanitization: exec(\"php jobs/subtitle_rendering.php \".$login_session.\" \".$_GET['id'].\" ...\"). |
CVE-2026-34099 | Critical | 9.8 | — | 2026-07-01 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_info.php (line 16): SELECT * FROM jobs where id = '\".$_GET['id'].\"'. |
CVE-2026-34098 | Medium | 4.6 | — | 2026-07-01 | Guardian language-system fails to sanitize the id GET parameter before inserting it into HTML source and form action attributes in media.php (lines 119, 129). |
CVE-2026-34097 | Medium | 4.6 | — | 2026-07-01 | Guardian language-system fails to sanitize the id GET parameter before inserting it into multiple HTML form action attributes in text_file.php (lines 94, 101, 323, 403, 826, 852). |
CVE-2026-34096 | Medium | 4.6 | — | 2026-07-01 | Guardian language-system fails to sanitize the name GET parameter before outputting it into an HTML input value attribute in designer.php (line 57). |
Grokability · 15 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55466 | High | 8.7 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
CVE-2026-55516 | High | 7.7 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
CVE-2026-55452 | High | 7.3 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
CVE-2026-55460 | High | 7.1 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
CVE-2026-55469 | Medium | 6.5 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
CVE-2026-55843 | Medium | 6.5 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
CVE-2026-55461 | Medium | 6.1 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
CVE-2026-55475 | Medium | 5.7 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
CVE-2026-55464 | Medium | 5.4 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
CVE-2026-55515 | Medium | 5.0 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
CVE-2026-55481 | Medium | 4.8 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
CVE-2026-55479 | Medium | 4.3 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
CVE-2026-55462 | Medium | 4.3 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
CVE-2026-55476 | Medium | 4.3 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
CVE-2026-55472 | Medium | 4.3 | — | 2026-07-10 | Snipe-IT is an IT asset/license management system. |
Sap_se · 15 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44747 | Critical | 9.9 | — | 2026-07-14 | SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could lead to unauthorized data access, modification, or system unavailability. |
CVE-2026-44761 | Critical | 9.1 | — | 2026-07-14 | SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from sample configuration provided in SAP Help Portal documentation. |
CVE-2026-27690 | Critical | 9.1 | — | 2026-07-14 | Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. |
CVE-2026-0487 | High | 8.4 | — | 2026-07-14 | SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to execute malicious code on the system. |
CVE-2026-44752 | High | 8.2 | — | 2026-07-14 | SAP NetWeaver Application Server Java allows an unauthenticated attacker to inject malicious JavaScript through crafted URLs. |
CVE-2026-44745 | High | 8.1 | — | 2026-07-14 | SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. |
CVE-2026-58233 | High | 7.6 | — | 2026-07-14 | SAP Change and Transport System Attach Tool (ctsattach) allows an authenticated attacker to supply a specially crafted archive file which, when processed by the application�s library, can trigger insecure deserialization and lead to remote… |
CVE-2026-44767 | Medium | 6.1 | — | 2026-07-14 | setThemeRoot() failed to enforce the sap-allowed-theme-origins allowlist. |
CVE-2026-44759 | Medium | 6.1 | — | 2026-07-14 | SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. |
CVE-2026-44769 | Medium | 5.5 | — | 2026-07-14 | SAP S/4HANA application Project Management (PPM-PRO) allows an attacker with high privileges to execute crafted database queries, exposing the backend database. |
CVE-2026-44760 | Medium | 4.7 | — | 2026-07-14 | Due to a Cross-Site Scripting (XSS) vulnerability, applications based on Business Server Pages framework in SAP NetWeaver Application Server ABAP reflects unsanitized input into the HTTP response which allows an attacker to inject and exec… |
CVE-2026-44771 | Medium | 4.3 | — | 2026-07-14 | SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated user, a restricted user could access information within the entity resulting in escalation of privileges. |
CVE-2026-44770 | Medium | 4.3 | — | 2026-07-14 | SAP Create Single Payment does not perform necessary authorization checks for an authenticated user, a restricted user could access specific entity set keys resulting in disclosure of information. |
CVE-2026-44768 | Medium | 4.1 | — | 2026-07-14 | SAP CRM WebClient UI allows an attacker to inject and execute malicious scripts in the context of the application due to the absence of a Content Security Policy (CSP) configuration for certain restrictive directives. |
CVE-2026-44753 | Low | 3.7 | — | 2026-07-14 | SAP HANA Database (user self service tools) allows an unauthenticated user to send specially crafted requests that produce distinguishable responses, enabling enumeration of valid user accounts and email addresses. |
Drupal · 14 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11913 | Critical | 9.8 | — | 2026-07-10 | vulnerability in Drupal Mother May I allows . |
CVE-2026-55810 | High | 8.1 | — | 2026-07-10 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. |
CVE-2026-55809 | High | 8.1 | — | 2026-07-10 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Flag attendance field allows Object Injection. |
CVE-2026-15087 | Medium | 5.9 | — | 2026-07-10 | vulnerability in Drupal Clean RESTful allows . |
CVE-2026-15086 | Medium | 5.9 | — | 2026-07-10 | vulnerability in Drupal Raw Formatter [Meta Tag Formatter] allows . |
CVE-2026-11915 | Medium | 5.9 | — | 2026-07-10 | vulnerability in Drupal Brute force attack protection allows . |
CVE-2026-11914 | Medium | 5.9 | — | 2026-07-10 | vulnerability in Drupal Composer allows . |
CVE-2026-55806 | Medium | 5.9 | — | 2026-07-10 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows Content Spoofing. |
CVE-2026-55804 | Medium | 5.9 | — | 2026-07-10 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection. |
CVE-2026-55803 | Medium | 5.9 | — | 2026-07-10 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection. |
CVE-2026-58590 | Medium | 5.4 | — | 2026-07-10 | Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. |
CVE-2026-58589 | Medium | 5.4 | — | 2026-07-10 | Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. |
CVE-2026-55808 | Medium | 5.4 | — | 2026-07-10 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). |
CVE-2026-55807 | Low | 3.1 | — | 2026-07-10 | Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal core allows Server Side Request Forgery. |
Hcl Software · 14 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2024-23564 | Critical | 9.1 | — | 2026-07-17 | HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords from the server and redirect them to their own email address by manipulating the server's response. |
CVE-2026-35149 | High | 8.2 | — | 2026-07-16 | HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. |
CVE-2026-35147 | High | 8.2 | — | 2026-07-16 | HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. |
CVE-2026-35148 | Medium | 6.3 | — | 2026-07-16 | HCL DFXServer is affected by a Missing Access Control vulnerability. |
CVE-2026-56454 | Medium | 5.9 | — | 2026-07-16 | HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. |
CVE-2026-56453 | Medium | 5.5 | — | 2026-07-16 | HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. |
CVE-2026-56456 | Medium | 5.3 | — | 2026-07-16 | HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. |
CVE-2026-56455 | Medium | 5.3 | — | 2026-07-16 | HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). |
CVE-2026-35145 | Low | 3.1 | — | 2026-07-16 | HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. |
CVE-2026-35143 | Low | 3.0 | — | 2026-07-16 | HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability. |
CVE-2026-35140 | Low | 3.0 | — | 2026-07-16 | HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability. |
CVE-2026-35142 | Low | 2.6 | — | 2026-07-16 | HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. |
CVE-2026-35141 | Low | 2.6 | — | 2026-07-16 | HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. |
CVE-2026-9007 | — | — | — | 2026-07-15 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in HCL Notes from HCL Software allows reflected Cross-Site Scripting (XSS). Successful exploitation allows an attacker to execute arbitr… |
Nationalsecurityagency · 14 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-52758 | High | 8.8 | — | 2026-06-10 | Ghidra before 12.1 contains a SQL injection vulnerability in BSim filter types that concatenate user-supplied values directly into SQL queries without escaping or parameterization. |
CVE-2026-52754 | High | 8.8 | — | 2026-06-10 | Ghidra before 12.1 contains an authentication bypass vulnerability in PKIAuthenticationModule.authenticate() that allows any user with a valid CA-signed certificate to impersonate other users by presenting their public certificate with a n… |
CVE-2026-52751 | High | 8.8 | — | 2026-06-10 | Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection code that allows unauthenticated remote code execution. |
CVE-2026-49498 | High | 8.8 | — | 2026-06-10 | Ghidra 11.0 before 12.1 contains a SQL injection vulnerability in the changePassword() method of PostgresFunctionDatabase that fails to escape double quotes in usernames interpolated into ALTER ROLE statements. |
CVE-2026-52755 | High | 7.8 | — | 2026-06-10 | Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attackers to write files outside the intended theme directory. |
CVE-2026-52752 | High | 7.8 | — | 2026-06-10 | Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names during extraction. |
CVE-2026-52750 | High | 7.8 | — | 2026-06-10 | Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd.exe metacharacters are not properly escaped. |
CVE-2026-49496 | Medium | 6.1 | — | 2026-06-10 | Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. |
CVE-2026-52753 | Medium | 5.5 | — | 2026-06-10 | Ghidra before 12.0.3 contains an out-of-memory vulnerability in the rust_demangle function that allocates unbounded output buffers without size limits. |
CVE-2026-49495 | Medium | 5.5 | — | 2026-06-10 | Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie() that lacks cycle detection when traversing Mach-O binary export tries. |
CVE-2026-52756 | Medium | 4.8 | — | 2026-06-10 | Ghidra before 12.2 contains an unauthenticated path traversal vulnerability in the IsfServer that accepts TCP connections and passes client-supplied namespace strings directly to filesystem operations without validation. |
CVE-2026-52757 | Medium | 4.4 | — | 2026-06-10 | Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable merging pass. |
CVE-2026-49497 | Low | 3.3 | — | 2026-06-10 | Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate filenames from ELF binary .gnu_debuglink sections before constructing file paths. |
CVE-2024-58350 | Low | 2.9 | — | 2026-06-10 | Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. |
Google · 12 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15776 | High | 8.8 | — | 2026-07-14 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2026-15774 | High | 8.3 | — | 2026-07-14 | Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-15772 | High | 8.3 | — | 2026-07-14 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2026-15769 | High | 8.3 | — | 2026-07-14 | Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted… |
CVE-2026-15777 | High | 7.5 | — | 2026-07-14 | Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. |
CVE-2026-15765 | High | 7.5 | — | 2026-07-14 | Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. |
CVE-2026-15764 | High | 7.5 | — | 2026-07-14 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. |
CVE-2026-15778 | Medium | 6.5 | — | 2026-07-14 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. |
CVE-2026-15775 | Medium | 6.5 | — | 2026-07-14 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. |
CVE-2026-15770 | Medium | 6.5 | — | 2026-07-14 | Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
CVE-2026-15768 | Medium | 6.5 | — | 2026-07-14 | Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. |
CVE-2026-15766 | Medium | 6.5 | — | 2026-07-14 | Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
Linuxfoundation · 12 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58253 | High | 8.8 | — | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. |
CVE-2026-50151 | High | 7.5 | — | 2026-07-17 | oras-go is a Go library for managing OCI artifacts. |
CVE-2026-58250 | High | 7.5 | — | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. |
CVE-2026-58210 | High | 7.5 | — | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. |
CVE-2026-58213 | High | 7.1 | — | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. |
CVE-2026-58254 | Medium | 6.5 | — | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. |
CVE-2026-58252 | Medium | 6.5 | — | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. |
CVE-2026-58251 | Medium | 6.5 | — | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. |
CVE-2026-49835 | Medium | 5.9 | — | 2026-07-17 | Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. |
CVE-2026-44512 | Medium | 5.5 | — | 2026-07-08 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. |
CVE-2026-58214 | Medium | 4.3 | — | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. |
CVE-2026-58209 | Medium | 4.3 | — | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. |
Mattermost · 12 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9602 | Medium | 6.5 | — | 2026-07-17 | Mattermost Desktop App versions <=6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a meth… |
CVE-2026-8075 | Medium | 6.5 | — | 2026-07-17 | Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with a… |
CVE-2026-6850 | Medium | 6.5 | — | 2026-07-13 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to validate the length and content of message attachment field values, which allows an authenticated attacker to cause a denial of service for all users in a… |
CVE-2026-10106 | Medium | 6.5 | — | 2026-07-13 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to verify that the channel referenced in an action cookie matches the channel of the target post, which allows an authenticated user without access to a priva… |
CVE-2026-9571 | Medium | 5.9 | — | 2026-07-13 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to invalidate OAuth refresh tokens upon user account deactivation, which allows a deactivated user or an attacker in possession of a valid refresh token to ob… |
CVE-2026-9597 | Medium | 5.4 | — | 2026-07-13 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4 fail to verify whether a guest account is deactivated before creating a session in the magic-link token login path, which allows a deactivated guest user to obtain a fully functional s… |
CVE-2026-10085 | Medium | 5.4 | — | 2026-07-13 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to restrict the group_constrained channel flag to public and private channels that support group synchronization, which allows an ordinary group or direct mes… |
CVE-2026-9708 | Medium | 4.9 | — | 2026-07-13 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to validate that an assigned incoming webhook user has access to the target team or channel, which allows a requester with webhook management permissions to c… |
CVE-2026-9824 | Medium | 4.3 | — | 2026-07-13 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to check the manage_shared_channels permission in the /share-channel autocomplete handler, which allows an authenticated user without that permission to enume… |
CVE-2026-6541 | Medium | 4.3 | — | 2026-07-13 | Mattermost versions 11.7.x <= 11.7.1, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to restrict metric configuration changes to the playbook being saved, which allows an authenticated user with team access to alter another user’s playbook met… |
CVE-2026-10103 | Medium | 4.3 | — | 2026-07-13 | Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to verify post ownership in the shared channel inbound sync handler, which allows an authenticated remote cluster to modify or delete posts authored by local… |
CVE-2026-9820 | Low | 3.8 | — | 2026-07-13 | Mattermost versions 11.7.x <= 11.7.2, 10.11.x <= 10.11.19 fail to sanitize team objects returned by the scheme teams endpoint, which allows a user with the User Manager role to obtain invite links for private teams and use them to join or… |
Absolute · 11 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-40957 | High | 7.5 | — | 2026-07-15 | o CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. |
CVE-2026-33445 | Medium | 5.9 | — | 2026-07-15 | CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. |
CVE-2026-33443 | Medium | 5.9 | — | 2026-07-15 | CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. |
CVE-2026-40953 | Medium | 4.4 | — | 2026-07-15 | CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. |
CVE-2026-55399 | Medium | 4.3 | — | 2026-07-15 | CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55. |
CVE-2026-55398 | Low | 3.7 | — | 2026-07-15 | CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. |
CVE-2026-33444 | Low | 3.7 | — | 2026-07-15 | CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55. |
CVE-2026-40958 | Low | 3.7 | — | 2026-07-15 | CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. |
CVE-2026-40956 | Low | 3.7 | — | 2026-07-15 | CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. |
CVE-2026-40955 | Low | 3.7 | — | 2026-07-15 | CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. |
CVE-2026-40954 | Low | 3.7 | — | 2026-07-15 | CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. |
Broadcom · 11 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57215 | High | 8.8 | — | 2026-07-10 | RabbitMQ is a messaging and streaming broker. |
CVE-2026-57212 | High | 7.7 | — | 2026-07-10 | RabbitMQ is a messaging and streaming broker. |
CVE-2026-57220 | High | 7.5 | — | 2026-07-10 | RabbitMQ is a messaging and streaming broker. |
CVE-2026-57216 | Medium | 6.8 | — | 2026-07-10 | RabbitMQ is a messaging and streaming broker. |
CVE-2026-57218 | Medium | 6.5 | — | 2026-07-10 | RabbitMQ is a messaging and streaming broker. |
CVE-2026-57217 | Medium | 6.5 | — | 2026-07-10 | RabbitMQ is a messaging and streaming broker. |
CVE-2026-57214 | Medium | 5.4 | — | 2026-07-10 | RabbitMQ is a messaging and streaming broker. |
CVE-2026-57221 | Medium | 5.0 | — | 2026-07-10 | RabbitMQ is a messaging and streaming broker. |
CVE-2026-57213 | Medium | 4.8 | — | 2026-07-10 | RabbitMQ is a messaging and streaming broker. |
CVE-2026-15380 | — | — | — | 2026-07-17 | A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required (ITMS 8.7.3) |
CVE-2026-15379 | — | — | — | 2026-07-17 | The Altiris WMI provider exposes a class (AltirisAgent_Stream) that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. |
Discourse · 11 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44787 | High | 8.2 | — | 2026-07-09 | Discourse is an open-source discussion platform. |
CVE-2026-49256 | High | 7.5 | — | 2026-07-09 | Discourse is an open-source discussion platform. |
CVE-2026-45788 | High | 7.5 | — | 2026-07-09 | Discourse is an open-source discussion platform. |
CVE-2026-55420 | High | 7.5 | — | 2026-07-09 | Discourse is an open-source discussion platform. |
CVE-2026-53963 | High | 7.3 | — | 2026-07-09 | Discourse is an open-source discussion platform. |
CVE-2026-53961 | Medium | 6.5 | — | 2026-07-09 | Discourse is an open-source discussion platform. |
CVE-2026-46413 | Medium | 6.5 | — | 2026-07-09 | Discourse is an open-source discussion platform. |
CVE-2026-55424 | Medium | 5.4 | — | 2026-07-09 | Discourse is an open-source discussion platform. |
CVE-2026-53962 | Medium | 5.4 | — | 2026-07-09 | Discourse is an open-source discussion platform. |
CVE-2026-59828 | Medium | 5.3 | — | 2026-07-09 | Discourse is an open-source discussion platform. |
CVE-2026-45780 | Medium | 5.3 | — | 2026-07-09 | Discourse is an open-source discussion platform. |
Fortinet · 11 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59835 | High | 8.6 | — | 2026-07-14 | A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network reque… |
CVE-2026-59836 | High | 7.5 | — | 2026-07-14 | A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information disclosure via <insert attack vector here> |
CVE-2025-53379 | High | 7.5 | — | 2026-07-14 | A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remote unauthenticated attacker to retrieve sensitive information via a specially crafted request. |
CVE-2026-59837 | Medium | 6.6 | — | 2026-07-14 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all… |
CVE-2026-23573 | Medium | 6.1 | — | 2026-07-14 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.8.0, Forti… |
CVE-2026-59838 | Medium | 5.9 | — | 2026-07-15 | A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions… |
CVE-2026-59839 | Medium | 5.5 | — | 2026-07-14 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versio… |
CVE-2026-59840 | Medium | 4.3 | — | 2026-07-14 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7… |
CVE-2025-43892 | Medium | 4.3 | — | 2026-07-14 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an authenticated remote attacker to return a port… |
CVE-2025-62675 | Low | 3.4 | — | 2026-07-14 | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 th… |
CVE-2025-62826 | Low | 3.1 | — | 2026-07-14 | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 th… |
Huawei · 11 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58558 | High | 7.8 | — | 2026-07-15 | Permission control vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-58555 | Medium | 6.6 | — | 2026-07-15 | Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-58554 | Medium | 6.6 | — | 2026-07-15 | Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-58559 | Medium | 6.5 | — | 2026-07-15 | DoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-58556 | Medium | 5.1 | — | 2026-07-15 | Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-58552 | Medium | 5.1 | — | 2026-07-15 | Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-58551 | Medium | 5.1 | — | 2026-07-15 | Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-58557 | Medium | 4.8 | — | 2026-07-15 | Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-58553 | Medium | 4.0 | — | 2026-07-15 | Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-58550 | Medium | 4.0 | — | 2026-07-15 | Out-of-bounds read vulnerability in the image codec module. |
CVE-2026-58549 | Medium | 4.0 | — | 2026-07-15 | Out-of-bounds read vulnerability in the image codec module. |
Asus · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2019-25764 | — | — | — | 2026-07-17 | **UNSUPPORTED WHEN ASSIGNED** Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, resulting in privilege escalation. |
CVE-2026-8920 | — | — | — | 2026-07-15 | Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura Wallpaper Service allow a local user to perform file operations by sending crafted commands containing an arbitrary file… |
CVE-2026-8919 | — | — | — | 2026-07-15 | Permissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote user to obtain a local user’s NTLM hash by convincing the user to visit a crafted web page that sends a request containing a UNC path to the app… |
CVE-2026-15030 | — | — | — | 2026-07-15 | Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request… |
CVE-2026-15029 | — | — | — | 2026-07-15 | Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL reque… |
CVE-2026-13585 | — | — | — | 2026-07-15 | Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensitive in… |
CVE-2026-13385 | — | — | — | 2026-07-15 | An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middle(MITM) user to make the router download and execute arbitrary command via a spoofed server. |
CVE-2026-11851 | — | — | — | 2026-07-15 | Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of certain ASUS router models allows a remote authenticated user to disclose confidential information via a crafted reques… |
CVE-2022-4990 | — | — | — | 2026-07-03 | ** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows a local user to bypass security validation and access restricted memory blocks via crafted IOCTL requests, leading to p… |
CVE-2022-4989 | — | — | — | 2026-07-03 | ** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows a local user to access unintended memory regions via crafted IOCTL requests, leading to privilege escalation. |
Capgo · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56241 | High | 8.3 | — | 2026-07-12 | Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_admin users retain access to delete_non_compliant_bundles and count_non_compliant_bundles RPCs due to stale org_users.user_right column not being clear… |
CVE-2026-56305 | High | 8.3 | — | 2026-07-10 | Capgo before 12.128.2 contains an authentication bypass vulnerability in the password change endpoint that allows attackers to change user passwords without requiring current password confirmation. |
CVE-2026-56313 | High | 8.1 | — | 2026-07-12 | Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint that allows enterprise administrators to delete password identities of users in foreign organizations. |
CVE-2026-56238 | High | 7.5 | — | 2026-07-12 | Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST global_stats endpoint that allows unauthenticated attackers to read sensitive financial and operational metrics using only the public apikey. |
CVE-2026-56303 | High | 7.5 | — | 2026-07-11 | Capgo before 12.128.2 contains an information disclosure vulnerability in the find_apikey_by_value PostgreSQL function marked SECURITY DEFINER and executable by the anon role. |
CVE-2026-56308 | High | 7.3 | — | 2026-07-12 | Capgo before 12.128.2 allows email address changes without requiring current password re-authentication or verification of the existing email address. |
CVE-2026-56252 | Medium | 5.4 | — | 2026-07-12 | Capgo before 12.128.2 contains a scope isolation vulnerability in the POST /webhooks/test endpoint that allows app-scoped API keys to invoke org-scoped webhook operations. |
CVE-2026-56336 | Medium | 5.3 | — | 2026-07-12 | Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /private/sso/check-domain endpoint that returns internal org_id and provider_id values. |
CVE-2026-56240 | Medium | 4.3 | — | 2026-07-11 | Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_valid calculation that allows organizations with exhausted or expired usage credit grants to bypass billing gates. |
CVE-2026-56281 | Low | 3.8 | — | 2026-07-12 | Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats endpoint where the limit parameter is destructured from unvalidated request body and interpolated directly into Cloudflare Analytics Engine SQL q… |
Dataease · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50124 | — | — | — | 2026-07-15 | DataEase is an open source data visualization and analysis tool. |
CVE-2026-50030 | — | — | — | 2026-07-15 | DataEase is an open source data visualization and analysis tool. |
CVE-2026-49867 | — | — | — | 2026-07-15 | DataEase is an open source data visualization and analysis tool. |
CVE-2026-46684 | — | — | — | 2026-07-15 | DataEase is an open source data visualization and analysis tool. |
CVE-2026-45535 | — | — | — | 2026-07-15 | DataEase is an open source data visualization and analysis tool. |
CVE-2026-45534 | — | — | — | 2026-07-15 | DataEase is an open source data visualization and analysis tool. |
CVE-2026-45533 | — | — | — | 2026-07-15 | DataEase is an open source data visualization and analysis tool. |
CVE-2026-45419 | — | — | — | 2026-07-15 | DataEase is an open source data visualization and analysis tool. |
CVE-2026-45417 | — | — | — | 2026-07-15 | DataEase is an open source data visualization and analysis tool. |
CVE-2026-45320 | — | — | — | 2026-07-15 | DataEase is an open source data visualization and analysis tool. |
Decolua · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46339 | Critical | 10.0 | — | 2026-07-15 | 9Router is an AI router & token saver. |
CVE-2026-49352 | Critical | 9.8 | — | 2026-07-15 | 9Router is an AI router & token saver. |
CVE-2026-59801 | Critical | 9.8 | — | 2026-07-13 | 9Router through version 0.4.41 contains an unauthenticated access vulnerability that allows remote attackers to interact with provider management API endpoints by sending requests without any credentials due to missing authentication middl… |
CVE-2026-62327 | Critical | 9.1 | — | 2026-07-13 | 9Router through version 0.4.41 contains an unauthenticated information disclosure vulnerability that allows remote attackers to retrieve plaintext API keys for all connected AI provider accounts by sending a single unauthenticated request… |
CVE-2026-62312 | High | 8.8 | — | 2026-07-15 | 9Router is an AI router & token saver. |
CVE-2026-49353 | High | 7.5 | — | 2026-07-15 | 9Router is an AI router & token saver. |
CVE-2026-62328 | High | 7.5 | — | 2026-07-13 | 9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote attackers to access sensitive user data by sending requests to unprotected API endpoints. |
CVE-2026-56676 | High | 7.4 | — | 2026-07-10 | 9Router is an AI router & token saver. |
CVE-2026-56678 | Medium | 6.4 | — | 2026-07-15 | 9Router is an AI router & token saver. |
CVE-2026-56679 | — | — | — | 2026-07-15 | 9Router is an AI router & token saver. |
Dell · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56688 | Critical | 9.1 | — | 2026-07-10 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. |
CVE-2026-54469 | High | 8.8 | — | 2026-07-10 | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability. |
CVE-2026-56690 | High | 8.5 | — | 2026-07-10 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. |
CVE-2026-56687 | High | 7.8 | — | 2026-07-15 | Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerability. |
CVE-2026-40633 | High | 7.8 | — | 2026-07-15 | Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of Sensitive Information into Log File vulnerability. |
CVE-2026-56689 | High | 7.7 | — | 2026-07-10 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. |
CVE-2026-49501 | Medium | 6.7 | — | 2026-07-15 | Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, and versions 9.11.0.0 through 9.13.0.2 contains an Improper Privilege Management vulnerability. |
CVE-2026-54468 | Medium | 6.5 | — | 2026-07-10 | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability. |
CVE-2026-56087 | Medium | 6.1 | — | 2026-07-15 | Dell ThinOS 10, versions prior to 2605_10.2100 contain a Protection Mechanism Failure vulnerability. |
CVE-2026-54470 | Medium | 5.3 | — | 2026-07-10 | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restriction of XML External Entity Reference vulnerability. |
Eleveo · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15473 | Medium | 6.3 | — | 2026-07-12 | A vulnerability was identified in Eleveo Call Recording Software 9.7.0. |
CVE-2026-15376 | Medium | 6.3 | — | 2026-07-10 | A vulnerability was found in Eleveo Call Recording Software 9.7.0. |
CVE-2026-15374 | Medium | 6.3 | — | 2026-07-10 | A flaw has been found in Eleveo Call Recording Software 9.7.0. |
CVE-2026-15373 | Medium | 6.3 | — | 2026-07-10 | A vulnerability was detected in Eleveo Call Recording Software 9.7.0. |
CVE-2026-15474 | Medium | 4.3 | — | 2026-07-12 | A security flaw has been discovered in Eleveo Call Recording Software 9.7.0. |
CVE-2026-15472 | Medium | 4.3 | — | 2026-07-12 | A vulnerability was determined in Eleveo Call Recording Software 9.7.0. |
CVE-2026-15471 | Medium | 4.3 | — | 2026-07-12 | A vulnerability was found in Eleveo Call Recording Software 9.7.0. |
CVE-2026-15470 | Medium | 4.3 | — | 2026-07-12 | A vulnerability has been found in Eleveo Call Recording Software 9.7.0. |
CVE-2026-15377 | Medium | 4.3 | — | 2026-07-10 | A vulnerability was determined in Eleveo Call Recording Software 9.7.0. |
CVE-2026-15375 | Medium | 4.3 | — | 2026-07-10 | A vulnerability has been found in Eleveo Call Recording Software 9.7.0. |
Wekan · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-52891 | Critical | 9.9 | — | 2026-07-15 | Wekan is open source kanban built with Meteor. |
CVE-2026-55652 | Critical | 9.8 | — | 2026-07-15 | Wekan is open source kanban built with Meteor. |
CVE-2026-55234 | High | 8.5 | — | 2026-07-15 | Wekan is open source kanban built with Meteor. |
CVE-2026-52890 | High | 7.1 | — | 2026-07-15 | Wekan is open source kanban built with Meteor. |
CVE-2026-53447 | Medium | 6.5 | — | 2026-07-15 | Wekan is open source kanban built with Meteor. |
CVE-2026-52892 | Medium | 6.5 | — | 2026-07-15 | Wekan is open source kanban built with Meteor. |
CVE-2026-53446 | — | — | — | 2026-07-15 | Wekan is open source kanban built with Meteor. |
CVE-2026-53445 | — | — | — | 2026-07-15 | Wekan is open source kanban built with Meteor. |
CVE-2026-53444 | — | — | — | 2026-07-15 | Wekan is open source kanban built with Meteor. |
CVE-2026-52893 | — | — | — | 2026-07-15 | Wekan is open source kanban built with Meteor. |
Wwbn · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54458 | Critical | 9.6 | — | 2026-07-15 | WWBN AVideo is an open source video platform. |
CVE-2026-55173 | High | 8.1 | — | 2026-07-16 | WWBN AVideo is an open source video platform. |
CVE-2026-63305 | High | 8.1 | — | 2026-07-16 | AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg.json.php endpoint where notifyCode and callback parameters are concatenated into a shell command without escaping. |
CVE-2026-63304 | High | 8.1 | — | 2026-07-16 | AVideo through 29.0 contains an OS command injection vulnerability in plugin/API/standAlone/functions.php where the listFFmpegProcesses() function interpolates unsanitized keyword parameters inside single quotes without escaping. |
CVE-2026-33692 | High | 7.5 | — | 2026-07-16 | WWBN AVideo is an open source video platform. |
CVE-2026-33731 | Medium | 6.5 | — | 2026-07-16 | WWBN AVideo is an open source video platform. |
CVE-2026-50182 | Medium | 6.1 | — | 2026-07-15 | WWBN AVideo is an open source video platform. |
CVE-2026-33684 | Medium | 5.3 | — | 2026-07-15 | WWBN AVideo is an open source video platform. |
CVE-2026-50183 | Medium | 4.7 | — | 2026-07-15 | WWBN AVideo is an open source video platform. |
CVE-2026-49279 | — | — | — | 2026-07-15 | WWBN AVideo is an open source video platform. |
Cyrusimap · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47084 | Medium | 6.5 | — | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. |
CVE-2026-47082 | Medium | 5.4 | — | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. |
CVE-2026-47089 | Medium | 4.3 | — | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. |
CVE-2026-47083 | Medium | 4.3 | — | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. |
CVE-2026-47085 | Medium | 4.0 | — | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. |
CVE-2026-47087 | Low | 3.5 | — | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. |
CVE-2026-47086 | Low | 3.5 | — | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. |
CVE-2026-47088 | Low | 3.1 | — | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. |
CVE-2026-47081 | Low | 3.1 | — | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. |
Eclipse · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9561 | High | 8.2 | — | 2026-07-14 | Eclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-For HTTP header as the authoritative source of the client IP address in audit log entries. |
CVE-2026-15076 | High | 7.5 | — | 2026-07-14 | In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Eclipse Vert.x Web Client does not validate that the Domain attribute of a Set-Cookie response header matches the originating ser… |
CVE-2026-15075 | High | 7.5 | — | 2026-07-14 | In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates all request headers as-is across cross-origin HTTP 30x redirects. |
CVE-2026-10051 | High | 7.5 | — | 2026-07-14 | In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection. |
CVE-2024-7708 | High | 7.5 | — | 2026-07-14 | For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. |
CVE-2026-8384 | Medium | 5.3 | — | 2026-07-14 | In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not af… |
CVE-2026-6790 | Medium | 5.3 | — | 2026-07-14 | In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present). |
CVE-2026-12606 | Medium | 5.3 | — | 2026-07-14 | Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed trailer header's line, which can be leveraged to perform HTTP request smuggling. |
CVE-2026-13699 | Medium | 4.3 | — | 2026-07-14 | In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional data_point field in PublishValueRequest. |
Evbee · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-22103 | — | — | — | 2026-07-13 | The NPC start endpoint on the web server at port 8090 is vulnerable to command injection. |
CVE-2026-22102 | — | — | — | 2026-07-13 | A POST request sent to a specific webserver endpoint can be used to write to arbitrary file locations. |
CVE-2026-22100 | — | — | — | 2026-07-13 | The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. |
CVE-2026-22099 | — | — | — | 2026-07-13 | The charging station does not require authentication for Bluetooth commands to perform actions. |
CVE-2026-22098 | — | — | — | 2026-07-13 | Various sensitive information such as passwords and charging card UIDs are written to log files. |
CVE-2026-22097 | — | — | — | 2026-07-13 | The firmware update mechanism does not include cryptographic signature validation. |
CVE-2026-22096 | — | — | — | 2026-07-13 | The webserver running on port 8090 does not require authentication. |
CVE-2026-22095 | — | — | — | 2026-07-13 | The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection. |
CVE-2026-22093 | — | — | — | 2026-07-13 | The EVbee Service Android app uses TLS encrypted communication (HTTPS), but does not validate the certificate provided by the server. |
F5 · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55723 | High | 8.3 | — | 2026-07-15 | When NGINX Ingress Controller is configured with Custom Resource Definitions (CRDs) or Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. |
CVE-2026-60005 | High | 8.2 | — | 2026-07-15 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. |
CVE-2026-42533 | High | 8.1 | — | 2026-07-15 | A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. |
CVE-2026-42530 | High | 8.1 | — | 2026-06-17 | NGINX Open Source has a vulnerability in the ngx_http_v3_module module. |
CVE-2026-59762 | High | 7.5 | — | 2026-07-15 | When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Impact: System performance can degrade until the TMM process is either forced to restart or is… |
CVE-2026-56434 | Medium | 6.5 | — | 2026-07-15 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. |
CVE-2026-52865 | Medium | 6.5 | — | 2026-07-15 | When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permission to create or modify Ingress or TransportServer resources can cause the NGINX Ingress Controller process to term… |
CVE-2026-60062 | Medium | 6.4 | — | 2026-07-15 | The NGINX Agent config_dirs directive allows a low-privileged attacker to gain limited read and write access to files outside of the designated secure directory. |
CVE-2026-60065 | Low | 3.7 | — | 2026-07-15 | When NGINX Plus is configured to use the Message Queuing Telemetry Transport (MQTT) filter module (ngx_stream_mqtt_filter_module), unauthenticated attackers can send requests with conditions beyond the attacker's control to cause a heap bu… |
Frappe · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55242 | High | 8.8 | — | 2026-07-15 | ERPNext is a free and open source Enterprise Resource Planning tool. |
CVE-2026-58503 | — | — | — | 2026-07-10 | Frappe is a full-stack web application framework. |
CVE-2026-55852 | — | — | — | 2026-07-10 | Frappe is a full-stack web application framework. |
CVE-2026-49394 | — | — | — | 2026-07-10 | Frappe is a full-stack web application framework. |
CVE-2026-48127 | — | — | — | 2026-07-10 | Frappe is a full-stack web application framework. |
CVE-2026-47422 | — | — | — | 2026-07-10 | Frappe is a full-stack web application framework. |
CVE-2026-47199 | — | — | — | 2026-07-10 | Frappe is a full-stack web application framework. |
CVE-2026-42219 | — | — | — | 2026-07-10 | Frappe is a full-stack web application framework. |
CVE-2026-41482 | — | — | — | 2026-07-10 | Frappe is a full-stack web application framework. |
Lenovo · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13104 | High | 7.3 | — | 2026-07-16 | A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges. |
CVE-2026-13103 | High | 7.3 | — | 2026-07-16 | A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code. |
CVE-2026-9046 | High | 7.0 | — | 2026-07-16 | A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local use… |
CVE-2026-10589 | Medium | 6.0 | — | 2026-07-16 | A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode. |
CVE-2026-10587 | Medium | 6.0 | — | 2026-07-16 | A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode. |
CVE-2026-6511 | Medium | 5.5 | — | 2026-07-16 | During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for Windows that could allow a local authenticated user to access files owned by a different user on the same… |
CVE-2026-10590 | Medium | 4.4 | — | 2026-07-16 | A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler. |
CVE-2026-10588 | Medium | 4.4 | — | 2026-07-16 | A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory. |
CVE-2026-14371 | — | — | — | 2026-07-16 | The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands. |
N8n · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59208 | Medium | 6.8 | — | 2026-07-09 | n8n is an open source workflow automation platform. |
CVE-2026-59259 | Medium | 6.5 | — | 2026-07-15 | n8n before versions 1.123.61, 2.27.4, and 2.28.1 contains a permission bypass vulnerability in external secrets handling caused by a mismatch between the static validation check and the runtime expression engine. |
CVE-2026-59209 | Medium | 6.5 | — | 2026-07-09 | n8n is an open source workflow automation platform. |
CVE-2026-56352 | Medium | 6.4 | — | 2026-07-15 | n8n before 2.19.3 contains a file path restriction bypass in the legacy ExecuteWorkflow node's localFile source option, which reads workflow files from disk without the file-access checks enforced by other file-reading nodes. |
CVE-2026-56353 | Medium | 4.8 | — | 2026-07-15 | n8n contains an authentication bypass in the Chat Trigger node when configured with n8n User Auth (a non-default configuration). |
CVE-2026-58661 | Medium | 4.3 | — | 2026-07-10 | n8n before 2.28.0 (and before 1.123.58 on the 1.x branch) contains a disk space exhaustion vulnerability in the data-table file upload endpoint. |
CVE-2026-56354 | Medium | 4.1 | — | 2026-07-10 | n8n before 1.123.24, 2.10.4, and 2.12.0 (across its 1.x and 2.x branches) contains cross-site scripting and open redirect vulnerabilities in the Form Node due to unsanitized HTML description fields and overly permissive iframe sandbox poli… |
CVE-2026-59254 | — | — | — | 2026-07-15 | n8n before 2.28.1 contains an information disclosure vulnerability where external secrets are incorrectly resolved in workflow node expressions outside credentials scope. |
CVE-2026-56349 | — | — | — | 2026-07-15 | n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail instructions. |
Sourcecodester · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15703 | High | 7.3 | — | 2026-07-14 | A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. |
CVE-2026-15597 | High | 7.3 | — | 2026-07-13 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/2.php. |
CVE-2026-15537 | High | 7.3 | — | 2026-07-13 | A security flaw has been discovered in SourceCodester Online Book Store System 1.0. |
CVE-2026-15539 | Medium | 4.7 | — | 2026-07-13 | A security vulnerability has been detected in SourceCodester Online Book Store System 1.0. |
CVE-2026-15715 | Medium | 4.3 | — | 2026-07-14 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. |
CVE-2026-15596 | Medium | 4.3 | — | 2026-07-13 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. |
CVE-2026-15595 | Medium | 4.3 | — | 2026-07-13 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. |
CVE-2026-15540 | Medium | 4.3 | — | 2026-07-13 | A vulnerability was detected in SourceCodester Online Book Store System 1.0. |
CVE-2026-15532 | Low | 2.4 | — | 2026-07-13 | A vulnerability was identified in SourceCodester Online Book Store System 1.0. |
Getkirby · 8 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45368 | — | — | — | 2026-07-16 | Kirby is an open-source content management system. |
CVE-2026-45334 | — | — | — | 2026-07-16 | Kirby is an open-source content management system. |
CVE-2026-44177 | — | — | — | 2026-07-16 | Kirby is an open-source content management system. |
CVE-2026-44176 | — | — | — | 2026-07-16 | Kirby is an open-source content management system. |
CVE-2026-44175 | — | — | — | 2026-07-16 | Kirby is an open-source content management system. |
CVE-2026-44174 | — | — | — | 2026-07-16 | Kirby is an open-source content management system. |
CVE-2026-54005 | — | — | — | 2026-07-09 | Kirby is an open-source content management system. |
CVE-2026-49274 | — | — | — | 2026-07-09 | Kirby is an open-source content management system. |
H2o · 8 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54340 | High | 7.5 | — | 2026-07-17 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. |
CVE-2026-44453 | High | 7.5 | — | 2026-07-16 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. |
CVE-2026-44436 | High | 7.5 | — | 2026-07-16 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. |
CVE-2026-44435 | High | 7.5 | — | 2026-07-16 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. |
CVE-2026-55213 | High | 7.5 | — | 2026-07-10 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. |
CVE-2026-44452 | Medium | 5.9 | — | 2026-07-16 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. |
CVE-2026-44434 | Medium | 5.3 | — | 2026-07-16 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. |
CVE-2026-44433 | Medium | 5.3 | — | 2026-07-16 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. |
Hkuds · 8 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61736 | Critical | 9.3 | — | 2026-07-15 | LightRAG provides simple and fast retrieval-augmented generation. |
CVE-2026-58168 | High | 8.8 | — | 2026-06-30 | DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privilege users to invoke unrestricted MCP tools due to the allowed_mcp_tools function returning None instead of a denied result when mcp_tools… |
CVE-2026-58170 | High | 8.3 | — | 2026-06-30 | Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the broker proposals directory without sanitization (agent/src/live/mandate/commit.py). |
CVE-2026-58169 | High | 7.5 | — | 2026-06-30 | Vibe-Trading before 0.1.10 contains a DNS rebinding authentication bypass vulnerability that allows remote attackers to bypass bearer-token authentication by exploiting the server's trust of TCP peer addresses for loopback clients combined… |
CVE-2026-32847 | High | 7.5 | — | 2026-05-28 | DeepCode through commit c991dc2 contains a path traversal vulnerability in the SPA catch-all route in new_ui/backend/main.py that allows unauthenticated attackers to read arbitrary files by supplying percent-encoded path segments to the GE… |
CVE-2026-58173 | Medium | 6.5 | — | 2026-06-30 | Vibe-Trading before 0.1.10 contains a path traversal vulnerability that allows attackers to write files outside the intended memory root directory by supplying a malicious memory_type value containing path traversal sequences through the r… |
CVE-2026-58171 | Medium | 4.2 | — | 2026-06-30 | Vibe-Trading before 0.1.10 constructs the swarm run directory by joining a caller-supplied run identifier onto the runs base directory without validation in run_dir (agent/src/swarm/store.py). |
CVE-2026-61740 | — | — | — | 2026-07-15 | LightRAG provides simple and fast retrieval-augmented generation. |
Openwrt · 8 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62948 | Critical | 9.6 | — | 2026-07-15 | OpenWrt is a Linux operating system targeting embedded devices. |
CVE-2026-61876 | High | 8.8 | — | 2026-07-12 | LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup. |
CVE-2026-61875 | High | 8.8 | — | 2026-07-12 | luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScript via UPnP IGD AddPortMapping SOAP requests. |
CVE-2026-59260 | High | 8.8 | — | 2026-07-12 | OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/sbin/smbd, allowing authenticated delegated users to execute the Samba daemon with caller-controlled command-line arguments. |
CVE-2026-58000 | High | 8.8 | — | 2026-06-29 | luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerability in the generateKey ubus method where the cl_meta parameter is interpolated into a shell command without proper escaping or quoting. |
CVE-2026-57999 | High | 8.8 | — | 2026-06-29 | luci-app-tailscale-community contains a command injection vulnerability in the tailscale.do_login RPC method that allows authenticated users to execute arbitrary commands as root. |
CVE-2026-62184 | High | 7.5 | — | 2026-07-13 | luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to inject arbitrary IPs via attacker-controlled fields like user… |
CVE-2026-62947 | Medium | 4.9 | — | 2026-07-15 | OpenWrt is a Linux operating system targeting embedded devices. |
Python · 8 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54058 | Critical | 9.1 | — | 2026-07-14 | Pillow is a Python imaging library. |
CVE-2026-59197 | High | 8.2 | — | 2026-07-14 | Pillow is a Python imaging library. |
CVE-2026-59200 | High | 7.5 | — | 2026-07-14 | Pillow is a Python imaging library. |
CVE-2026-59205 | High | 7.5 | — | 2026-07-14 | Pillow is a Python imaging library. |
CVE-2026-59204 | High | 7.5 | — | 2026-07-14 | Pillow is a Python imaging library. |
CVE-2026-59199 | High | 7.5 | — | 2026-07-14 | Pillow is a Python imaging library. |
CVE-2026-59198 | Medium | 6.5 | — | 2026-07-14 | Pillow is a Python imaging library. |
CVE-2026-59203 | Medium | 5.3 | — | 2026-07-14 | Pillow is a Python imaging library. |
Steipete · 8 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53782 | High | 7.4 | — | 2026-06-11 | Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS feed to direct the host to fetch transcript content from loopback addresses, link-local addresses, RFC 1918 privat… |
CVE-2026-45245 | High | 7.4 | — | 2026-05-18 | Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links, causing the extension to make authenticated daemon requests… |
CVE-2026-45242 | High | 7.1 | — | 2026-05-18 | Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize daemon endpoint that allows authenticated callers to write files to arbitrary directories by supplying an absolute path or directory traversal sequence… |
CVE-2026-45243 | Medium | 6.1 | — | 2026-05-18 | Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content script window.postMessage bridge that allows malicious pages to perform unauthorized operations on automation artifacts. |
CVE-2026-45246 | Medium | 5.5 | — | 2026-05-18 | Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite path that allows local users to read sensitive credentials by exploiting default filesystem permissions. |
CVE-2026-45244 | Medium | 5.4 | — | 2026-05-18 | Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. |
CVE-2026-49949 | Medium | 5.3 | — | 2026-06-11 | CodexBar before 0.33.0 contains a credential forwarding vulnerability that allows network-adjacent attackers to intercept sensitive credentials by issuing cross-origin or HTTP-downgrade redirects to the shared ProviderHTTPClient transport. |
CVE-2026-53781 | Medium | 4.3 | — | 2026-06-11 | Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote attackers to cause disk exhaustion by serving media responses that bypass the enforced size limit through missing or misreported Content-Length headers… |
Cisco · 7 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-20150 | High | 8.8 | — | 2026-07-15 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. |
CVE-2026-20156 | High | 8.1 | — | 2026-07-15 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. |
CVE-2026-20187 | High | 7.5 | — | 2026-07-15 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. |
CVE-2026-20158 | High | 7.5 | — | 2026-07-15 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. |
CVE-2026-20157 | High | 7.5 | — | 2026-07-15 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. |
CVE-2026-20153 | High | 7.5 | — | 2026-07-15 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. |
CVE-2026-20146 | Medium | 5.5 | — | 2026-07-15 | A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating system to either read or… |
Tenda · 7 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15696 | High | 8.8 | — | 2026-07-14 | A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. |
CVE-2026-15695 | High | 8.8 | — | 2026-07-14 | A flaw has been found in Tenda BE12 Pro 16.03.66.23. |
CVE-2026-15694 | High | 8.8 | — | 2026-07-14 | A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. |
CVE-2026-15693 | High | 8.8 | — | 2026-07-14 | A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. |
CVE-2026-15692 | High | 8.8 | — | 2026-07-14 | A weakness has been identified in Tenda BE12 Pro 16.03.66.23. |
CVE-2026-15691 | High | 8.8 | — | 2026-07-14 | A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. |
CVE-2026-15543 | High | 8.8 | — | 2026-07-13 | A vulnerability was found in Tenda CH22 1.0.0.1. |
Themeum · 7 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57724 | Critical | 9.8 | — | 2026-07-13 | Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Object Injection.This issue affects Kirki: from n/a through <= 6.0.12. |
CVE-2026-57726 | Critical | 9.3 | — | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Kirki kirki allows Blind SQL Injection.This issue affects Kirki: from n/a through <= 6.0.12. |
CVE-2026-57727 | High | 7.5 | — | 2026-07-13 | Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kirki: from n/a through <= 6.0.13. |
CVE-2026-57725 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Kirki kirki allows Stored XSS.This issue affects Kirki: from n/a through <= 6.0.11. |
CVE-2026-15022 | Medium | 6.5 | — | 2026-07-16 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to generic SQL Injection via Stored Quiz Answer Array in all versions up to, and including, 4.0.0 due to insufficient escaping on the user supplied par… |
CVE-2026-57694 | Medium | 6.5 | — | 2026-07-13 | Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through <= 3.9.13. |
CVE-2026-15457 | Medium | 4.9 | — | 2026-07-17 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.0.13 via the 'family' parameter. |
Trendnet · 7 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15484 | High | 8.8 | — | 2026-07-12 | A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. |
CVE-2026-15483 | High | 8.8 | — | 2026-07-12 | A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. |
CVE-2026-15481 | High | 8.8 | — | 2026-07-12 | A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. |
CVE-2026-15480 | High | 8.8 | — | 2026-07-12 | A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. |
CVE-2026-15487 | Medium | 6.3 | — | 2026-07-12 | A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. |
CVE-2026-15486 | Medium | 6.3 | — | 2026-07-12 | A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. |
CVE-2026-15485 | Medium | 6.3 | — | 2026-07-12 | A flaw has been found in TRENDnet TEW-821DAP 1.11B03. |
Alextselegidis · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55651 | High | 7.1 | — | 2026-07-14 | Easy!Appointments is a self hosted appointment scheduler. |
CVE-2026-52839 | Low | 3.3 | — | 2026-07-14 | Easy!Appointments is a self hosted appointment scheduler. |
CVE-2026-52841 | Low | 3.1 | — | 2026-07-14 | Easy!Appointments is a self hosted appointment scheduler. |
CVE-2026-52840 | Low | 2.7 | — | 2026-07-14 | Easy!Appointments is a self hosted appointment scheduler. |
CVE-2026-52838 | Low | 2.6 | — | 2026-07-14 | Easy!Appointments is a self hosted appointment scheduler. |
CVE-2026-52837 | — | — | — | 2026-07-14 | Easy!Appointments is a self hosted appointment scheduler. |
Automationdirect · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61389 | High | 7.0 | — | 2026-07-16 | An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability. |
CVE-2026-60063 | High | 7.0 | — | 2026-07-16 | An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability. |
CVE-2026-57896 | Medium | 6.1 | — | 2026-07-16 | An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. |
CVE-2026-60140 | Medium | 6.1 | — | 2026-07-16 | An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. |
CVE-2026-60073 | Medium | 5.9 | — | 2026-07-16 | An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of data sent to a USB device. |
CVE-2026-61378 | Medium | 5.5 | — | 2026-07-16 | A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system crash. |
Berriai · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49468 | Critical | 9.8 | — | 2026-06-22 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. |
CVE-2026-59822 | High | 8.2 | — | 2026-07-08 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. |
CVE-2026-12773 | High | 7.3 | — | 2026-06-21 | A weakness has been identified in BerriAI litellm up to 1.59.8. |
CVE-2026-59821 | High | 7.2 | — | 2026-07-08 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. |
CVE-2026-59820 | Medium | 6.5 | — | 2026-07-08 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. |
CVE-2026-59819 | Medium | 4.9 | — | 2026-07-08 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. |
Better-auth · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53512 | Critical | 9.1 | — | 2026-07-15 | Better Auth is an authentication and authorization library for TypeScript. |
CVE-2026-53516 | High | 8.3 | — | 2026-07-15 | Better Auth is an authentication and authorization library for TypeScript. |
CVE-2026-53518 | High | 8.1 | — | 2026-07-15 | Better Auth is an authentication and authorization library for TypeScript. |
CVE-2026-53514 | High | 7.7 | — | 2026-07-15 | Better Auth is an authentication and authorization library for TypeScript. |
CVE-2026-45337 | High | 7.6 | — | 2026-07-15 | Better Auth is an authentication and authorization library for TypeScript. |
CVE-2026-15527 | Medium | 5.3 | — | 2026-07-13 | A vulnerability has been found in better-auth better-icons up to 1.0.5. |
Dan-in-ca · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58479 | Critical | 9.8 | — | 2026-07-14 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerability in the optional cli_control plugin that allows unauthenticated or cross-site request forgery attackers to execute arbitrary operating-s… |
CVE-2026-58477 | High | 8.2 | — | 2026-07-14 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names in HTTP reques… |
CVE-2026-58476 | High | 8.1 | — | 2026-07-14 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing administrative actions by luring a logged-in administrator into visitin… |
CVE-2026-60114 | High | 7.5 | — | 2026-07-14 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vulnerability that allows attackers with access to the restore functionality to write files to arbitrary locations by uploading crafted JSON backup file… |
CVE-2026-58478 | Medium | 6.5 | — | 2026-07-14 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying a malicious callba… |
CVE-2026-58475 | Medium | 6.1 | — | 2026-07-14 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by supplying malicious script payloads within program na… |
Netgear · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62659 | — | — | — | 2026-07-14 | A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local network to make unauthorized changes to the device's settings |
CVE-2026-62658 | — | — | — | 2026-07-14 | A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone already logged in to the device to run unauthorized commands or code on the router. |
CVE-2026-62657 | — | — | — | 2026-07-14 | A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take control of the device. |
CVE-2026-62656 | — | — | — | 2026-07-14 | A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router and run unauthorized commands. |
CVE-2026-62655 | — | — | — | 2026-07-14 | A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable. |
CVE-2026-15757 | — | — | — | 2026-07-14 | A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. |
Open-webui · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56400 | High | 8.3 | — | 2026-07-15 | open-webui before 0.3.14 contains a cross-origin resource sharing misconfiguration allowing arbitrary origins with allow_origins=* and authenticated requests to the /api/v1/functions endpoint. |
CVE-2026-59216 | High | 7.7 | — | 2026-07-09 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. |
CVE-2026-56398 | High | 7.3 | — | 2026-07-15 | Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerability in the OAuth authentication flow where the picture claim URL MIME type is inferred from file extension rather than Content-Type header, allowing SVG files to bypa… |
CVE-2026-59227 | Medium | 4.3 | — | 2026-07-09 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. |
CVE-2026-59217 | Medium | 4.3 | — | 2026-07-09 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. |
CVE-2026-59215 | Low | 3.1 | — | 2026-07-09 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. |
Quantumcloud · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57710 | Critical | 9.9 | — | 2026-07-13 | Unrestricted Upload of File with Dangerous Type vulnerability in quantumcloud WoowBot Pro Max woowbot-pro-max allows Using Malicious Files.This issue affects WoowBot Pro Max: from n/a through <= 14.1.7. |
CVE-2026-57707 | Critical | 9.3 | — | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows SQL Injection.This issue affects Simple Business Director… |
CVE-2026-57363 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot chatbot allows Stored XSS.This issue affects ChatBot: from n/a through <= 8.3.7. |
CVE-2026-57414 | Medium | 6.5 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot for eCommerce – WoowBot woowbot-woocommerce-chatbot allows Stored XSS.This issue affects ChatBot for eCommerce… |
CVE-2026-15106 | Medium | 5.3 | — | 2026-07-16 | The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.5.6. |
CVE-2026-15610 | Medium | 4.3 | — | 2026-07-16 | The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.5.6. |
Rejetto · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61500 | Critical | 9.8 | — | 2026-07-13 | Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the same generator to unauthenticated clients during login. |
CVE-2026-61501 | Medium | 6.1 | — | 2026-07-13 | Rejetto HFS 3.0.0 through 3.2.0 renders log entries in the administration panel as HTML without sanitization. |
CVE-2026-61504 | Medium | 5.4 | — | 2026-07-13 | Rejetto HFS 3.0.0 through 3.2.0 does not escape file names in its fallback "basic" web listing, and this listing can be forced by any browser via the ?get=basic parameter. |
CVE-2026-61505 | Medium | 5.3 | — | 2026-07-13 | Rejetto HFS 3.0.0 through 3.2.0 allows path traversal through the lang query parameter, permitting a remote unauthenticated attacker to read certain JSON files outside the shared folders. |
CVE-2026-61503 | Medium | 5.3 | — | 2026-07-13 | Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses from its login endpoint depending on whether the submitted username exists. |
CVE-2026-61502 | Medium | 4.3 | — | 2026-07-13 | Rejetto HFS 3.0.0 through 3.2.0 accepts state-changing API requests via the GET method and exempts GET requests from its anti-CSRF header check. |
Roundcube · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54433 | High | 7.2 | — | 2026-07-14 | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting (XSS) via a crafted plain-text email message. |
CVE-2026-62643 | High | 7.2 | — | 2026-07-14 | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. |
CVE-2026-62644 | Medium | 6.4 | — | 2026-07-14 | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webmail was subject to username spoofing via session data, which could lead to account takeover. |
CVE-2026-54432 | Medium | 4.7 | — | 2026-07-14 | Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Site Scripting (XSS). |
CVE-2026-62642 | Medium | 4.3 | — | 2026-07-14 | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment. |
CVE-2026-62641 | Medium | 4.3 | — | 2026-07-14 | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size. |
Shopware · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48009 | Medium | 6.8 | — | 2026-07-17 | Shopware is an open commerce platform. |
CVE-2026-48014 | Medium | 6.5 | — | 2026-07-17 | Shopware is an open commerce platform. |
CVE-2026-48010 | Medium | 6.5 | — | 2026-07-17 | Shopware is an open commerce platform. |
CVE-2026-48008 | Medium | 6.5 | — | 2026-07-17 | Shopware is an open commerce platform. |
CVE-2026-48015 | Medium | 4.9 | — | 2026-07-17 | Shopware is an open commerce platform. |
CVE-2026-48016 | Medium | 4.3 | — | 2026-07-17 | Shopware is an open commerce platform. |
Spaceapplications · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46562 | Critical | 9.8 | — | 2026-07-16 | Yamcs is a mission control framework. |
CVE-2026-46621 | Critical | 9.1 | — | 2026-07-16 | Yamcs is a mission control framework. |
CVE-2026-44632 | Critical | 9.1 | — | 2026-07-16 | Yamcs is a mission control framework. |
CVE-2026-44596 | Medium | 6.5 | — | 2026-07-16 | Yamcs is a mission control framework. |
CVE-2026-55548 | Medium | 4.3 | — | 2026-07-16 | Yamcs is a mission control framework. |
CVE-2026-44595 | Medium | 4.3 | — | 2026-07-16 | Yamcs is a mission control framework. |
Taosdata · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62349 | High | 8.3 | — | 2026-07-15 | TDengine is an open source, time-series database optimized for Internet of Things devices. |
CVE-2026-62351 | High | 7.5 | — | 2026-07-15 | TDengine is a time-series database optimized for Internet of Things devices. |
CVE-2026-62350 | High | 7.2 | — | 2026-07-15 | TDengine is an open source, time-series database optimized for Internet of Things devices. |
CVE-2026-62355 | Medium | 5.4 | — | 2026-07-15 | TDengine is an open source, time-series database optimized for Internet of Things devices. |
CVE-2026-62353 | Medium | 5.4 | — | 2026-07-15 | TDengine is a time-series database optimized for Internet of Things devices. |
CVE-2026-62348 | Medium | 5.4 | — | 2026-07-15 | TDengine is a time-series database optimized for Internet of Things devices. |
Tp-link · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15429 | High | 8.8 | — | 2026-07-14 | A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. |
CVE-2026-15428 | High | 8.8 | — | 2026-07-14 | An OS command injection vulnerability exists in Archer VX800v v1 due to insufficient input sanitization of the domain name parameter. |
CVE-2026-15427 | High | 8.1 | — | 2026-07-14 | An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insufficient input validation and sanitization of parameters, allowing crafted input to be executed as system-level commands. |
CVE-2026-5040 | Medium | 6.7 | — | 2026-07-14 | TP-Link Deco M5 v1 uses a weak password hashing mechanism to store user credentials. |
CVE-2026-13230 | Medium | 6.5 | — | 2026-07-15 | An information disclosure vulnerability was identified in TP-Link Kasa EC70 v4 and EC71 v4 in the local discovery mechanism, which exposes sensitive geolocation information without requiring authentication. |
CVE-2026-9770 | Medium | 5.3 | — | 2026-07-15 | Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read-only filesystem that is shared across devices. An attacker with access to the firmware image can extract the embedded key. Successfu… |
Wazuh · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-39359 | High | 7.5 | — | 2026-07-17 | Wazuh is a free and open source platform used for threat prevention, detection, and response. |
CVE-2026-34150 | High | 7.5 | — | 2026-07-17 | Wazuh is a free and open source platform used for threat prevention, detection, and response. |
CVE-2026-44251 | Medium | 6.5 | — | 2026-07-17 | Wazuh is a free and open source platform used for threat prevention, detection, and response. |
CVE-2026-33754 | Medium | 6.5 | — | 2026-07-17 | Wazuh is a free and open source platform used for threat prevention, detection, and response. |
CVE-2026-40106 | Medium | 4.7 | — | 2026-07-17 | Wazuh is a free and open source platform used for threat prevention, detection, and response. |
CVE-2026-33434 | Medium | 4.3 | — | 2026-07-17 | Wazuh is a free and open source platform used for threat prevention, detection, and response. |
Argoproj · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54526 | Critical | 9.9 | — | 2026-07-16 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. |
CVE-2026-15416 | High | 8.9 | — | 2026-07-14 | A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could allow an unauthenticated attacker with network access to the Argo CD repo-server to achieve remote code execution. |
CVE-2026-62185 | High | 7.6 | — | 2026-07-13 | Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs. |
CVE-2026-45738 | High | 7.3 | — | 2026-07-15 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. |
CVE-2026-45737 | Medium | 6.3 | — | 2026-07-15 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. |
Astrbotdevs · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-16074 | Medium | 6.3 | — | 2026-07-17 | A vulnerability was detected in AstrBotDevs AstrBot up to 4.25.2. |
CVE-2026-15501 | Medium | 6.3 | — | 2026-07-12 | A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. |
CVE-2026-15500 | Medium | 6.3 | — | 2026-07-12 | A weakness has been identified in AstrBotDevs AstrBot up to 4.25.2. |
CVE-2026-15499 | Medium | 6.3 | — | 2026-07-12 | A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. |
CVE-2026-16073 | Low | 3.5 | — | 2026-07-17 | A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. |
Aws · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15895 | High | 7.8 | — | 2026-07-15 | OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 might allow context-dependent attackers to execute arbitrary commands via crafted package specifiers passed to the npm: source argument. |
CVE-2026-15643 | High | 7.3 | — | 2026-07-14 | AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assistants to interact with AWS HealthLake FHIR datastores. A server-side request forgery in the pagination handling component in… |
CVE-2026-12283 | Medium | 6.8 | — | 2026-07-17 | Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard SQL. |
CVE-2026-15737 | Medium | 5.7 | — | 2026-07-16 | AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. |
CVE-2026-15415 | Medium | 5.5 | — | 2026-07-17 | AWS HealthOmics is a HIPAA-eligible service that fully manages the compute, storage, and workflow engine infrastructure required to run bioinformatics analyses at scale for clinical diagnostics, drug discovery, and agricultural research. |
Code-projects · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-16014 | High | 7.3 | — | 2026-07-17 | A vulnerability was found in code-projects Hospital Bed Management System 1.0. |
CVE-2026-15677 | High | 7.3 | — | 2026-07-14 | A weakness has been identified in code-projects Online Job Portal 1.0. |
CVE-2026-15676 | High | 7.3 | — | 2026-07-14 | A security flaw has been discovered in code-projects Online Job Portal up to 1.0. |
CVE-2026-15675 | High | 7.3 | — | 2026-07-14 | A vulnerability was identified in code-projects Online Job Portal 1.0. |
CVE-2026-15678 | Low | 3.5 | — | 2026-07-14 | A security vulnerability has been detected in code-projects Online Job Portal 1.0. |
Csa-iot · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-56365 | High | 7.5 | — | 2026-07-14 | A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, in the interaction model command processing logic. |
CVE-2025-56364 | High | 7.5 | — | 2026-07-14 | A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, where the `GetDestinationGroupId().Value()` method is called without first checking whether a value exists. |
CVE-2025-56363 | High | 7.5 | — | 2026-07-14 | A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting the ReadRevisionAttribute function used in multiple clusters (Channel, Account Login, TargetNavigator, etc.). |
CVE-2025-56362 | High | 7.5 | — | 2026-07-14 | A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2, specifically within the Level Control cluster's periodic server tick logic. |
CVE-2025-56361 | High | 7.5 | — | 2026-07-14 | A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically within the Level Control cluster's server tick logic (`emberAfLevelControlClusterServerTickCallback`). |
Faye · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54466 | High | 7.5 | — | 2026-07-17 | websocket-driver is a WebSocket protocol handler with pluggable I/O. |
CVE-2026-54465 | High | 7.5 | — | 2026-07-17 | websocket-driver is a WebSocket protocol handler with pluggable I/O. |
CVE-2026-54463 | High | 7.5 | — | 2026-07-17 | websocket-driver is a WebSocket protocol handler with pluggable I/O. |
CVE-2026-54490 | — | — | — | 2026-07-17 | websocket-driver is a WebSocket protocol handler with pluggable I/O. |
CVE-2026-54464 | — | — | — | 2026-07-17 | ### Impact If this library is used in tandem with the `permessage-deflate` extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size. |
Grafana · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15583 | High | 8.6 | — | 2026-07-15 | A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's environment-configured Grafana service-account token by supplying a crafted X-Grafana-URL request header. |
CVE-2026-21729 | High | 7.5 | — | 2026-07-16 | Loki queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy. |
CVE-2026-33382 | High | 7.5 | — | 2026-07-10 | Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. |
CVE-2026-8595 | Medium | 6.8 | — | 2026-07-10 | A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script in the browser of any user who views the dashboard (stored cross-site scripting). |
CVE-2026-8609 | Medium | 5.3 | — | 2026-07-10 | An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service). |
Hapijs · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48022 | Medium | 6.5 | — | 2026-07-17 | @hapi/wreck is an HTTP client utility. |
CVE-2026-48049 | Medium | 5.3 | — | 2026-07-17 | @hapi/inert provides static file and directory handlers for hapi.js. |
CVE-2026-48038 | Medium | 5.3 | — | 2026-07-14 | joi is a schema description language and data validator for JavaScript. |
CVE-2026-44979 | — | — | — | 2026-07-17 | @hapi/wreck is an HTTP client utility. |
CVE-2026-44974 | — | — | — | 2026-07-17 | @hapi/content provided HTTP Content-* headers parsing. |
Jetbrains · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62422 | Critical | 10.0 | — | 2026-07-14 | In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible |
CVE-2026-59792 | Critical | 9.6 | — | 2026-07-10 | In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible |
CVE-2026-59793 | High | 8.8 | — | 2026-07-10 | In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration |
CVE-2026-59796 | High | 8.1 | — | 2026-07-10 | In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks |
CVE-2026-59795 | High | 8.1 | — | 2026-07-10 | In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible |
Jupyter · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44182 | Critical | 10.0 | — | 2026-07-16 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. |
CVE-2026-44181 | Critical | 10.0 | — | 2026-07-16 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. |
CVE-2026-44180 | Critical | 9.8 | — | 2026-07-16 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. |
CVE-2026-54527 | Critical | 9.0 | — | 2026-07-08 | JupyterLab Git is a Git extension for JupyterLab. |
CVE-2026-54528 | High | 7.1 | — | 2026-07-08 | JupyterLab Git is a Git extension for JupyterLab. |
Labring · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61644 | High | 7.7 | — | 2026-07-15 | FastGPT is a knowledge-based AI application platform. |
CVE-2026-61643 | Medium | 5.9 | — | 2026-07-15 | FastGPT is a knowledge-based AI application platform. |
CVE-2026-50562 | — | — | — | 2026-07-15 | FastGPT is a knowledge-based AI application platform. |
CVE-2026-61684 | — | — | — | 2026-07-15 | FastGPT is a knowledge-based AI application platform. |
CVE-2026-61646 | — | — | — | 2026-07-15 | FastGPT is a knowledge-based AI application platform. |
Lobehub · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59095 | High | 7.7 | — | 2026-07-02 | LobeChat before 2.2.10-canary.18 contains a server-side request forgery vulnerability that allows authenticated attackers to direct internal HTTP requests to arbitrary URLs by supplying user-controlled input to the skill import service (im… |
CVE-2026-59098 | Medium | 6.5 | — | 2026-07-02 | LobeChat through 2.2.9 contains a broken access control vulnerability in the retrieval-augmented-generation semantic search functionality that allows authenticated attackers to access other users' data by exploiting missing user-identifier… |
CVE-2026-58578 | Medium | 6.5 | — | 2026-07-02 | LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service (ReDoS) vulnerability that allows authenticated attackers to block the Node.js event loop by supplying a catastrophic-backtracking pattern in a GitHub… |
CVE-2026-58580 | Medium | 5.9 | — | 2026-07-02 | LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. |
CVE-2026-59100 | Medium | 5.0 | — | 2026-07-02 | LobeChat through 2.2.9 contains a broken object level authorization vulnerability that allows authenticated attackers to access and modify other users' chat-group agent data by supplying arbitrary group identifiers. |
Mosaxiv · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-16017 | Medium | 6.3 | — | 2026-07-17 | A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. |
CVE-2026-15620 | Medium | 6.3 | — | 2026-07-14 | A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. |
CVE-2026-15619 | Medium | 6.3 | — | 2026-07-14 | A weakness has been identified in mosaxiv clawlet up to 0.2.10. |
CVE-2026-15618 | Medium | 6.3 | — | 2026-07-14 | A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. |
CVE-2026-15621 | Medium | 5.3 | — | 2026-07-14 | A vulnerability was detected in mosaxiv clawlet up to 0.2.10. |
Paulsm · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48045 | Medium | 6.5 | — | 2026-07-17 | Zeroconf is a pure Python implementation of multicast DNS service discovery. |
CVE-2026-47184 | Medium | 6.5 | — | 2026-07-17 | Zeroconf is a pure Python implementation of multicast DNS service discovery. |
CVE-2026-47183 | Medium | 6.5 | — | 2026-07-17 | Zeroconf is a pure Python implementation of multicast DNS service discovery. |
CVE-2026-47180 | Medium | 6.5 | — | 2026-07-17 | Zeroconf is a pure Python implementation of multicast DNS service discovery. |
CVE-2026-48487 | Medium | 5.3 | — | 2026-07-17 | Zeroconf is a pure Python implementation of multicast DNS service discovery. |
Pimcore · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44739 | High | 8.7 | — | 2026-07-17 | Pimcore is an Open Source Data & Experience Management Platform. |
CVE-2026-45260 | High | 8.1 | — | 2026-07-17 | Pimcore is an Open Source Data & Experience Management Platform. |
CVE-2026-45162 | High | 8.0 | — | 2026-07-17 | Pimcore is an Open Source Data & Experience Management Platform. |
CVE-2026-45703 | Medium | 6.4 | — | 2026-07-17 | Pimcore is an Open Source Data & Experience Management Platform. |
CVE-2026-45704 | — | — | — | 2026-07-17 | Pimcore is an Open Source Data & Experience Management Platform. |
Shibby · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15548 | High | 8.8 | — | 2026-07-13 | A security vulnerability has been detected in Shibby Tomato up to 1.28.0000. |
CVE-2026-15545 | High | 8.8 | — | 2026-07-13 | A vulnerability was identified in Shibby Tomato up to 1.28.0000. |
CVE-2026-15544 | High | 8.8 | — | 2026-07-13 | A vulnerability was determined in Shibby Tomato up to 1.28.0000. |
CVE-2026-15547 | Medium | 6.3 | — | 2026-07-13 | A weakness has been identified in Shibby Tomato up to 1.28.0000. |
CVE-2026-15546 | Medium | 6.3 | — | 2026-07-13 | A security flaw has been discovered in Shibby Tomato up to 1.28.0000. |
Sigstore · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59891 | Critical | 9.6 | — | 2026-07-14 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. |
CVE-2026-48815 | High | 7.5 | — | 2026-07-14 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. |
CVE-2026-48816 | Medium | 6.5 | — | 2026-07-14 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. |
CVE-2026-49834 | Medium | 5.9 | — | 2026-07-17 | sigstore-go is a Go library for Sigstore signing and verification. |
CVE-2026-48758 | Medium | 5.4 | — | 2026-07-14 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. |
Sonatype · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14646 | — | — | — | 2026-07-14 | Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets returned by proxy repository upstream servers. |
CVE-2026-14645 | — | — | — | 2026-07-14 | Nexus Repository 3 does not validate the destination of the "Webhook: Global" capability's configured URL before making an outbound HTTP request, allowing a user holding the Capability Administration permission to cause the server to send… |
CVE-2026-7494 | — | — | — | 2026-07-14 | Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. |
CVE-2026-14504 | — | — | — | 2026-07-14 | An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission c… |
CVE-2026-11403 | — | — | — | 2026-07-14 | A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to gain unauthorized access to repository operations as a targeted user. |
Stoatchat · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63088 | High | 8.6 | — | 2026-07-16 | stoatchat before 0.14.0 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated network-accessible attackers to bypass the DNS-based IP blocklist by exploiting incomplete address validation in the url_is_bla… |
CVE-2026-63306 | High | 8.6 | — | 2026-07-16 | stoatchat before 0.13.5 contains an unauthenticated server-side request forgery vulnerability in the /proxy and /embed endpoints that accept arbitrary URLs without DNS resolution filtering or private IP range validation. |
CVE-2024-58360 | Medium | 6.5 | — | 2026-07-16 | stoatchat versions before 0.7.8 fail to enforce account creation restrictions including invite-only mode, email verification, captcha, and shield verification. |
CVE-2025-71388 | — | — | — | 2026-07-16 | stoatchat (delta/Revolt) versions from 20241213-1 before 20250210-1 allow users with only ViewChannel (read) permission on a channel to fetch that channel's webhooks, including their tokens, because the webhook fetch endpoint checked for V… |
CVE-2025-71377 | — | — | — | 2026-07-16 | stoatchat (delta) versions before 20250210-1 (0.8.2) contain a logic error in the query messages route. |
Busybox · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-38754 | Medium | 5.1 | — | 2026-07-15 | A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. |
CVE-2026-38753 | Medium | 4.9 | — | 2026-07-15 | A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. |
CVE-2026-38755 | Low | 2.9 | — | 2026-07-15 | A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. |
CVE-2026-38752 | Low | 2.9 | — | 2026-07-15 | A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. |
Canonical · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11386 | Critical | 9.0 | — | 2026-07-16 | An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). |
CVE-2026-10037 | High | 8.8 | — | 2026-07-08 | A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. |
CVE-2026-9494 | Medium | 5.5 | — | 2026-07-16 | An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). |
CVE-2026-12391 | Medium | 5.0 | — | 2026-07-16 | An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools) within the pro collect-logs command framework. |
Chroma · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45829 | Critical | 10.0 | — | 2026-05-18 | A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_cod… |
CVE-2026-45833 | High | 8.8 | — | 2026-06-12 | A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the … |
CVE-2026-45832 | High | 8.8 | — | 2026-06-12 | All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization controls by using the V1 endpoints. |
CVE-2026-45830 | High | 8.8 | — | 2026-06-12 | A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belon… |
Churchcrm · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58409 | Critical | 9.1 | — | 2026-07-13 | ChurchCRM is an open-source church management system. |
CVE-2026-58410 | High | 7.1 | — | 2026-07-13 | ChurchCRM is an open-source church management system. |
CVE-2026-58408 | Medium | 6.5 | — | 2026-07-13 | ChurchCRM is an open-source church management system. |
CVE-2026-58411 | — | — | — | 2026-07-13 | ChurchCRM is an open-source church management system. |
Codechild · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57074 | Critical | 9.1 | — | 2026-07-16 | XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. |
CVE-2026-57073 | Critical | 9.1 | — | 2026-07-16 | HTML::Bare versions through 0.04 for Perl have an unbounded character lookahead. |
CVE-2026-13401 | High | 7.5 | — | 2026-07-16 | XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. |
CVE-2026-13397 | High | 7.5 | — | 2026-07-16 | HTML::Bare versions through 0.04 for Perl will hang in an infinite loop when parsing malformed attributes. |
Cure53 · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47423 | High | 8.2 | — | 2026-07-14 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. |
CVE-2026-49978 | Medium | 6.1 | — | 2026-07-14 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. |
CVE-2026-49459 | Medium | 6.1 | — | 2026-07-14 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. |
CVE-2026-49458 | Medium | 6.1 | — | 2026-07-14 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. |
Dani-garcia · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47158 | High | 8.3 | — | 2026-07-15 | Vaultwarden is a Bitwarden-compatible server written in Rust. |
CVE-2026-47164 | High | 7.7 | — | 2026-07-15 | Vaultwarden is a Bitwarden-compatible server written in Rust. |
CVE-2026-47160 | Medium | 5.8 | — | 2026-07-15 | Vaultwarden is a Bitwarden-compatible server written in Rust. |
CVE-2026-47159 | — | — | — | 2026-07-15 | Vaultwarden is a Bitwarden-compatible server written in Rust. |
Datadog · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50274 | High | 7.5 | — | 2026-07-17 | Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring. |
CVE-2026-50272 | High | 7.5 | — | 2026-07-17 | dd-trace is the Datadog APM client for Node.js. |
CVE-2026-50271 | High | 7.5 | — | 2026-07-17 | Datadog dd-trace-py is the Datadog Python APM client. |
CVE-2026-50273 | High | 7.5 | — | 2026-07-17 | Datadog .NET Tracer is a client library for Datadog APM for .NET applications. |
Devolutions · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15637 | High | 7.5 | — | 2026-07-14 | Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to disclose the private key of an SSH key or certificate PAM credential… |
CVE-2026-15641 | High | 7.1 | — | 2026-07-14 | Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to approve their own pending access request via a direct call to the request status endpoin… |
CVE-2026-15642 | Low | 3.3 | — | 2026-07-14 | Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Server 2026.1.22.0, 2026.2.11.0 allows an attacker with access to the generated response file to obtain the Azure Key Vault… |
CVE-2026-15058 | Low | 3.1 | — | 2026-07-14 | Improper authorization in the secure messages deletion endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated user to delete another user's messages via a direct object reference to the message identifier. |
Dhcpcd_project · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56116 | Medium | 6.5 | — | 2026-06-23 | dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement route information handling that allows an unauthenticated same-link attacker to cause denial of service by sending crafte… |
CVE-2026-56114 | Medium | 5.3 | — | 2026-06-23 | dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6_makemessage() in src/dhcp6.c that allows unauthenticated same-link attackers to write beyond a fixed local buffer by seria… |
CVE-2026-56113 | Medium | 5.3 | — | 2026-06-23 | dhcpcd through 10.3.2, fixed in commit 5733d3c, contains a heap use-after-free vulnerability that allows unauthenticated same-link attackers to crash the daemon by sending a crafted DHCPv6 RENEW reply with RFC6603 OPTION_PD_EXCLUDE and bot… |
CVE-2026-56117 | Medium | 4.7 | — | 2026-06-23 | dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger memory corruption when privilege separatio… |
Docling · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44023 | High | 8.6 | — | 2026-07-16 | Docling Core defines core data types and transformations for the document processing application Docling. |
CVE-2026-44016 | High | 8.2 | — | 2026-06-24 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. |
CVE-2026-44020 | High | 7.5 | — | 2026-06-24 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. |
CVE-2026-44017 | High | 7.5 | — | 2026-06-24 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. |
Filebrowser · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62685 | High | 8.1 | — | 2026-07-15 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. |
CVE-2026-62843 | Medium | 6.8 | — | 2026-07-15 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. |
CVE-2026-62683 | Low | 3.1 | — | 2026-07-15 | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. |
CVE-2026-61874 | Low | 3.1 | — | 2026-07-12 | filebrowser versions before 2.63.17 fail to normalize paths before querying the share index in DeleteWithPathPrefix, allowing authenticated users to leave stale public shares behind. |
Fluent · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44024 | Critical | 9.8 | — | 2026-07-08 | Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. |
CVE-2026-44160 | High | 7.5 | — | 2026-07-08 | Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. |
CVE-2026-44025 | High | 7.5 | — | 2026-07-08 | Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. |
CVE-2026-44161 | High | 7.2 | — | 2026-07-08 | Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. |
Fossies · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-40469 | Critical | 9.1 | — | 2026-07-13 | Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). |
CVE-2026-40468 | Critical | 9.1 | — | 2026-07-13 | Integer overflow vulnerability has been found in "builtin.c" program file of gawk. |
CVE-2026-40553 | High | 7.5 | — | 2026-07-13 | Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). |
CVE-2026-40467 | High | 7.5 | — | 2026-07-13 | Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). |
Freerdp · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57156 | Critical | 9.8 | — | 2026-07-10 | FreeRDP is a free implementation of the Remote Desktop Protocol. |
CVE-2026-57158 | Critical | 9.1 | — | 2026-07-10 | FreeRDP is a free implementation of the Remote Desktop Protocol. |
CVE-2026-55827 | High | 7.5 | — | 2026-07-10 | FreeRDP is a free implementation of the Remote Desktop Protocol. |
CVE-2026-57157 | Medium | 6.5 | — | 2026-07-10 | FreeRDP is a free implementation of the Remote Desktop Protocol. |
Github · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54163 | Medium | 4.7 | — | 2026-07-17 | secure_headers manages application of security headers with many safe defaults. |
CVE-2026-15783 | — | — | — | 2026-07-17 | A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with write access to any repository to read metadata from private repositories they did not have access to, including priva… |
CVE-2026-15343 | — | — | — | 2026-07-17 | A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code execution inside the Dependabot updater container to write files to arbitrary repository paths, including GitHub Actions workfl… |
CVE-2026-15007 | — | — | — | 2026-07-17 | A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause service disruption by supplying a repository release notes configuration file containing deeply nested YAML. |
Givanz · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-41937 | High | 7.2 | — | 2026-05-14 | Vvveb before 1.0.8.3 contains an unrestricted file upload vulnerability in the plugin upload endpoint that allows super_admin users to execute arbitrary PHP code by uploading a malicious plugin ZIP file. |
CVE-2026-41935 | High | 7.1 | — | 2026-05-14 | Vvveb before 1.0.8.3 contains an uncontrolled recursion vulnerability in the admin controller dispatch cycle where Base::init() repeatedly invokes permission() on error handlers, causing infinite recursion until PHP memory limits are exhau… |
CVE-2026-41932 | Medium | 6.1 | — | 2026-05-14 | Vvveb before 1.0.8.3 contains a stored cross-site scripting vulnerability in the customer signup flow where the Signup::addUser() controller copies raw POST username values into the display_name field before sanitization occurs. |
CVE-2026-41933 | Medium | 5.3 | — | 2026-05-14 | Vvveb before 1.0.8.3 contains a directory listing information disclosure vulnerability that allows unauthenticated attackers to enumerate files and directories by accessing multiple paths lacking proper index directives in .htaccess files. |
Hapifhir · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55471 | Critical | 9.1 | — | 2026-07-08 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. |
CVE-2026-49485 | High | 7.5 | — | 2026-07-17 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. |
CVE-2026-45367 | High | 7.5 | — | 2026-07-16 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. |
CVE-2026-55470 | High | 7.5 | — | 2026-07-08 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. |
Hedgedoc · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58489 | — | — | — | 2026-07-13 | HedgeDoc is an open source, real-time collaborative markdown notes application. |
CVE-2026-58486 | — | — | — | 2026-07-13 | HedgeDoc is an open source, real-time, collaborative, markdown notes application. |
CVE-2026-58488 | — | — | — | 2026-07-13 | HedgeDoc is an open source, real-time, collaborative, markdown notes application. |
CVE-2026-58487 | — | — | — | 2026-07-13 | HedgeDoc is an open source, real-time, collaborative, markdown notes application. |
Hieventsdev · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57960 | Medium | 6.5 | — | 2026-06-29 | Hi.Events through 1.9.0 public check-in list endpoints use short_id as sole access control, allowing unauthenticated access to retrieve full attendee lists including emails and personal information. |
CVE-2026-57959 | Medium | 5.9 | — | 2026-06-29 | Hi.Events through 1.9.0 contains a promo code validation vulnerability where reservation validates usage count before asynchronous UpdateEventStatisticsJob increments it, allowing attackers to redeem limited promo codes unlimited times. |
CVE-2026-60119 | Medium | 5.4 | — | 2026-07-14 | Hi.Events before 1.11.0 contains a cross-site scripting vulnerability that allows authenticated attackers with event creation or edit permissions to inject arbitrary HTML and JavaScript by embedding a malicious event title containing the <… |
CVE-2026-60118 | Medium | 5.3 | — | 2026-07-14 | Hi.Events before 1.11.0 contains a missing server-side visibility enforcement vulnerability that allows unauthenticated attackers to purchase hidden tickets by referencing hidden product and price IDs in order creation requests without aut… |
Hmbrand · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15043 | Critical | 9.8 | — | 2026-07-14 | DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text. |
CVE-2026-60082 | Critical | 9.1 | — | 2026-07-14 | DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. |
CVE-2026-15392 | High | 7.7 | — | 2026-07-14 | DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. |
CVE-2026-60081 | High | 7.5 | — | 2026-07-14 | DBI::ProfileData versions before 1.651 for Perl do not limit the path index. |
Joomdonation.com · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-60024 | Critical | 9.8 | — | 2026-07-17 | Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets. |
CVE-2026-60025 | High | 8.8 | — | 2026-07-17 | Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection. |
CVE-2026-58149 | Medium | 5.3 | — | 2026-07-17 | Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking is vulnerable to an unauthenticated user enumeration that allows to retrieve account usernames and email addresses. |
CVE-2026-57832 | — | — | — | 2026-07-15 | Joomla Extension - joomdonation.com - Unauthenticated blind SQL injection in EDocman < 3.9 - The Joomla extension EDocman is vulnerable to an unauthenticated SQL injection. |
Lfprojects · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-2611 | Critical | 9.6 | — | 2026-05-19 | In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. |
CVE-2026-59950 | High | 8.1 | — | 2026-07-15 | The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). |
CVE-2026-52870 | High | 7.6 | — | 2026-07-15 | The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). |
CVE-2026-52869 | High | 7.1 | — | 2026-07-15 | The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). |
Logto-io · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55789 | High | 8.5 | — | 2026-07-10 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. |
CVE-2026-55377 | High | 8.1 | — | 2026-07-10 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. |
CVE-2026-55370 | Medium | 6.4 | — | 2026-07-10 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. |
CVE-2026-54714 | Medium | 6.1 | — | 2026-07-10 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. |
Musicplayerdaemon · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49127 | High | 8.6 | — | 2026-05-28 | Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack.cxx that allows unauthenticated attackers to corrupt stack memory by triggering an off-by-one w… |
CVE-2026-49128 | High | 7.5 | — | 2026-05-28 | Music Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability in LocalStorage::MapFSOrThrow and LocalStorage::MapUTF8 within the local storage plugin, where the on-disk path is constructed by joining the storage… |
CVE-2026-49129 | Medium | 5.8 | — | 2026-05-28 | Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin where CURLOPT_FOLLOWLOCATION is set without CURLOPT_REDIR_PROTOCOLS_STR, allowing unauthenticated attackers to bypass… |
CVE-2026-49130 | Medium | 5.3 | — | 2026-05-28 | Music Player Daemon (MPD) before version 0.24.11 contains a CRLF injection vulnerability in the xspf_char_data function within the XSPF playlist plugin that allows attackers to embed literal CR/LF bytes in URI fields by supplying a malicio… |
Mwtcmi · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46512 | Critical | 9.9 | — | 2026-07-16 | Frogman provides headless PBX control through MCP and HTTP API. |
CVE-2026-46513 | High | 7.4 | — | 2026-07-16 | Frogman provides headless PBX control through MCP and HTTP API. |
CVE-2026-46514 | Medium | 6.5 | — | 2026-07-16 | Frogman provides headless PBX control through MCP and HTTP API. |
CVE-2026-46515 | — | — | — | 2026-07-16 | Frogman provides headless PBX control through MCP and HTTP API. |
Nesquena · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58123 | Critical | 9.8 | — | 2026-07-09 | Hermes WebUI before 0.51.788 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by accessing the embedded terminal API endpoints without credentials. |
CVE-2026-49973 | Critical | 9.4 | — | 2026-06-11 | Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the _set_password parameter to the settings API endpoint without any… |
CVE-2026-58122 | Critical | 9.1 | — | 2026-07-09 | Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by supplying a spoofed X-Forwarded-For header with… |
CVE-2026-58174 | Medium | 6.5 | — | 2026-06-30 | Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persist… |
Nextlevelbuilder · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15626 | Medium | 6.3 | — | 2026-07-14 | A vulnerability was determined in nextlevelbuilder GoClaw 3.13.3-beta.3. |
CVE-2026-15625 | Medium | 6.3 | — | 2026-07-14 | A vulnerability was found in nextlevelbuilder GoClaw 3.11.3. |
CVE-2026-15624 | Medium | 6.3 | — | 2026-07-14 | A vulnerability has been found in nextlevelbuilder GoClaw 3.13.3-beta.3. |
CVE-2026-15627 | Medium | 4.3 | — | 2026-07-14 | A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.3-beta.3. |
Nocobase · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-52887 | Critical | 10.0 | — | 2026-07-15 | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. |
CVE-2026-52888 | Medium | 6.8 | — | 2026-07-15 | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. |
CVE-2026-55410 | Medium | 6.7 | — | 2026-07-15 | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. |
CVE-2026-58468 | Medium | 5.5 | — | 2026-07-07 | NocoBase through 2.1.20 contains a server-side request forgery vulnerability in the serverRequest wrapper that allows authenticated administrators to issue arbitrary outbound HTTP requests by supplying malicious URLs to workflow request no… |
Openreplay · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55879 | Critical | 9.3 | — | 2026-07-10 | OpenReplay is a self-hosted session replay suite. |
CVE-2026-55880 | High | 7.1 | — | 2026-07-10 | OpenReplay is a self-hosted session replay suite. |
CVE-2026-57230 | Medium | 5.4 | — | 2026-07-10 | OpenReplay is a self-hosted session replay suite. |
CVE-2026-55881 | — | — | — | 2026-07-10 | OpenReplay is a self-hosted session replay suite. |
Plank · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49972 | High | 8.8 | — | 2026-07-13 | Laravel-Mediable before 7.0.0 contains a file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading a file with an embedded PHP extension disguised within a double extension such as shell… |
CVE-2026-49970 | High | 8.8 | — | 2026-07-13 | Laravel-Mediable before 7.0.0 contains a path traversal vulnerability in the File::sanitizePath() function that allows attackers to write uploaded files to arbitrary locations by controlling the directory argument passed to MediaUploader… |
CVE-2026-49969 | High | 7.4 | — | 2026-07-13 | Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows remote attackers to issue arbitrary HTTP requests from the server by supplying unvalidated caller-controlled URLs to endpoints backed by MediaUp… |
CVE-2026-49971 | Medium | 6.1 | — | 2026-07-13 | Laravel-Mediable before 7.0.0 contains a stored cross-site scripting vulnerability that allows authenticated or anonymous users to execute arbitrary JavaScript by uploading unsanitized SVG files containing embedded scripts in onload event… |
Rafymrx · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15491 | High | 7.3 | — | 2026-07-12 | A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. |
CVE-2026-15490 | High | 7.3 | — | 2026-07-12 | A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. |
CVE-2026-15489 | High | 7.3 | — | 2026-07-12 | A vulnerability was identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. |
CVE-2026-15909 | Medium | 6.3 | — | 2026-07-16 | A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. |
Rtklib · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56786 | Critical | 9.8 | — | 2026-06-25 | RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 function that fails to clamp length counters to destination buffer size, allowing up to 191-byte overflow into fixed 64-byte descriptor fields. |
CVE-2026-56789 | Medium | 6.5 | — | 2026-06-25 | RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb function in src/rinex.c that allows attackers to trigger memory corruption by failing to clamp satellite count values from RINEX epoch headers. |
CVE-2026-56787 | Medium | 6.5 | — | 2026-06-25 | RTKLIB through 2.4.3 contains an off-by-one out-of-bounds read vulnerability in the decode_ssr3 function at src/rtcm3.c:1446 that allows remote attackers to trigger a global buffer overflow via crafted RTCM3 SSR messages with attacker-cont… |
CVE-2026-56788 | Medium | 4.4 | — | 2026-06-25 | RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when processing unrecognized RINEX observation codes, allowing attackers to trigger denial of service. |
Sangoma · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9588 | — | — | — | 2026-07-17 | A stored cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997) within the voicemail notification template functionality. The submit_modify_voicemail_template endpoint fails to properly sanitize HTML… |
CVE-2026-9587 | — | — | — | 2026-07-17 | An authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). |
CVE-2026-9586 | — | — | — | 2026-07-17 | An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning with <PolycomIPPhone> and directly concatenates the user-controlled PhoneIP value into Po… |
CVE-2026-9585 | — | — | — | 2026-07-17 | An unauthenticated reflected cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition version 8.3 (104997). |
Select-themes · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57805 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Tonda tonda allows PHP Local File Inclusion.This issue affects Tonda: from n/a through <= 2.5. |
CVE-2026-57803 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur Core allows PHP Local File Inclusion. |
CVE-2026-57802 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur allows PHP Local File Inclusion. |
CVE-2026-57801 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes SetSail setsail allows PHP Local File Inclusion.This issue affects SetSail: from n/a through <= 2.1. |
Themifyme · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57369 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Builder themify-builder allows Reflected XSS.This issue affects Themify Builder: from n/a through <= 7.7.4. |
CVE-2026-15097 | Medium | 6.4 | — | 2026-07-11 | The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'height_slider' Slider Module Field in all versions up to, and including, 7.7.6 due to insufficient input sanitization and output escaping. |
CVE-2026-15096 | Medium | 6.4 | — | 2026-07-11 | The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Map Module 'b_width_map' Field in all versions up to, and including, 7.7.6 due to insufficient input sanitization and output escaping. |
CVE-2026-15407 | Medium | 4.3 | — | 2026-07-16 | The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.7.7. |
Thimpress · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13765 | High | 7.5 | — | 2026-07-17 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.1 via the check_answer. |
CVE-2026-15094 | Medium | 6.1 | — | 2026-07-17 | The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'check_in_date' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. |
CVE-2026-11392 | Medium | 6.1 | — | 2026-07-10 | The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'check_in_date' and 'check_out_date' parameters in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output… |
CVE-2026-11901 | Medium | 5.3 | — | 2026-07-11 | The WP Hotel Booking plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 2.3.1. |
Toddr · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57075 | Critical | 9.1 | — | 2026-07-16 | YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64dec. |
CVE-2026-57076 | High | 7.8 | — | 2026-07-16 | YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchor. |
CVE-2026-57077 | High | 7.7 | — | 2026-07-16 | YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len. |
CVE-2026-13713 | Medium | 6.2 | — | 2026-07-16 | YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack. |
Traefik · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53622 | Critical | 10.0 | — | 2026-06-23 | Traefik is an HTTP reverse proxy and load balancer. |
CVE-2026-48491 | Critical | 10.0 | — | 2026-06-23 | Traefik is an HTTP reverse proxy and load balancer. |
CVE-2026-48020 | Critical | 10.0 | — | 2026-06-23 | Traefik is an HTTP reverse proxy and load balancer. |
CVE-2026-44774 | Critical | 9.9 | — | 2026-05-15 | Traefik is an HTTP reverse proxy and load balancer. |
Vimesoft Inc. · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12692 | Critical | 9.8 | — | 2026-07-17 | Unverified password change vulnerability in Vimesoft Inc. |
CVE-2026-12693 | Critical | 9.4 | — | 2026-07-17 | Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. |
CVE-2026-12694 | Critical | 9.1 | — | 2026-07-17 | Missing Authorization vulnerability in Vimesoft Inc. |
CVE-2026-12691 | High | 7.5 | — | 2026-07-17 | Missing authentication for critical function vulnerability in Vimesoft Inc. |
Zoom · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53412 | Critical | 9.8 | — | 2026-07-16 | Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access. |
CVE-2026-53411 | High | 7.8 | — | 2026-07-16 | A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges. |
CVE-2026-53409 | High | 7.8 | — | 2026-07-16 | Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access. |
CVE-2026-53410 | High | 7.0 | — | 2026-07-16 | A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges. |
@Better-auth · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53513 | Critical | 9.6 | — | 2026-07-15 | Better Auth is an authentication and authorization library for TypeScript. |
CVE-2026-53517 | High | 8.1 | — | 2026-07-15 | Better Auth is an authentication and authorization library for TypeScript. |
CVE-2026-53515 | High | 7.1 | — | 2026-07-15 | Better Auth is an authentication and authorization library for TypeScript. |
Acymailing Newsletter Team · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57739 | Critical | 9.3 | — | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind SQL Injection.This issue affects AcyMailing SMTP Newsletter… |
CVE-2026-57741 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Stored XSS.This issue affects AcyMailing SMTP Newsletter: from n/… |
CVE-2026-57740 | High | 7.1 | — | 2026-07-13 | Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AcyMailing SMTP Newsletter: from n/a through… |
Anthropics · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55407 | — | — | — | 2026-07-16 | Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. |
CVE-2026-55406 | — | — | — | 2026-07-16 | Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. |
CVE-2026-47751 | — | — | — | 2026-07-16 | Claude Code Action is a general-purpose GitHub action that runs Claude Code on GitHub pull requests and issues. |
Apolloconfig · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59955 | High | 7.5 | — | 2026-07-15 | Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. |
CVE-2026-59954 | High | 7.5 | — | 2026-07-15 | Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. |
CVE-2025-32781 | Medium | 6.5 | — | 2026-07-15 | Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. |
Artificial_intelligence_project · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13237 | Medium | 4.8 | — | 2026-07-10 | Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. |
CVE-2026-13236 | Medium | 4.2 | — | 2026-07-10 | Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. |
CVE-2026-13235 | Low | 3.3 | — | 2026-07-10 | Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. |
Bigbluebutton · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46353 | High | 8.1 | — | 2026-07-16 | BigBlueButton is an open-source virtual classroom. |
CVE-2026-46351 | High | 8.1 | — | 2026-07-16 | BigBlueButton is an open-source virtual classroom. |
CVE-2026-46404 | Medium | 6.8 | — | 2026-07-16 | BigBlueButton is an open-source virtual classroom. |
Bitwarden · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57520 | High | 7.1 | — | 2026-06-25 | Bitwarden Server before 2026.5.0 contains a privilege escalation vulnerability that allows authenticated Custom users with ManageUsers permission to remove Admin accounts from an organization by exploiting a missing role hierarchy check in… |
CVE-2026-57521 | Medium | 4.3 | — | 2026-06-25 | Bitwarden Server before 2026.5.0 contains a broken access control vulnerability that allows any authenticated user to access arbitrary organization billing data by supplying an arbitrary organizationId to the PreviewInvoiceController endpo… |
CVE-2026-57522 | Low | 3.5 | — | 2026-06-25 | Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens(), which substitutes user-controlled values into event-integration templates without JSON encoding. |
Blackberry Ltd · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-4017 | High | 7.4 | — | 2026-07-14 | Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel. |
CVE-2026-4018 | Medium | 6.4 | — | 2026-07-14 | TOCTOU Race Condition in specific trace commands of the TraceEvent() system call could allow an attacker with local access and with the PROCMGR_AID_TRACE ability, to cause information disclosure, data tampering or a crash of the QNX Neutri… |
CVE-2026-0515 | Medium | 6.2 | — | 2026-07-14 | Insufficient Parameter Validation in the SchedGet() system call could allow an attacker with local access to cause a crash of the QNX Neutrino kernel. |
Cedar-policy · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55773 | High | 8.8 | — | 2026-07-13 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. |
CVE-2026-55771 | High | 8.8 | — | 2026-07-13 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. |
CVE-2026-55772 | High | 8.8 | — | 2026-07-13 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. |
Cilium · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49445 | Critical | 9.2 | — | 2026-07-15 | Cilium is a networking, observability, and security solution. |
CVE-2026-56742 | Medium | 5.9 | — | 2026-07-15 | Cilium is a networking, observability, and security solution. |
CVE-2026-56743 | Medium | 5.4 | — | 2026-07-15 | Cilium is a networking, observability, and security solution. |
Cloudfoundry · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47826 | Critical | 9.1 | — | 2026-07-09 | The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and exfiltrate sensitive information. |
CVE-2026-47829 | High | 7.8 | — | 2026-07-09 | Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locally-spawned ssh process when an operator runs bosh ssh -c, bosh logs -f, or other non-interactive SSH paths, leading to loca… |
CVE-2026-41857 | High | 7.8 | — | 2026-07-09 | A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh (or bosh scp/bosh logs -f) with default flags. |
Cloudreve · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54560 | High | 7.6 | — | 2026-07-15 | Cloudreve is a self-hosted file management and sharing system. |
CVE-2026-54563 | High | 7.1 | — | 2026-07-15 | Cloudreve is a self-hosted file management and sharing system. |
CVE-2026-54562 | Medium | 6.5 | — | 2026-07-15 | Cloudreve is a self-hosted file management and sharing system. |
Codeastro · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15559 | Medium | 6.3 | — | 2026-07-13 | A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. |
CVE-2026-15558 | Medium | 6.3 | — | 2026-07-13 | A security vulnerability has been detected in CodeAstro Simple Online Leave Management System 1.0. |
CVE-2026-15523 | Medium | 6.3 | — | 2026-07-13 | A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. |
Coredns · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62309 | High | 7.5 | — | 2026-07-16 | CoreDNS is a DNS server written in Go. |
CVE-2026-62299 | Medium | 5.3 | — | 2026-07-16 | CoreDNS is a DNS server written in Go. |
CVE-2026-62994 | Low | 3.7 | — | 2026-07-16 | CoreDNS is a DNS server written in Go. |
Coturn · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53450 | High | 7.4 | — | 2026-07-10 | Coturn is a free open source implementation of TURN and STUN Server. |
CVE-2026-53448 | High | 7.2 | — | 2026-07-10 | Coturn is a free open source implementation of TURN and STUN Server. |
CVE-2026-53449 | Medium | 6.0 | — | 2026-07-10 | Coturn is a free open source implementation of TURN and STUN Server. |
Crawl4ai · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56260 | Critical | 9.1 | — | 2026-07-12 | Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. |
CVE-2026-56261 | High | 8.6 | — | 2026-07-10 | Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. |
CVE-2026-56259 | High | 8.2 | — | 2026-07-12 | Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API calls to attacker-controlled endpoints and read arbitrary environment variables. |
Crocoblock · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61977 | Medium | 5.3 | — | 2026-07-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetSearch jet-search allows Retrieve Embedded Sensitive Data.This issue affects JetSearch: from n/a through <= 3.6.1.2. |
CVE-2026-61976 | Medium | 5.3 | — | 2026-07-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Retrieve Embedded Sensitive Data.This issue affects JetBlocks For Elementor: from n/a through… |
CVE-2026-61975 | Medium | 5.3 | — | 2026-07-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through <= 3.0.1. |
Dbt-labs · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44968 | Medium | 6.3 | — | 2026-07-16 | dbt-mcp is a Model Context Protocol server for interacting with dbt. |
CVE-2026-44970 | Low | 3.1 | — | 2026-07-16 | dbt-mcp is a Model Context Protocol server for interacting with dbt. |
CVE-2026-44969 | Low | 2.5 | — | 2026-07-16 | dbt-mcp is a Model Context Protocol server for interacting with dbt. |
Decompress_project · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-39246 | High | 7.5 | — | 2026-07-09 | decompress before 4.2.2 allows arbitrary symlink creation during archive extraction. |
CVE-2026-39245 | Medium | 6.2 | — | 2026-07-09 | decompress before 4.2.2 contains an improper path containment check that enables directory traversal and arbitrary file write. |
CVE-2026-39243 | Medium | 5.5 | — | 2026-07-09 | decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. |
Elixir-mint · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59249 | — | — | — | 2026-07-16 | Inconsistent interpretation of HTTP requests (HTTP response smuggling) vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict intermediary and the Mint client on the same pooled connection, enabling re… |
CVE-2026-59246 | — | — | — | 2026-07-14 | Allocation of resources without limits vulnerability in elixir-mint mint allows a remote HTTP/2 server to exhaust memory on the client host and cause a denial of service. |
CVE-2026-58229 | — | — | — | 2026-07-14 | Allocation of resources without limits vulnerability in elixir-mint mint allows a remote HTTP server to exhaust memory on the client host and cause a denial of service. |
Excelize · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59162 | High | 7.5 | — | 2026-07-10 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. |
CVE-2026-59161 | High | 7.5 | — | 2026-07-10 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. |
CVE-2026-54063 | High | 7.5 | — | 2026-07-10 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. |
Facelessuser · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49477 | High | 7.5 | — | 2026-07-14 | Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. |
CVE-2026-49476 | High | 7.5 | — | 2026-07-14 | Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. |
CVE-2026-46338 | Medium | 4.3 | — | 2026-07-16 | PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. |
Gnu · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56289 | Medium | 5.5 | — | 2026-07-09 | GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. |
CVE-2026-56288 | Medium | 5.5 | — | 2026-07-09 | GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. |
CVE-2026-15520 | Medium | 5.3 | — | 2026-07-13 | A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. |
Gofiber · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45045 | Medium | 5.3 | — | 2026-07-08 | Fiber is an Express inspired web framework written in Go. |
CVE-2026-44332 | Medium | 5.3 | — | 2026-07-08 | Fiber is an Express inspired web framework written in Go. |
CVE-2026-53624 | Medium | 4.8 | — | 2026-07-08 | Fiber is an Express inspired web framework written in Go. |
Golang · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-39822 | High | 7.8 | — | 2026-07-08 | On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. |
CVE-2023-54365 | High | 7.5 | — | 2026-06-23 | Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling inherited from the Go standard library's HTTP/2 implementation (CVE-2023-44487 / CVE-2023-39325, the 'Rapid Reset' technique). |
CVE-2026-42505 | Medium | 5.3 | — | 2026-07-08 | Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. |
Gristlabs · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55659 | High | 7.7 | — | 2026-07-10 | Grist is spreadsheet software using Python as its formula language. |
CVE-2026-55664 | Medium | 4.3 | — | 2026-07-10 | Grist is spreadsheet software using Python as its formula language. |
CVE-2026-55665 | — | — | — | 2026-07-10 | Grist is spreadsheet software using Python as its formula language. |
Huggingface · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44513 | High | 8.8 | — | 2026-05-14 | Diffusers is the a library for pretrained diffusion models. |
CVE-2026-63086 | High | 8.6 | — | 2026-07-16 | text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compatible multimodal chat completions endpoint that allows unauthenticated network attackers to coerce the server into issui… |
CVE-2026-45804 | High | 7.5 | — | 2026-07-15 | Diffusers is the a library for pretrained diffusion models. |
Hydro-québec · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-20744 | Critical | 9.8 | — | 2026-07-10 | The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation. |
CVE-2026-44383 | High | 7.5 | — | 2026-07-10 | Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend. |
CVE-2026-42952 | High | 7.5 | — | 2026-07-10 | Previously, there was no throttling on repeated authentication attempts to the charging station backend, which could allow an attacker to execute a denial-of-service attack. |
Its-a-feature · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57951 | Medium | 6.5 | — | 2026-06-29 | Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload_build_step table with an always-satisfied _or condition that bypasses operation-scoped access controls. |
CVE-2026-57953 | Medium | 5.4 | — | 2026-06-29 | Mythic before 3.4.0.60 contains an authorization bypass vulnerability that allows authenticated spectator-role users to perform unauthorized write operations by accessing the eventing_import_automatic_webhook endpoint registered under spec… |
CVE-2026-57952 | Medium | 5.3 | — | 2026-06-29 | Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints (c2profile_config_check_webhook, c2profile_redirect_rules_webhook, c2profile_get_ioc_webhook, c2profile_sample_message_webhook) that fail to verif… |
Itsourcecode · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-16009 | Medium | 6.3 | — | 2026-07-17 | A vulnerability was detected in itsourcecode Hospital Management System 1.0. |
CVE-2026-15672 | Medium | 6.3 | — | 2026-07-14 | A vulnerability was determined in itsourcecode Electronic Judging System 1.0. |
CVE-2026-15536 | Medium | 6.3 | — | 2026-07-13 | A vulnerability was identified in itsourcecode Hospital Management System 1.0. |
Jarrodwatts · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47092 | High | 7.8 | — | 2026-05-18 | Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSPEC environment variable. |
CVE-2026-47090 | Medium | 4.6 | — | 2026-05-18 | Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control characters or encoding embedded values, allowing attackers to inject ar… |
CVE-2026-47091 | Low | 3.3 | — | 2026-05-18 | Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated transcript_path value via stdin JSON. |
Libssh2 · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55200 | High | 8.1 | — | 2026-06-17 | libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. |
CVE-2025-15661 | Medium | 6.5 | — | 2026-06-18 | libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read vulnerability in the sftp_symlink() function in src/sftp.c that allows a malicious SSH server or man-in-the-middle attacker to disclose heap memory conten… |
CVE-2026-55199 | Medium | 5.9 | — | 2026-06-17 | libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service vulnerability in the SSH_MSG_EXT_INFO handler in src/packet.c that allows a malicious SSH server to cause a client CPU exhaustion loop by send… |
Louisho5 · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15668 | Medium | 6.3 | — | 2026-07-14 | A vulnerability has been found in louisho5 picobot up to 0.2.0. |
CVE-2026-15629 | Medium | 6.3 | — | 2026-07-14 | A weakness has been identified in louisho5 picobot up to 0.2.0. |
CVE-2026-15669 | Medium | 5.3 | — | 2026-07-14 | A vulnerability was found in louisho5 picobot up to 0.2.0. |
Mastergo-design · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15750 | Medium | 6.3 | — | 2026-07-14 | A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. |
CVE-2026-15751 | Medium | 5.3 | — | 2026-07-14 | A security vulnerability has been detected in mastergo-design mastergo-magic-mcp up to 0.2.0. |
CVE-2026-15749 | Medium | 5.3 | — | 2026-07-14 | A security flaw has been discovered in mastergo-design mastergo-magic-mcp up to 0.2.0. |
Matrix-org · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63095 | Medium | 6.5 | — | 2026-07-17 | Dendrite through 0.13.8 contains an improper authorization vulnerability in the Matrix Client-Server API that allows any authenticated local user to delete third-party identifier bindings belonging to other users by submitting an arbitrary… |
CVE-2026-63096 | Medium | 5.8 | — | 2026-07-17 | Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName par… |
CVE-2026-63097 | Medium | 4.3 | — | 2026-07-17 | Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint (syncapi/routing/context.go) that allows authenticated local users to access post-leave room state events by exploiting a flawed mem… |
Metabase · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50148 | Critical | 10.0 | — | 2026-07-15 | Metabase is an open-source business intelligence and embedded analytics tool. |
CVE-2026-59827 | Critical | 9.9 | — | 2026-07-09 | Metabase is an open-source business intelligence and embedded analytics tool. |
CVE-2026-50147 | High | 7.6 | — | 2026-07-15 | Metabase is an open-source business intelligence and embedded analytics tool. |
Oras-project · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50163 | High | 7.1 | — | 2026-07-17 | oras-go is a Go library for managing OCI artifacts. |
CVE-2026-50162 | — | — | — | 2026-07-17 | oras-go is a Go library for managing OCI artifacts. |
CVE-2026-48978 | — | — | — | 2026-07-17 | oras-go is a Go library for managing OCI artifacts. |
Penpot · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44986 | Critical | 9.9 | — | 2026-07-15 | Penpot is an open-source design tool for design and code collaboration. |
CVE-2026-45805 | High | 8.8 | — | 2026-07-15 | Penpot is an open-source design tool for design and code collaboration. |
CVE-2026-45806 | High | 7.7 | — | 2026-07-15 | Penpot is an open-source design tool for design and code collaboration. |
Poco-ai · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-16016 | High | 7.3 | — | 2026-07-17 | A vulnerability was identified in poco-ai poco-claw up to 0.5.4. |
CVE-2026-16015 | Medium | 6.3 | — | 2026-07-17 | A vulnerability was determined in poco-ai poco-claw up to 0.5.4. |
CVE-2026-15622 | Medium | 5.3 | — | 2026-07-14 | A flaw has been found in poco-ai poco-claw up to 0.5.4. |
Pyasn1 · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59886 | High | 7.5 | — | 2026-07-14 | pyasn1 is a generic ASN.1 library for Python. |
CVE-2026-59885 | High | 7.5 | — | 2026-07-14 | pyasn1 is a generic ASN.1 library for Python. |
CVE-2026-59884 | High | 7.5 | — | 2026-07-14 | pyasn1 is a generic ASN.1 library for Python. |
Rclone · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59733 | High | 8.8 | — | 2026-07-14 | Rclone is a command-line program to sync files and directories to and from different cloud storage providers. |
CVE-2026-54572 | High | 7.5 | — | 2026-07-14 | Rclone is a command-line program to sync files and directories to and from different cloud storage providers. |
CVE-2026-59732 | Medium | 5.0 | — | 2026-07-14 | Rclone is a command-line program to sync files and directories to and from different cloud storage providers. |
Roskus · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59237 | — | — | — | 2026-07-16 | Authorization Bypass Through User-Controlled Key (CWE-639) in the Order and OrderItem REST API controllers in Roskus Prospero Flow CRM before 5.5.3 allows a remote, authenticated user to read, modify, and delete orders and order items belo… |
CVE-2026-59236 | — | — | — | 2026-07-15 | Authorization Bypass Through User-Controlled Key (CWE-639) in the Excel import handlers (CustomerImport, LeadImport, ProductImport) in Roskus Prospero Flow CRM before 5.14.0 allows a remote, authenticated user of any role or company to cre… |
CVE-2026-59235 | — | — | — | 2026-07-15 | Missing Authorization (CWE-862) in BankAccountListController (app/Http/Controllers/Api/BankAccount/BankAccountListController.php), exposed at GET /api/bank-account, in Prospero Flow CRM <5.5.3, which allows a remote, authenticated attacker… |
Saad Iqbal · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57810 | High | 8.5 | — | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Injection.This issue affects APIExperts Square for WooCommerce: f… |
CVE-2026-61968 | Medium | 5.4 | — | 2026-07-13 | Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 3.1.2. |
CVE-2026-61958 | Medium | 5.4 | — | 2026-07-13 | Missing Authorization vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects License Manager for WooCommerce: f… |
Saturdaydrive · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15161 | Medium | 6.4 | — | 2026-07-17 | The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.6. |
CVE-2026-15160 | Medium | 4.3 | — | 2026-07-17 | The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.6 via the 'spreadsheet_export_tmp_name' parameter. |
CVE-2026-15159 | Medium | 4.3 | — | 2026-07-17 | The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.3.6 via the 'spreadsheet_export_form_id' parameter due to missing validation on a user controlled… |
Siemens · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56451 | Critical | 10.0 | — | 2026-07-14 | A vulnerability has been identified in Opcenter X (All versions < V2604). |
CVE-2026-54429 | High | 7.4 | — | 2026-07-14 | A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions). |
CVE-2025-40945 | Medium | 6.7 | — | 2026-07-14 | A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D (All versions < V2512.7000), Simcenter Femap V2506 (All vers… |
Snowflake · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15736 | High | 8.3 | — | 2026-07-14 | Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. |
CVE-2026-15925 | — | — | — | 2026-07-16 | Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. |
CVE-2026-15183 | — | — | — | 2026-07-14 | Multiple input validation vulnerabilities in the Snowflake Spark Connector (spark-snowflake) versions prior to 3.2.1 can allow attackers to exfiltrate OAuth client credentials, execute arbitrary SQL with the connector's Snowflake role, or… |
Soniccloudorg · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15497 | High | 7.3 | — | 2026-07-12 | A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. |
CVE-2026-15496 | Medium | 6.3 | — | 2026-07-12 | A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. |
CVE-2026-15495 | Medium | 6.3 | — | 2026-07-12 | A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. |
Splunk · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-20296 | High | 8.3 | — | 2026-07-15 | In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16, 10.2.2510.18, and 10.1.2507.24, an attacker could trick a user that holds a role with… |
CVE-2026-20297 | High | 7.2 | — | 2026-07-15 | In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.2.2510.18, and 10.1.2507.24, a user who holds a role that contains the `edit_local_apps`… |
CVE-2026-20298 | Medium | 5.3 | — | 2026-07-15 | In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.3.2512.15, 10.2.2510.18, and 10.1.2507.24, a low-privileged user that does not hold the 'admin' o… |
Statamic · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54243 | Medium | 6.1 | — | 2026-07-17 | Statamic is a Laravel and Git powered content management system (CMS). |
CVE-2026-54242 | Medium | 4.9 | — | 2026-07-17 | Statamic is a Laravel and Git powered content management system (CMS). |
CVE-2026-54244 | Low | 3.5 | — | 2026-07-17 | Statamic is a Laravel and Git powered content management system (CMS). |
Stmcan · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57744 | Critical | 9.8 | — | 2026-07-13 | Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Object Injection.This issue affects RT-Theme 18 | Extensions: from n/a through <= 2.5. |
CVE-2026-57743 | High | 8.1 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows PHP Local File Inclusion.This issue affects RT-Theme 18 | Exten… |
CVE-2026-57745 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Reflected XSS.This issue affects RT-Theme 18 | Extensions: from n/a through <= 2.5. |
Tagdiv · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57734 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer allows Reflected XSS.This issue affects tagDiv Composer: from n/a through <= 5.4.3. |
CVE-2026-57733 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Cloud Library td-cloud-library allows DOM-Based XSS.This issue affects tagDiv Cloud Library: from n/a through <= 3.9.4. |
CVE-2026-57732 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows DOM-Based XSS.This issue affects tagDiv Opt-In Builder: from n/a through <= 1.7.4. |
Themefic · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57388 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through <= 1.1.44. |
CVE-2026-57395 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through <= 2.22.5. |
CVE-2026-57392 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through <= 2.22.5. |
Thememove · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57791 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Brook brook allows PHP Local File Inclusion.This issue affects Brook: from n/a through <= 2.9.0. |
CVE-2026-57790 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Billey billey allows PHP Local File Inclusion.This issue affects Billey: from n/a through <= 2.1.8. |
CVE-2026-57797 | Medium | 4.3 | — | 2026-07-13 | Missing Authorization vulnerability in ThemeMove EduMall edumall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EduMall: from n/a through <= 4.5.1. |
Tinyproxy · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54388 | Critical | 9.1 | — | 2026-06-17 | Tinyproxy through 1.11.3, fixed in commit 364cdb6, fails to reject requests containing multiple Content-Length headers with differing values, forwarding all duplicate headers to the backend while using the first value to determine how many… |
CVE-2026-54387 | Critical | 9.1 | — | 2026-06-17 | Tinyproxy through 1.11.3, fixed in commit ff45d3b, fails to reconcile conflicting Content-Length and Transfer-Encoding: chunked headers, forwarding both verbatim to the backend while using Content-Length to determine how many request body… |
CVE-2026-55202 | High | 8.2 | — | 2026-06-17 | Tinyproxy through 1.11.3, fixed in commit 09312a1, fails to properly validate the Host header during stathost detection, allowing unauthenticated attackers to access the stats page by injecting a matching Host header or bypass detection vi… |
Tornadoweb · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49853 | High | 7.7 | — | 2026-07-14 | Tornado is a Python web framework and asynchronous networking library. |
CVE-2026-49855 | High | 7.5 | — | 2026-07-14 | Tornado is a Python web framework and asynchronous networking library. |
CVE-2026-49854 | Medium | 5.3 | — | 2026-07-14 | Tornado is a Python web framework and asynchronous networking library. |
Vitest-dev · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53633 | Critical | 9.8 | — | 2026-07-14 | Vitest is a testing framework powered by Vite. |
CVE-2026-47429 | Critical | 9.8 | — | 2026-07-14 | Vitest is a testing framework powered by Vite. |
CVE-2026-47428 | Critical | 9.6 | — | 2026-07-14 | Vitest is a testing framework powered by Vite. |
Wclovers · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12126 | Medium | 6.4 | — | 2026-07-11 | The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment 'post_title' in all versions up to, and including, 3.7.3 due to insufficient input sanitization… |
CVE-2026-12994 | Medium | 5.3 | — | 2026-07-11 | The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.7.27. |
CVE-2026-10041 | Medium | 4.3 | — | 2026-07-11 | The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.27 via the wcfm_product_archive due to missing validation on a user controlled key… |
Wp Swings · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57709 | High | 8.6 | — | 2026-07-13 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Path Traversal.This issue affects Membership For WooCommerce: from n/a t… |
CVE-2026-57407 | High | 7.2 | — | 2026-07-13 | Server-Side Request Forgery (SSRF) vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Server Side Request Forgery.This issue affects PDF Generator for WordPress: from n/a through <= 1.6.2. |
CVE-2026-57400 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in WP Swings Event Tickets Manager for WooCommerce event-tickets-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets Manager f… |
Zenhive · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59695 | — | — | — | 2026-07-17 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet in a single request by naming an arbitrarily high gas price. |
CVE-2026-59694 | — | — | — | 2026-07-17 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per payment by a large multiplier, degrading the sponsor's operating margin. |
CVE-2026-59252 | — | — | — | 2026-07-17 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet, resulting in denial of service for legitimate clients. |
Zitadel · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56668 | High | 8.1 | — | 2026-07-10 | ZITADEL is an open source identity management platform. |
CVE-2026-56666 | Medium | 4.8 | — | 2026-07-10 | ZITADEL is an open source identity management platform. |
CVE-2026-55671 | — | — | — | 2026-07-10 | ZITADEL is an open source identity management platform. |
3clyp50 · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47118 | Medium | 6.5 | — | 2026-05-27 | Agent Zero before version 1.15 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying crafted paths to the image file serving endpoint, which relies solely on an extension allowli… |
CVE-2026-47119 | Medium | 6.1 | — | 2026-05-27 | Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript in the application origin by serving SVG files through the image_get API endpoint without Content-Sec… |
Activepieces · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53536 | — | — | — | 2026-07-16 | Activepieces is an open source AI workflow automation platform. |
CVE-2026-53535 | — | — | — | 2026-07-16 | Activepieces is an open source AI workflow automation platform. |
Amazon · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15738 | High | 8.5 | — | 2026-07-14 | Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gat… |
CVE-2026-15746 | Medium | 6.5 | — | 2026-07-15 | Strands Agents is an open-source Python SDK for building and running AI agents. |
Angular · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50556 | Medium | 6.1 | — | 2026-06-22 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. |
CVE-2026-46417 | Medium | 6.1 | — | 2026-06-22 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. |
Anydesk · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15682 | Medium | 5.5 | — | 2026-07-13 | AnyDesk Support Information Link Following Denial-of-Service Vulnerability. |
CVE-2026-15681 | Medium | 5.5 | — | 2026-07-13 | AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability. |
Appium · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58500 | High | 8.2 | — | 2026-07-13 | MCP Appium is an MCP server that provides AI assistants with tools to automate mobile app testing on Android and iOS. |
CVE-2026-58191 | Medium | 6.5 | — | 2026-07-08 | Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. |
Apple · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-0275 | Medium | 6.7 | — | 2026-07-09 | A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privileges. |
CVE-2026-0277 | Medium | 5.9 | — | 2026-07-09 | An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. |
Azeotech · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12921 | High | 7.8 | — | 2026-06-25 | In AzeoTech DAQFactory versions 21.1 and prior, a Use After Free vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution. |
CVE-2026-12390 | High | 7.8 | — | 2026-06-18 | In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution. |
Boldgrid · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9282 | High | 7.5 | — | 2026-07-11 | The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.4 via the setupSources function. |
CVE-2026-57418 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a th… |
Bunkerity · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61718 | Medium | 5.4 | — | 2026-07-16 | bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). |
CVE-2026-54728 | — | — | — | 2026-07-16 | bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). |
Cap-go · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56339 | High | 7.5 | — | 2026-07-15 | Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST SECURITY DEFINER RPC function public.rescind_invitation that allows unauthenticated attackers to enumerate organization existen… |
CVE-2026-56296 | Medium | 5.3 | — | 2026-07-11 | Cap-go before 12.128.2 contains an information disclosure vulnerability in the public.transfer_app RPC function that returns distinct error messages for existing versus non-existing app IDs. |
Centrifugal · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49998 | High | 8.2 | — | 2026-07-16 | Centrifugo is an open-source scalable real-time messaging server. |
CVE-2026-62963 | — | — | — | 2026-07-16 | Centrifugo is an open-source scalable real-time messaging server. |
Citeum · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-35210 | High | 7.1 | — | 2026-07-08 | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. |
CVE-2026-35211 | Medium | 6.5 | — | 2026-07-08 | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. |
Citrix · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53566 | — | — | — | 2026-07-14 | Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. |
CVE-2026-53565 | — | — | — | 2026-07-14 | Improper Privilege Management vulnerability in Citrix Secure Access Client for Windows, Citrix Citrix Endpoint Analysis Client for Windows. |
Cleverplugins · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15458 | Medium | 4.9 | — | 2026-07-16 | The SEO Booster plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_field' parameter in all versions up to, and including, 7.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient prepa… |
CVE-2026-15445 | Medium | 4.9 | — | 2026-07-16 | The SEO Booster plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient prepa… |
Cloudflare · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12707 | High | 7.5 | — | 2026-07-14 | Summary Cloudflare quiche was discovered to be vulnerable to memory resource exhaustion due to unbounded queuing of post-handshake client migration events. |
CVE-2026-12523 | High | 7.5 | — | 2026-07-14 | Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by means of specially crafted HTTP/3 frames. |
Cockpit Hq · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57856 | High | 8.8 | — | 2026-07-13 | Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). |
CVE-2026-57855 | High | 8.8 | — | 2026-07-13 | Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). |
Cockpit-hq · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58467 | High | 7.5 | — | 2026-07-02 | Cockpit CMS through 2.14.0 contains a path traversal and local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files or execute PHP files by including unvalidated PATH_INFO derived from REQUEST_URI in f… |
CVE-2026-23695 | Medium | 5.4 | — | 2026-05-15 | Cockpit CMS through version 2.14.0, patched in commit 72a83fc, contains a stored cross-site scripting vulnerability in the Set field type's Display template option, where the template string is processed by the $interpolate function using… |
Codemenschen · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57415 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codemenschen Gift Vouchers gift-voucher allows Stored XSS.This issue affects Gift Vouchers: from n/a through <= 4.7.0. |
CVE-2026-57412 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in Codemenschen Gift Vouchers gift-voucher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gift Vouchers: from n/a through <= 4.6.9. |
Coderevolution · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57719 | Critical | 10.0 | — | 2026-07-13 | Unrestricted Upload of File with Dangerous Type vulnerability in CodeRevolution Aimogen Pro aimogen-pro allows Using Malicious Files.This issue affects Aimogen Pro: from n/a through <= 2.8.3. |
CVE-2026-15982 | Critical | 9.8 | — | 2026-07-17 | The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.8.4. |
Cotonti · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58143 | High | 8.8 | — | 2026-07-09 | Cotonti Siena 0.9.26 and earlier contains a cross-site request forgery vulnerability that allows unauthenticated attackers to modify administrator configuration by tricking a logged-in administrator into submitting a forged POST request to… |
CVE-2026-58144 | Medium | 5.4 | — | 2026-07-09 | Cotonti Siena 0.9.26 and earlier contains a stored cross-site scripting vulnerability that allows authenticated users with PFS access to inject arbitrary script payloads by supplying malicious HTML in the ntitle parameter processed through… |
Crm Perks · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57708 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks Contact Form Entries contact-form-entries allows Reflected XSS.This issue affects Contact Form Entries: from n/a through <= 1.5… |
CVE-2026-57421 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms crm-perks-forms allows Reflected XSS.This issue affects CRM Perks Forms: from n/a through <= 1.1.7. |
Crowdsecurity · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44982 | High | 7.2 | — | 2026-07-16 | CrowdSec offers crowdsourced protection against malicious IPs. |
CVE-2026-44981 | — | — | — | 2026-07-16 | CrowdSec offers crowdsourced protection against malicious IPs. |
Cyberlord92 · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15013 | Critical | 9.8 | — | 2026-07-16 | The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass via SAML Signature Algorithm Confusion in all versions up to, and including, 5.4.3. |
CVE-2026-12761 | Critical | 9.8 | — | 2026-07-10 | The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass leading to account takeover in versions up to and including 7.7.0. |
Czlonkowski · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54052 | Critical | 9.9 | — | 2026-07-15 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. |
CVE-2026-55608 | Medium | 4.2 | — | 2026-07-15 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. |
Denishua · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57371 | High | 8.8 | — | 2026-07-13 | Deserialization of Untrusted Data vulnerability in denishua WPJAM Basic wpjam-basic allows Object Injection.This issue affects WPJAM Basic: from n/a through <= 7.0. |
CVE-2026-57372 | High | 7.2 | — | 2026-07-13 | Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Basic wpjam-basic allows Server Side Request Forgery.This issue affects WPJAM Basic: from n/a through <= 7.0. |
Digi International · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12352 | Medium | 5.9 | — | 2026-07-07 | This vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device. |
CVE-2026-12948 | — | — | — | 2026-07-07 | A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system con… |
Directus · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61836 | High | 8.6 | — | 2026-07-15 | Directus is a real-time API and App dashboard for managing SQL database content. |
CVE-2026-61835 | High | 7.7 | — | 2026-07-15 | Directus is a real-time API and App dashboard for managing SQL database content. |
Dumbwareio · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45230 | Critical | 9.1 | — | 2026-05-18 | DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated attackers to delete arbitrary files by supplying ../ sequences that bypa… |
CVE-2026-45231 | Medium | 6.1 | — | 2026-05-18 | DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fields including name, description, modelNumber, serialNumber, and tags that are stored without server-side sanitization and rendered using innerHTML w… |
Edgarrojas · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57393 | Medium | 6.5 | — | 2026-07-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce PDF Invoi… |
CVE-2026-57390 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in EDGARROJAS Extra Product Options Builder for WooCommerce additional-product-fields-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extra Prod… |
Edge-themes · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57800 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File Inclusion.This issue affects Overworld: from n/a through <= 1.5. |
CVE-2026-57788 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Aalto aalto allows PHP Local File Inclusion.This issue affects Aalto: from n/a through <= 1.8. |
Emlog · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46687 | — | — | — | 2026-07-16 | Emlog is an open source website building system. |
CVE-2026-46686 | — | — | — | 2026-07-16 | Emlog is an open source website building system. |
Eset, Spol. S.r.o. · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6424 | — | — | — | 2026-07-16 | Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the system |
CVE-2026-6423 | — | — | — | 2026-07-16 | A local privilege escalation vulnerability in ESET Inspect Connector. The vulnerability was caused by improper authentication in an IPC channel. |
Estrellaxd · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58466 | Critical | 9.8 | — | 2026-07-02 | AutoBangumi before 3.2.8 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to authenticate as the administrator by using the publicly known default credentials seeded at startup via add_default_u… |
CVE-2026-59101 | Medium | 5.8 | — | 2026-07-02 | AutoBangumi before 3.2.8 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated remote attackers to probe internal network services by supplying arbitrary host values to an unprotected setup endpoint. |
Fasterxml · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59889 | Medium | 6.5 | — | 2026-07-14 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. |
CVE-2026-59888 | Medium | 6.5 | — | 2026-07-14 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. |
Feast · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-23537 | Critical | 9.1 | — | 2026-07-01 | A vulnerability has been identified in the Feast Feature Server’s `/save-document` endpoint that allows an unauthenticated remote attacker to write arbitrary JSON files to the server's filesystem. |
CVE-2026-23538 | High | 7.5 | — | 2026-07-16 | A vulnerability was identified in the Feast Feature Server's `/ws/chat` endpoint that allows remote attackers to establish persistent WebSocket connections without any authentication. |
Flaskbb · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-22659 | High | 8.1 | — | 2026-07-10 | FlaskBB through 2.2.0, fixed in commit acc88cf, contains an authorization bypass vulnerability that allows authenticated moderators to perform unauthorized actions on topics in forums they do not control by submitting crafted topic ID list… |
CVE-2026-22660 | High | 7.2 | — | 2026-07-10 | FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administrators to delete all built-in authorization groups by exploiting a type mismatch in the bulk delete protection check. |
Getwpfunnels · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15103 | High | 8.8 | — | 2026-07-16 | The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Privilege Escalation via arbitrary option update in all versions up to, and including, 3.12.8. |
CVE-2026-12918 | Medium | 4.9 | — | 2026-07-10 | The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to generic SQL Injection via the 'recipients' parameter in all versions up to, and including, 1.24.1 due to insufficient… |
Gimp · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58384 | High | 7.3 | — | 2026-07-07 | A flaw was found in GIMP's PSD parser. |
CVE-2026-58380 | High | 7.3 | — | 2026-07-06 | A flaw was found in GIMP's PNM file format parser. |
Gis Informatics Engineering Consulting Laboratory R&d And Software Services Inc. · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8297 | Critical | 9.8 | — | 2026-07-17 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. |
CVE-2026-11763 | Medium | 6.5 | — | 2026-07-17 | Authorization bypass through User-Controlled key vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. |
Google Cloud · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12715 | — | — | — | 2026-07-17 | Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing request… |
CVE-2026-14934 | — | — | — | 2026-07-13 | A Missing Authorization vulnerability in the repository creation functionality in Google Cloud BigQuery, Dataform and Colab Enterprise, in the versions between October 2025 and May 10th, 2026, on Google Cloud Platform, allows an authentica… |
Gradio-app · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49119 | High | 7.5 | — | 2026-07-01 | Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory t… |
CVE-2026-48545 | Medium | 6.8 | — | 2026-05-27 | Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. |
Grpc · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48069 | High | 7.5 | — | 2026-07-14 | @grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. |
CVE-2026-48068 | High | 7.5 | — | 2026-07-14 | @grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. |
Guzzle · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59883 | Medium | 4.7 | — | 2026-07-08 | Guzzle is an extensible PHP HTTP client. |
CVE-2026-59882 | Medium | 4.2 | — | 2026-07-08 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. |
H3c · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15907 | High | 7.3 | — | 2026-07-16 | A flaw has been found in H3C SecPath F1000-C8300 up to 20260522. |
CVE-2026-15479 | High | 7.3 | — | 2026-07-12 | A vulnerability was found in H3C NX15 V100R017. |
Haproxy · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55204 | High | 7.5 | — | 2026-06-18 | HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fails to validate the return value of hpack_dht_defrag() when the memory pool is exhausted. |
CVE-2026-55203 | High | 7.5 | — | 2026-06-18 | HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers. |
Hashgraph · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45248 | Medium | 5.3 | — | 2026-05-14 | Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1/demo/registered-users endpoint that allows unauthenticated attackers to retrieve sensitive user information. |
CVE-2026-22674 | Medium | 4.8 | — | 2026-06-18 | Hashgraph Guardian through 3.6.0, fixed in commit ba8c566, contains a stored cross-site scripting vulnerability that allows authenticated users with the STANDARD_REGISTRY role to inject malicious scripts by submitting a crafted companyName… |
Hono · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56763 | Medium | 4.8 | — | 2026-07-11 | Hono before 4.12.7 allows __proto__ key in parseBody with dot option enabled, permitting specially crafted form field names to create objects with __proto__ properties. |
CVE-2026-56764 | Low | 3.7 | — | 2026-07-15 | Hono before 4.11.10 contains a timing attack vulnerability in the basicAuth and bearerAuth middlewares due to non-constant-time string comparison in the timingSafeEqual function. |
Horde · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-60102 | High | 8.8 | — | 2026-07-08 | Horde Virtual File System (VFS) API before 3.0.1 contains an OS command injection vulnerability in the Horde_Vfs_Smb driver where the _escapeShellCommand() method fails to sanitize command substitution sequences, allowing authenticated att… |
CVE-2026-58451 | Medium | 6.5 | — | 2026-07-01 | Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix in img s… |
Icu Scandinavia · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46459 | — | — | — | 2026-07-15 | ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. |
CVE-2026-46458 | — | — | — | 2026-07-15 | ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed via static HTTP. |
Illumos · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15449 | — | — | — | 2026-07-16 | A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC_GETMACPROP and DLDIOC_SETMACPROP ioctls on /dev/dld. |
CVE-2026-15422 | — | — | — | 2026-07-16 | The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in the chunk. |
Iqonicdesign · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15073 | Medium | 6.5 | — | 2026-07-11 | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 4.5.0 due to insufficient escaping on the user supplied p… |
CVE-2026-15072 | Medium | 6.5 | — | 2026-07-11 | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 4.5.0 due to insufficient escaping on the user supplied p… |
Iv-org · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58447 | Medium | 6.5 | — | 2026-06-30 | Invidious through 2.20260626.0, fixed in commit 77ad416, contains a broken object level authorization vulnerability that allows authenticated attackers to delete videos from other users' playlists by supplying an arbitrary global video ind… |
CVE-2026-57946 | Low | 3.7 | — | 2026-06-29 | Invidious before version 2.20260626.0 contains a broken access control vulnerability that allows unauthenticated attackers to retrieve private playlist contents by accessing the RSS feed playlist endpoint without authentication. |
Ivanti · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14903 | High | 7.7 | — | 2026-07-14 | Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web root. |
CVE-2026-14902 | Medium | 4.0 | — | 2026-07-14 | An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs. |
Jeecgboot · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58377 | High | 8.1 | — | 2026-06-30 | JeecgBoot through 3.9.2 contains a broken access control vulnerability that allows authenticated low-privilege users to perform full create, read, update, and delete operations on OpenAPI credentials by accessing the OpenApiAuthController… |
CVE-2026-58375 | High | 7.5 | — | 2026-06-30 | JimuReport through 2.5.0 exposes the POST /jmreport/auto/export endpoint without authentication: the handler is annotated @JimuNoLoginRequired, so JimuReportTokenInterceptor skips all authentication and authorization, and the export servic… |
Jline · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56741 | High | 7.5 | — | 2026-07-17 | JLine is a Java library for handling console input. |
CVE-2026-56740 | High | 7.5 | — | 2026-07-17 | JLine is a Java library for handling console input. |
Jonasbn · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58102 | Critical | 9.1 | — | 2026-07-13 | Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. |
CVE-2026-58101 | High | 7.5 | — | 2026-07-13 | Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. |
Joomshaper.com · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57830 | Critical | 9.1 | — | 2026-07-13 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrary file deletion. |
CVE-2026-57829 | Medium | 6.1 | — | 2026-07-13 | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated stored XSS. |
Kanboard · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58660 | High | 8.1 | — | 2026-07-15 | Kanboard through 1.2.52, fixed in commit 564cc30, BoardAjaxController save() method (used by the kanban board drag-and-drop endpoint) validates the caller's role on the attacker-supplied project_id but never verifies that the supplied task… |
CVE-2026-56774 | Medium | 5.4 | — | 2026-06-25 | Kanboard through 1.2.52, fixed in commit 928c68a, UserViewController::removeSession fails to validate the session id parameter before passing it to RememberMeSessionModel::remove, allowing authenticated users to delete other users' Remembe… |
Libusb · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-23679 | Medium | 6.2 | — | 2026-05-27 | libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but… |
CVE-2026-47104 | Medium | 4.0 | — | 2026-05-27 | libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size m… |
Lightning-ai · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44484 | Critical | 9.8 | — | 2026-05-14 | PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. |
CVE-2026-58659 | High | 7.8 | — | 2026-07-15 | PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. |
Lightpanda-io · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-52843 | Critical | 9.3 | — | 2026-07-15 | Lightpanda is a headless browser designed for AI and automation. |
CVE-2026-52842 | Critical | 9.3 | — | 2026-07-15 | Lightpanda is a headless browser designed for AI and automation. |
Lingdojo · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48547 | High | 7.3 | — | 2026-06-11 | KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes fields of patchNotesData.json, which are… |
CVE-2026-48546 | High | 7.3 | — | 2026-06-11 | KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js vm.runInNewContext() sandbox context in the i… |
Lissy93 · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46485 | High | 8.2 | — | 2026-07-15 | Dashy is a self-hostable personal dashboard. |
CVE-2026-54443 | — | — | — | 2026-07-15 | Dashy is a self-hostable personal dashboard. |
Lorex · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15683 | High | 7.5 | — | 2026-07-13 | Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. |
CVE-2026-15680 | High | 7.5 | — | 2026-07-13 | Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. |
M2team · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55782 | — | — | — | 2026-07-10 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. |
CVE-2026-55780 | — | — | — | 2026-07-10 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. |
Magepeopleteam · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57404 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manag… |
CVE-2026-61985 | Medium | 5.3 | — | 2026-07-13 | Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through <= 1.3.7. |
Milan Petrovic · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57771 | High | 8.5 | — | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Rating System gd-rating-system allows Blind SQL Injection.This issue affects GD Rating System: from n/a through <= 3.7. |
CVE-2026-57403 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Security Headers gd-security-headers allows Reflected XSS.This issue affects GD Security Headers: from n/a through <= 1… |
Misskey-dev · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57575 | — | — | — | 2026-07-10 | Misskey is an open source, federated social media platform. |
CVE-2026-57574 | — | — | — | 2026-07-10 | Misskey is an open source, federated social media platform. |
Msi · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-37454 | High | 7.5 | — | 2026-06-25 | Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the 3DES-ECB encryption |
CVE-2026-37453 | High | 7.5 | — | 2026-06-25 | Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the MSI_SERVICE_2 pipe |
Netbsd · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-32849 | Medium | 5.5 | — | 2026-05-18 | NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local variable iov_len is declared as a signed int but assigned from an unsigned cop->ds… |
CVE-2026-32848 | Medium | 4.7 | — | 2026-05-18 | NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a double-free condition by concurrently issuing CIOCCRYPT operations on the sam… |
Netfoundry · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45568 | Critical | 9.1 | — | 2026-07-16 | zrok is software for sharing web services, files, and network resources. |
CVE-2026-45576 | High | 7.5 | — | 2026-07-16 | zrok is software for sharing web services, files, and network resources. |
Netty · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44891 | High | 7.5 | — | 2026-07-17 | Netty is a network application framework for development of protocol servers and clients. |
CVE-2026-44894 | High | 7.5 | — | 2026-06-12 | Netty is a network application framework for development of protocol servers and clients. |
Newapi · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-33655 | High | 7.7 | — | 2026-07-09 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. |
CVE-2026-44342 | Medium | 5.3 | — | 2026-07-09 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. |
Nodeca · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59869 | High | 7.5 | — | 2026-07-08 | js-yaml is a JavaScript YAML parser and dumper. |
CVE-2026-59868 | Medium | 5.3 | — | 2026-07-08 | js-yaml is a JavaScript YAML parser and dumper. |
Nsquared · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59523 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a thr… |
CVE-2026-57812 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a thr… |
Openbsd · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55706 | Medium | 5.8 | — | 2026-06-17 | sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths. |
CVE-2026-56099 | Medium | 5.3 | — | 2026-06-18 | OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the mpls_do_error function within sys/netmpls/mpls_input.c that allows remote attackers to disclose kernel stack memory by sending crafted MPLS fram… |
Openfga · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55689 | Medium | 6.8 | — | 2026-07-09 | OpenFGA is an authorization/permission engine built for developers. |
CVE-2026-55170 | Medium | 5.4 | — | 2026-07-09 | OpenFGA is an authorization/permission engine built for developers. |
Openremote · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62238 | High | 8.8 | — | 2026-07-17 | OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint that constructs PostgreSQL queries by concatenating asset display names into raw SQL. |
CVE-2026-56784 | High | 8.1 | — | 2026-06-23 | OpenRemote before 1.25.0 contains an insecure direct object reference (IDOR) vulnerability in the bulk alarm deletion endpoint that allows authenticated users to permanently delete alarms belonging to other tenants by supplying arbitrary a… |
Osquery · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54001 | — | — | — | 2026-07-10 | osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. |
CVE-2026-54000 | — | — | — | 2026-07-10 | osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. |
Owasp · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-52747 | High | 8.6 | — | 2026-07-10 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. |
CVE-2026-52761 | Medium | 5.8 | — | 2026-07-10 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. |
Pega · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-1563 | Medium | 4.8 | — | 2026-07-15 | Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. |
CVE-2026-1562 | Medium | 4.8 | — | 2026-07-15 | Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. |
Pegatron Corp. · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14960 | Critical | 9.8 | — | 2026-07-15 | Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionality through the `\\.\TdeIo` device interface. |
CVE-2026-14961 | Medium | 6.2 | — | 2026-07-15 | Pegatron `Tdelo64.sys` exposes a privileged device interface, `\\.\TdeIo`, that fails to properly restrict access to sensitive IOCTL functionality. |
Perl · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13221 | Critical | 9.1 | — | 2026-07-13 | Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk. |
CVE-2026-57432 | High | 8.4 | — | 2026-07-13 | Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. |
Perryts · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53776 | Critical | 9.1 | — | 2026-06-16 | Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers to bypass token expiration by exploiting the unconditional setting of validate_exp = false in the verify_decode helper within the stdlib JWT verific… |
CVE-2026-53777 | High | 8.1 | — | 2026-06-11 | Perry before 0.5.1159 contains a path traversal vulnerability that allows a malicious build server to write arbitrary content to any location writable by the running process by supplying unsanitized path components in the artifact_name fie… |
Phalcon · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57584 | — | — | — | 2026-07-10 | Phalcon is a high-performance, full-stack PHP framework. |
CVE-2026-54736 | — | — | — | 2026-07-10 | Phalcon is a high-performance, full-stack PHP framework. |
Pinpoint-apm · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57947 | High | 8.5 | — | 2026-06-29 | Pinpoint through 3.1.0 contains a server-side request forgery vulnerability in the webhook registration endpoint that allows authenticated users to register internal URLs due to missing SSRF protection. |
CVE-2026-57948 | Medium | 6.8 | — | 2026-06-29 | Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the pinpointJwt session cookie due to missing HttpOnly and Secure attributes, enabling JavaScript access via document.cook… |
Prestashop · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54159 | Critical | 10.0 | — | 2026-07-17 | PrestaShop ps_facetedsearch is a module that adds layered navigation filters. |
CVE-2026-14846 | — | — | — | 2026-07-13 | In version 8.2.1 of PrestaShop, there is a vulnerability relating to the incorrect sanitisation of elements, caused by inadequate validation of the ‘Alias’ parameter in the ‘Update your address’ function. |
Properfraction · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57813 | Critical | 9.8 | — | 2026-07-13 | Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through <= 1.2.77.3. |
CVE-2026-13352 | High | 8.8 | — | 2026-07-17 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 4.16.18 via the all… |
Puma · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47737 | High | 7.5 | — | 2026-07-14 | Puma is a Ruby/Rack web server built for parallelism. |
CVE-2026-47736 | High | 7.5 | — | 2026-07-14 | Puma is a Ruby/Rack web server built for parallelism. |
Ragic · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15552 | Medium | 6.1 | — | 2026-07-13 | Enterprise Cloud Database developed by Ragic has a Stored Cross-Site Scripting vulnerability, allowing unauthenticated remote attackers to inject persistent JavaScript code executed in users' browsers upon page load. |
CVE-2026-15553 | Medium | 5.3 | — | 2026-07-13 | Enterprise Cloud Database developed by Ragic has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload malicious files and make them available for users to download. |
Rextheme · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57417 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme Cart Lift cart-lift allows Stored XSS.This issue affects Cart Lift: from n/a through <= 3.1.57. |
CVE-2026-15306 | Medium | 6.1 | — | 2026-07-16 | The Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 's' Search Parameter in all versions up to, and including, 7.6.1 due to insufficient input… |
Rockwell Auotmation · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8312 | High | 7.3 | — | 2026-07-14 | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe (Siman) component. |
CVE-2026-10577 | — | — | — | 2026-07-14 | A security issue exists within the 1715-AENTR EtherNet/IP Adapter. |
Samuelclay · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56771 | High | 8.5 | — | 2026-06-25 | NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the add_url endpoint that allows authenticated users to make arbitrary server requests to internal networks by failing to filter private IP addresses. |
CVE-2026-56772 | Medium | 4.3 | — | 2026-06-25 | NewsBlur before 14.5.0 contains a broken access control vulnerability that allows authenticated users to read private notification feeds by supplying arbitrary user_id values to the GET /social/interactions endpoint without ownership verif… |
Schneider Electric · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9650 | High | 7.5 | — | 2026-06-25 | CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credentials stored within firmware or system files. |
CVE-2026-9651 | Medium | 4.4 | — | 2026-06-25 | CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privileged local access reads improperly protect… |
Seaweedfs · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58372 | High | 8.1 | — | 2026-06-30 | SeaweedFS before 4.34 contains a path traversal vulnerability in the S3 gateway DeleteMultipleObjectsHandler that allows authenticated S3 principals with write access to a single bucket to delete arbitrary objects in other tenants' buckets… |
CVE-2026-58371 | Low | 3.1 | — | 2026-06-30 | SeaweedFS before 4.30 reflects the callback query parameter verbatim into responses served with Content-Type application/javascript in the shared writeJson helper (weed/server/common.go), with no callback-name validation, no X-Content-Type… |
Sebhildebrandt · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50289 | High | 8.8 | — | 2026-07-17 | systeminformation is a System and OS information library for node.js. |
CVE-2026-44724 | High | 7.8 | — | 2026-05-27 | systeminformation is a System and OS information library for node.js. |
Signoz · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57955 | High | 8.5 | — | 2026-06-29 | SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickHouse queries by injecting URL-encoded quotes into the rule ID path parameter of the alert-history endpoints. |
CVE-2026-63094 | High | 8.1 | — | 2026-07-17 | SigNoz before 0.134.0 contains an open redirect vulnerability in the SSO authentication flow that allows unauthenticated attackers to steal session tokens from any user on instances configured with Google OAuth, SAML, or OIDC. |
Simplemachines · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61520 | High | 7.7 | — | 2026-07-14 | Simple Machines Forum 2.1 prior to commit 4bf35cf and 3.0 prior to commit b4d23df contains a server-side request forgery vulnerability in the image proxy that allows authenticated attackers to trigger internal HTTP requests by embedding at… |
CVE-2026-39903 | High | 7.1 | — | 2026-07-10 | Simple Machines Forum 2.1 prior to commit 7d048f8 and 3.0 prior to commit a7875e8 contains an authorization bypass vulnerability in Sources/Actions/AttachmentApprove.php where a single-character operator error causes the permission check t… |
Skylot · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54684 | High | 7.0 | — | 2026-07-14 | jadx is a Dex to Java decompiler. |
CVE-2026-42049 | — | — | — | 2026-07-14 | jadx is a Dex to Java decompiler. |
Socket · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59725 | High | 7.5 | — | 2026-07-08 | Socket.IO enables bidirectional and low-latency communication for every platform. |
CVE-2026-59724 | High | 7.5 | — | 2026-07-08 | Socket.IO enables bidirectional and low-latency communication for every platform. |
Sonicwall · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15409 | Critical | 10.0 | KEV | 2026-07-14 | A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. |
CVE-2026-15410 | High | 7.2 | KEV | 2026-07-14 | Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated… |
Squid-cache · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47729 | Medium | 6.5 | — | 2026-07-16 | Squid is a caching proxy for the Web. |
CVE-2026-50012 | Medium | 5.5 | — | 2026-07-16 | Squid is a caching proxy for the Web. |
Stylemix · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13114 | High | 7.2 | — | 2026-07-11 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content and User Biographical Info in all versions up to, and including, 1.4.112 due to insufficient inp… |
CVE-2026-10865 | Medium | 5.3 | — | 2026-07-11 | The Cost Calculator Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.0.11 via the (template body). |
Surrealdb · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49997 | Medium | 5.4 | — | 2026-07-15 | SurrealDB is a scalable, distributed, collaborative, document-graph database for the realtime web. |
CVE-2026-63309 | Medium | 4.3 | — | 2026-07-17 | SurrealDB before 3.1.5 fail to apply field-level SELECT permissions to ORDER BY clauses, allowing authenticated users to leak the relative ordering of restricted field values. |
Suse · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-8412 | — | — | — | 2026-07-14 | A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in SUSE Virtual Machine Driver Pack allows an attacker with the ability to modify the registry to affect the integrity of the driver. |
CVE-2026-59674 | — | — | — | 2026-07-14 | A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. |
Teableio · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56773 | High | 8.8 | — | 2026-06-26 | Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. |
CVE-2026-56781 | Medium | 5.3 | — | 2026-06-29 | Teable before 2026-06-15T04-43-24Z.1912 contains an improper access control vulnerability that allows anonymous attackers to access hidden field data by supplying arbitrary field IDs in the projection parameter of the share view records en… |
Tencent · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50144 | High | 7.1 | — | 2026-07-15 | ncnn is a high-performance neural network inference framework optimized for the mobile platform. |
CVE-2026-15515 | High | 7.0 | — | 2026-07-13 | A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. |
Teraterm Project · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-60060 | Medium | 6.3 | — | 2026-07-17 | Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. |
CVE-2026-58317 | Medium | 6.3 | — | 2026-07-17 | Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. |
Themehunk · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12753 | High | 7.5 | — | 2026-07-16 | The Advance Product Search- Voice & Ajax Search for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 's' and 'match' parameter in all versions up to, and including, 1.4.4 due to insufficient escaping on the u… |
CVE-2026-57405 | High | 7.1 | — | 2026-07-13 | Missing Authorization vulnerability in themehunk Open Shop open-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Open Shop: from n/a through <= 1.7.1. |
Tickera · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13754 | Medium | 6.5 | — | 2026-07-16 | The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 3.6.0.0 due to insufficient escaping on the user supplied parameter and lack… |
CVE-2026-13755 | Medium | 6.4 | — | 2026-07-16 | The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'price_wrapper' Shortcode Attribute in all versions up to, and including, 3.6.0.0 due to insufficient input sanitization and o… |
Tilt-dev · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55883 | — | — | — | 2026-07-10 | Tilt defines dev environments as code for microservice apps on Kubernetes. |
CVE-2026-55882 | — | — | — | 2026-07-10 | Tilt defines dev environments as code for microservice apps on Kubernetes. |
Tomwright · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46378 | Medium | 6.2 | — | 2026-07-16 | Dasel is a command-line tool and library for querying, modifying, and transforming data structures. |
CVE-2026-46377 | Medium | 6.2 | — | 2026-07-16 | Dasel is a command-line tool and library for querying, modifying, and transforming data structures. |
Totolink · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15701 | Critical | 9.8 | — | 2026-07-14 | A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. |
CVE-2026-15204 | Medium | 5.3 | — | 2026-07-09 | A vulnerability was detected in TOTOLINK X5000R 9.1.0cu.2415_B20250515/9.1.0cu.2350_B20230313. |
Ultimate Fosters · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63082 | Medium | 5.4 | — | 2026-07-16 | Perfect Support Ticketing & Document Management System through 1.7 contains a broken access control vulnerability that allows authenticated attackers with Agent-level privileges to manipulate the Support Agent assignment field of tickets b… |
CVE-2026-63081 | Medium | 5.4 | — | 2026-07-16 | Perfect Support Ticketing & Document Management System through 1.7 contains a stored cross-site scripting vulnerability that allows authenticated attackers with Agent-level privileges to inject malicious payloads into the Notes field of as… |
Ux-themes · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57729 | High | 7.5 | — | 2026-07-13 | Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through <= 3.20.5. |
CVE-2026-57728 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Reflected XSS.This issue affects Flatsome: from n/a through <= 3.20.5. |
Uxper · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57799 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Nuss nuss allows PHP Local File Inclusion.This issue affects Nuss: from n/a through <= 1.3.6. |
CVE-2026-57794 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Golo Framework golo-framework allows PHP Local File Inclusion.This issue affects Golo Framework: from n/a throug… |
Viewcomponent · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54498 | High | 8.7 | — | 2026-07-17 | view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. |
CVE-2026-54497 | Medium | 6.8 | — | 2026-07-17 | view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. |
Villatheme · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57422 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Builder bopo-woo-product-bundle-builder allows Reflected XSS.This issue affects Bopo – WooCo… |
CVE-2026-57698 | Medium | 6.5 | — | 2026-07-13 | Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce woo-abandoned-cart-recovery allows Authentication Abuse.This issue affects Abandoned Cart Recovery for WooCommerce… |
Vim · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59858 | High | 7.8 | — | 2026-07-09 | Vim is an open source, command line text editor. |
CVE-2026-59856 | High | 7.8 | — | 2026-07-09 | Vim is an open source, command line text editor. |
Vitec · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61498 | Critical | 9.8 | — | 2026-07-13 | Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gen_graphs.php endpoint that allows remote unauthenticated attackers to execute arbitrary commands by supplying shell metacharacters in… |
CVE-2026-60121 | Critical | 9.8 | — | 2026-07-13 | Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/ping.php endpoint that allows remote attackers to execute arbitrary commands by exploiting a double-evaluation flaw in shell argument ha… |
Vowelweb · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57776 | Medium | 5.3 | — | 2026-07-13 | Missing Authorization vulnerability in vowelweb VW Wedding vw-wedding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Wedding: from n/a through <= 1.3.7. |
CVE-2026-57774 | Medium | 5.3 | — | 2026-07-13 | Missing Authorization vulnerability in vowelweb VW Food Corner vw-food-corner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Food Corner: from n/a through <= 1.1.0. |
Waooai · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15557 | High | 7.3 | — | 2026-07-13 | A weakness has been identified in waooAI waoowaoo up to 0.4.1. |
CVE-2026-15594 | Low | 3.7 | — | 2026-07-13 | A vulnerability was found in waooAI waoowaoo up to 0.4.1. |
Weeblr.com · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58077 | — | — | — | 2026-07-15 | Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 - The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS. |
CVE-2026-57833 | — | — | — | 2026-07-15 | Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 - The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS in relation to the AI analysis feature. |
Wger-project · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-43978 | High | 8.1 | — | 2026-07-16 | wger is a free, open-source workout and fitness manager. |
CVE-2026-43977 | High | 7.5 | — | 2026-07-16 | wger is a free, open-source workout and fitness manager. |
Will-moss · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15542 | High | 7.3 | — | 2026-07-13 | A vulnerability has been found in will-moss Isaiah up to 1.36.9. |
CVE-2026-15541 | High | 7.3 | — | 2026-07-13 | A flaw has been found in will-moss Isaiah up to 1.36.9. |
Woodpecker-ci · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58370 | High | 8.1 | — | 2026-06-30 | Woodpecker before 3.15.0 matches the ApprovalAllowedUsers bypass list against pipeline.Author. |
CVE-2026-58369 | Medium | 5.3 | — | 2026-06-30 | Woodpecker before 3.15.0 registers the /api/orgs/lookup/*org_full_name endpoint without authentication middleware, and the LookupOrg handler unconditionally dereferences the session user (user.ForgeID, via ForgeFromUser) when selecting the… |
Wordpress · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63030 | Critical | 9.8 | KEV | 2026-07-17 | WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Inje… |
CVE-2026-60137 | Medium | 5.9 | KEV | 2026-07-17 | WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter. |
Wpmu Dev - Your All-in-one Wordpress Platform · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57815 | High | 7.5 | — | 2026-07-13 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Path Traversal.This issue affects Forminator: from n/a through <= 1… |
CVE-2026-57814 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows DOM-Based XSS.This issue affects Forminator: from n/a through… |
Wupsales · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6804 | Medium | 5.3 | — | 2026-07-11 | The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.12. |
CVE-2026-6803 | Medium | 5.3 | — | 2026-07-11 | The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.4.12. |
X-rite · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2023-49900 | Critical | 9.8 | — | 2026-07-16 | An unauthenticated remote attacker is able to perform remote code execution due to incorrectly sanitized user input in the SetParameter command. |
CVE-2023-49899 | Critical | 9.8 | — | 2026-07-16 | An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel. |
Yamadashy · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49987 | High | 8.8 | — | 2026-07-15 | Repomix is a tool that packs repositories into AI-friendly files. |
CVE-2026-49988 | Medium | 5.5 | — | 2026-07-15 | Repomix is a tool that packs repositories into AI-friendly files. |
Yunai · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57950 | High | 8.1 | — | 2026-06-29 | ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control vulnerability in ErpSaleOrderController that allows attackers with erp:sale-out permissions to gain unauthorized access to sale order operations by exp… |
CVE-2026-57949 | Medium | 6.5 | — | 2026-06-29 | ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerability in the CRM module's GET /admin-api/crm/follow-up-record/get endpoint that allows authenticated users to read any follow-up record by ite… |
Zeek · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-60109 | High | 7.5 | — | 2026-07-09 | Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash the sensor by sending a crafted KRB_ERROR message with error-code 25 (KDC_ERR_PREAU… |
CVE-2026-60108 | High | 7.5 | — | 2026-07-09 | Zeek before 8.0.9 contains an uncontrolled memory consumption vulnerability in the FTP analyzer that allows unauthenticated remote attackers to cause process termination by sending a crafted FTP control session negotiating AUTH GSSAPI foll… |
Zhayujie · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15628 | Medium | 6.3 | — | 2026-07-14 | A security flaw has been discovered in zhayujie chatgpt-on-wechat CowAgent up to 2.1.1. |
CVE-2026-15329 | Medium | 4.3 | — | 2026-07-10 | A vulnerability was found in zhayujie CowAgent up to 2.1.0. |
Zhinianboke · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15752 | High | 7.3 | — | 2026-07-14 | A vulnerability was found in zhinianboke xianyu-auto-reply up to dcb445ad97816ad65299a7580ee0c8c8f929da84. |
CVE-2026-15753 | Medium | 5.4 | — | 2026-07-14 | A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. |
/Mailtrap-mailer · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45755 | Medium | 5.3 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
1panel-dev · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56779 | Medium | 6.4 | — | 2026-06-25 | MaxKB before 2.10.0 contains a server-side request forgery vulnerability in tool creation and update endpoints that allows authenticated users to make arbitrary server requests by supplying unvalidated downloadCallbackUrl and download_url… |
2coders · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7544 | Medium | 4.3 | — | 2026-07-11 | The Mux Video Uploader plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 via the muxvideo_enqueue_settings_script. |
4real · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6847 | — | — | — | 2026-07-13 | Remote Code Execution vulnerability exists in ThemisNETPanel due to missing authentication for a critical file upload function. |
Abb · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12705 | Medium | 6.4 | — | 2026-07-17 | Missing support for integrity check vulnerability in ABB KNX Update Tool (ABB), ABB KNX Update Tool (BJE). |
Academysoftwarefoundation · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45696 | Medium | 6.5 | — | 2026-06-18 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. |
Adguard · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47703 | Medium | 5.3 | — | 2026-07-15 | AdGuard Home is a network-wide software for blocking ads and tracking. |
Adonisjs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48795 | High | 8.6 | — | 2026-07-15 | AdonisJS is a TypeScript-first web framework. |
Adrian Tobey · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57389 | High | 8.6 | — | 2026-07-13 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Adrian Tobey Groundhogg groundhogg allows Path Traversal.This issue affects Groundhogg: from n/a through <= 4.4.1. |
Aguilatechnologies · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7640 | Medium | 6.4 | — | 2026-07-14 | The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute of the `customer-area-protected-content` shortcode in all versions up to, and including, 8.3.5. |
Ahmadmj · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13262 | Medium | 6.5 | — | 2026-07-11 | The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'val' parameter in all versions up to, and including, 1.1.9 due to insufficient escaping on the… |
Ahnlab · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-60357 | High | 8.1 | — | 2026-07-17 | AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint. |
Ajith-ab · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58460 | High | 7.7 | — | 2026-07-02 | react-native-receive-sharing-intent contains a path traversal vulnerability that allows a co-resident malicious application to write files outside the intended cache directory by supplying a crafted _display_name value containing dot-dot p… |
Akariasai · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15535 | Medium | 6.3 | — | 2026-07-13 | A vulnerability was determined in AkariAsai self-rag up to 1fcdc420e48f50a7d7ab1ece5494221b93252e99. |
Akpali9 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15493 | Low | 3.5 | — | 2026-07-12 | A vulnerability was detected in Akpali9 Attendance-Management-System up to 70b91fe38f4195b701a45f0edcd4f42d5f64aeee. |
Alioshr · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15524 | Low | 3.3 | — | 2026-07-13 | A security vulnerability has been detected in alioshr memory-bank-mcp up to 0.2.1/3.1. |
Alsa-project · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56109 | Medium | 6.8 | — | 2026-06-22 | The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. |
Aman · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57411 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman CF7 Views – Complete Entry Management for Contact Form 7 cf7-views allows DOM-Based XSS.This issue affects CF7 Views – C… |
Amauric · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49977 | Medium | 4.3 | — | 2026-07-17 | tarteaucitron.js is a compliant and accessible cookie banner. |
Amtt · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15494 | Medium | 4.7 | — | 2026-07-12 | A flaw has been found in AMTT Hotel Broadband Operation System 1.0. |
Andy_moyle · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61983 | Medium | 5.3 | — | 2026-07-13 | Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through <= 5.0.30. |
Antv · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15598 | Medium | 6.3 | — | 2026-07-13 | A weakness has been identified in antv layout 2.0.0. |
Anyscale · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57516 | High | 8.8 | — | 2026-07-01 | Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution by supplying a malicious tar archive to the read_webdataset() function. |
Aojiaozero · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15502 | Medium | 6.3 | — | 2026-07-12 | A vulnerability was detected in AojiaoZero Antaris 1.0. |
Apereo · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59099 | Critical | 9.1 | — | 2026-07-02 | Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remote unauthenticated attackers to recover plaintext conversation state by exploiting AES-GCM initialization vector reuse across the server lifetime. |
Apify · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46341 | Medium | 6.1 | — | 2026-07-16 | The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. |
Appsbd · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57385 | High | 8.5 | — | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through <= 3.4.2. |
Area 17 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15518 | Medium | 4.7 | — | 2026-07-13 | A vulnerability has been found in AREA 17 Twill CMS up to 3.6.0. |
Arraytics · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13039 | Medium | 5.3 | — | 2026-07-10 | The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to authorization bypass due to a regression in versions from 4.0.26 up to and including 4.1.15. |
Artifex · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-71382 | Medium | 6.5 | — | 2026-06-23 | MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a denial of service by supplying a maliciously crafted EPUB file with deeply nested HTML elemen… |
Aster Telecom · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15482 | High | 7.3 | — | 2026-07-12 | A weakness has been identified in Aster Telecom Azcall 10/11. |
Asyncssh_project · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45309 | High | 7.5 | — | 2026-07-17 | AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. |
Augmnt · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15526 | Low | 3.3 | — | 2026-07-13 | A flaw has been found in augmnt augments-mcp-server 7.1.0. |
Authlib · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49852 | — | — | — | 2026-07-17 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. |
Avaiga · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48544 | High | 7.5 | — | 2026-05-27 | Taipy 4.1.1, fixed in commit 129fd40, contains a path traversal vulnerability in the ElementLibrary.get_resource() method in taipy/gui/extension/library.py that allows unauthenticated attackers to escape the intended module directory by ex… |
Avo-hq · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55518 | Critical | 9.6 | — | 2026-07-17 | Avo is a framework to create admin panels for Ruby on Rails apps. |
Avwo · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55629 | — | — | — | 2026-07-16 | Whistle is an HTTP, HTTP2, HTTPS, and WebSocket debugging proxy. |
Axelor · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63085 | High | 8.8 | — | 2026-07-16 | Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relational save operatio… |
Axiomthemes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57738 | Critical | 9.8 | — | 2026-07-13 | Deserialization of Untrusted Data vulnerability in axiomthemes 777 triple-seven allows Object Injection.This issue affects 777: from n/a through <= 1.13.0. |
Axllent · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55187 | Medium | 5.8 | — | 2026-07-10 | Mailpit is an email testing tool and API for developers. |
Bagisto · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-60120 | Medium | 5.4 | — | 2026-07-09 | Bagisto before 2.4.4 contains a stored cross-site scripting vulnerability via client-side template injection that allows unauthenticated attackers to execute arbitrary JavaScript in administrator browsers by registering a customer account… |
Bahmni · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15477 | Medium | 6.3 | — | 2026-07-12 | A vulnerability was detected in Bahmni bahmnicore up to 0.93. |
Baptistearno · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49213 | High | 8.1 | — | 2026-07-10 | TypeBot is a chatbot builder tool. |
Basix · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57668 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Stored XSS.This issue affects NEX-Forms: from n/a through <= 9.2.2. |
Bdthemes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57413 | Medium | 6.4 | — | 2026-07-13 | Server-Side Request Forgery (SSRF) vulnerability in bdthemes Instant Image Generator ai-image allows Server Side Request Forgery.This issue affects Instant Image Generator: from n/a through <= 2.1.4. |
Blazethemes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11390 | Medium | 6.4 | — | 2026-07-14 | The News Kit Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets in all versions up to, and including, 1.4.6 due to insufficient input sanitization and ou… |
Blender · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-60103 | Medium | 6.1 | — | 2026-07-13 | Blender 3.0.0 through 5.1.2 contains an out-of-bounds read vulnerability that allows attackers to trigger a crash or read adjacent heap memory by supplying a crafted .blend file with a malicious signed short member_index value in the SDNA… |
Blendmedia · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-4661 | High | 7.5 | — | 2026-07-11 | The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'fildname' parameter in all versions up to, and including, 2.2.2. |
Blue Planet · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-5270 | Critical | 9.8 | — | 2026-07-14 | An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP), and Blue Planet products. |
Bootimus · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56115 | High | 8.8 | — | 2026-06-23 | Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function in internal/auth/a… |
Bosh-ecosystem / Bosh (Bosh-cli) · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47828 | High | 8.8 | — | 2026-07-09 | During bosh create-env and bosh delete-env, the CLI uploads compiled CPI packages and rendered job templates to the new VM's DAV blobstore over HTTPS without verifying the server certificate, even though a CA certificate for that endpoint… |
Brainstorm Force · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57401 | Critical | 9.9 | — | 2026-07-13 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force SureDash suredash allows Path Traversal.This issue affects SureDash: from n/a through <= 1.8.0. |
Brainstormforce · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15288 | High | 7.5 | — | 2026-07-10 | The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 2.2.1. |
Breakdance · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7543 | High | 7.2 | — | 2026-07-16 | The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fields' parameter in versions up to, and including, 2.7.1 due to insufficient input sanitization and output escaping. |
Bricksforge · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14956 | Critical | 9.8 | — | 2026-07-17 | The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6. |
Burak · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13082 | Medium | 5.3 | — | 2026-07-17 | GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. |
Cache · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45073 | High | 7.3 | — | 2026-07-14 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. |
Caddyserver · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-52845 | High | 8.1 | — | 2026-06-23 | Caddy is an extensible server platform that uses TLS by default. |
Cakephp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55590 | Medium | 6.1 | — | 2026-07-09 | CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. |
Camaleon Cms · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10715 | — | — | — | 2026-06-12 | Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. |
Canboat · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56790 | High | 7.3 | — | 2026-06-25 | CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in the searchForPgn() function in analyzer/pgn.c that allows remote attackers to crash the application. |
Cap-js · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46421 | — | — | — | 2026-07-15 | The SAP Cloud Application Programming Model is a tool for building enterprise-grade cloud applications, and cap-js/cds-dbs is the monorepo for SQL database services for that tool. |
Catalyst2020 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-5017 | Medium | 4.9 | — | 2026-07-11 | The Catalyst Connect Zoho CRM Client Portal plugin for WordPress is vulnerable to time-based SQL Injection via the ‘uid’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and… |
Catchplugins · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15336 | Medium | 4.3 | — | 2026-07-16 | The Catch Themes Demo Import plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.3. |
Ccfos · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58167 | Medium | 6.5 | — | 2026-06-30 | Nightingale (n9e) before 9.0.0-beta.2 exposes full datasource configurations, including plaintext database passwords, HTTP bearer tokens, HTTP basic-auth passwords, and mTLS client keys, to any authenticated low-privilege (Standard role) u… |
Centreon · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14453 | Critical | 9.6 | — | 2026-07-13 | This vulnerability is a critical Server-Side Template Injection (SSTI) in Centreon's centreon-open-tickets module that leads to Remote Code Execution. |
Cert-manager · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62290 | High | 7.3 | — | 2026-07-16 | cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. |
Chainlit · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56104 | High | 8.2 | — | 2026-06-22 | Chainlit before 2.10.1 contains a session hijacking vulnerability that allows unauthenticated attackers to restore and inherit authenticated user sessions by presenting a valid sessionId during WebSocket session restoration without ownersh… |
Checkmk Gmbh · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14852 | — | — | — | 2026-07-14 | Privilege escalation in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 (EOL) allows a local unprivileged user to execute arbitrary commands as root by starting a process crafted to look like… |
Cherryhq · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-40501 | High | 8.8 | — | 2026-07-15 | Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a remote code execution vulnerability in SearchService that allows remote attackers to execute arbitrary code by delivering malicious JavaScript through controll… |
Choijun · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15338 | High | 7.5 | — | 2026-07-11 | The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.1 via the get_type_template function. |
Chronoengine.com · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58148 | — | — | — | 2026-07-17 | Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52 - The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability. |
Ciena · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-5269 | Critical | 9.8 | — | 2026-07-14 | In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software operations. |
Cli · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59831 | Medium | 4.4 | — | 2026-07-09 | GitHub CLI (gh) is GitHub’s official command line tool. |
Cloudnative-pg · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44477 | Critical | 9.9 | — | 2026-05-28 | CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. |
Codecentric · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62242 | High | 8.6 | — | 2026-07-13 | Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to register instances with attacker-controlled healthUrl and managementUrl parameters without validation again… |
Codeigniter4 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48062 | Critical | 9.8 | — | 2026-07-17 | CodeIgniter is a PHP full-stack web framework. |
Codexthemes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57804 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows PHP Local File Inclusion. |
Colorbox_project · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58591 | Medium | 5.4 | — | 2026-07-10 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS). |
Comfast · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15511 | Critical | 9.8 | — | 2026-07-12 | A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. |
Composer · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45793 | High | 7.5 | — | 2026-07-15 | Composer is a dependency Manager for the PHP language. |
Conductor-oss · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58138 | Critical | 9.8 | — | 2026-06-30 | Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript o… |
Coollabsio · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15507 | Medium | 6.3 | — | 2026-07-12 | A vulnerability was detected in coollabsio Coolify up to 4.1.1. |
Corvusinfo · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6939 | High | 7.2 | — | 2026-07-11 | The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'approval_code' parameter in all versions up to, and including, 2.7.4 due to insufficient input sanitization and output esc… |
Cozmoslabs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61971 | Low | 2.7 | — | 2026-07-13 | Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs User Profile Picture metronet-profile-picture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Profile Picture: fro… |
Creativews · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57787 | High | 8.5 | — | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeWS CWS SVGicons cws-svgicons allows Blind SQL Injection.This issue affects CWS SVGicons: from n/a through <= 1.5.5. |
Crewai · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62240 | High | 7.4 | — | 2026-07-13 | CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. |
Cservit · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15296 | Medium | 6.4 | — | 2026-07-10 | The affiliate-toolkit – WP Affiliate Plugin with Amazon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'atkp_product' shortcode in all versions up to, and including, 3.7.0 due to insufficient input sanit… |
Cursor · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61613 | — | — | — | 2026-07-15 | Cursor is a code editor built for programming with AI. |
Cvat · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58373 | Medium | 4.3 | — | 2026-06-30 | CVAT before 2.69.0 contains an improper authorization vulnerability in QualityReportViewSet.get_queryset that allows authenticated attackers to enumerate quality report identifiers belonging to other organizations by exploiting a missing c… |
D-link · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15270 | High | 7.5 | — | 2026-07-09 | A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. |
Dan Rossiter · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57695 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue affects Document Gallery: from n/a through <= 5.1.0. |
Danifus · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44722 | Medium | 6.2 | — | 2026-07-17 | pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. |
Danpros · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45233 | High | 8.1 | — | 2026-06-25 | HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authenticated attackers to relocate arbitrary files by supplying directory traversal sequences in the oldfile parameter at the admin autosave endpoi… |
Dao-ailab · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62239 | Medium | 6.6 | — | 2026-07-13 | FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains a symlink attack vulnerability in the download_and_copy() function within hopper/setup.py that extracts NVIDIA toolchain archives without validating symlinks or filterin… |
Dapr · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59096 | High | 7.5 | — | 2026-07-02 | Dapr Sentry's OIDC discovery endpoint derives the issuer and jwks_uri of the /.well-known/openid-configuration document from the request Host, honoring an attacker-controlled X-Forwarded-Host header without validation when no allowed-hosts… |
Dassault Systèmes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14165 | High | 7.5 | — | 2026-07-13 | An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to access data of other users without authorization. |
Dcooney · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15295 | Medium | 4.4 | — | 2026-07-10 | The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 7.0.1 due to insufficient input sanitization and output escaping. |
Dd-wrt · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2021-27137 | High | 8.1 | KEV | 2026-07-16 | An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. |
Denx · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46728 | High | 8.2 | — | 2026-05-16 | Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash. |
Devozon · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8616 | Medium | 5.3 | — | 2026-07-17 | The Fense Proxy & VPN Blocker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce validation on the fense_bpvt_save_settings() function in versions up to, and includin… |
Dify · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61461 | High | 8.8 | — | 2026-07-10 | Dify before 1.16.0-rc1 contains a SQL injection vulnerability in the MyScale vector store backend that allows attackers to execute arbitrary SQL by supplying unsanitized search parameters to the search_by_full_text method without escaping… |
Digital-peak.com · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57831 | — | — | — | 2026-07-15 | Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2 - The Joomla extension DP Calendar is vulnerable to an unauthenticated SQL injection. |
Docling-project · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44019 | High | 8.1 | — | 2026-07-16 | Docling Core defines core data types and transformations for the document processing application Docling. |
Dokan, Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57706 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dokan, Inc. |
Dolibarr · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58376 | High | 7.6 | — | 2026-06-30 | Dolibarr through 23.0.3, fixed in commit 14db36e, contains a sql injection vulnerability that allows authenticated API users to exfiltrate arbitrary database contents by supplying malicious values to the sqlfilters query parameter in the s… |
Dromara · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58176 | Medium | 6.5 | — | 2026-06-30 | RuoYi-Vue-Plus through 5.6.2, fixed in commit 88d03d9, exposes workflow task management endpoints under /workflow/task (FlwTaskController) without any permission check: the controller declares no class-level or method-level authorization a… |
Eclipse Foundation · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57898 | Critical | 9.0 | — | 2026-07-14 | In Eclipse BaSyx Java Server SDK versions 2.0.0-milestone-05 to 2.0.0-milestone-12, deployments using the MongoDB backend are vulnerable to an unauthenticated arbitrary file write through the AAS thumbnail API. |
Eclipse-wakaama · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58465 | High | 7.5 | — | 2026-07-02 | Eclipse Wakaama before snapshot/2026-05-26 contains an unbounded memory allocation vulnerability in the CoAP Block1 handler within coap/block.c that allows unauthenticated remote attackers to exhaust server memory by sending a sequence of… |
Elated-themes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57793 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Flow flow allows PHP Local File Inclusion.This issue affects Flow: from n/a through <= 1.8. |
Element Invader · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57376 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows DOM-Based XSS.This issue affects ElementIn… |
Eli · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57691 | Medium | 5.8 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eli Anti-Malware Security and Brute-Force Firewall gotmls allows Reflected XSS.This issue affects Anti-Malware Security and Brute-Force F… |
Emqx · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-36590 | High | 7.5 | — | 2026-07-15 | An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qos_db_set function in broker_tcp.c component |
Envoyproxy · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47220 | High | 7.5 | — | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. |
Etcd · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59818 | Medium | 6.5 | — | 2026-07-08 | etcd is a distributed key-value store for the data of a distributed system. |
Eteubert · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13001 | Critical | 9.8 | — | 2026-07-14 | The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'podlove_handle_cache_files' function in all versions up to, and including, 4.5.1. |
Eugeny · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46709 | High | 7.8 | — | 2026-07-15 | Tabby (formerly Terminus) is a highly configurable terminal emulator. |
Evermind-ai · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58499 | High | 8.2 | — | 2026-07-10 | EverOS is a memory runtime for agents. |
Evertec · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11324 | Medium | 6.1 | — | 2026-07-17 | The WooCommerce Placetopay Gateway and PlacetoPay/AvalPay gateway plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the 'redirect-url' parameter in versions up to, and including, 3.2.2 due to insufficient input san… |
Excon · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54171 | Medium | 6.5 | — | 2026-07-17 | Excon is usable, fast, simple HTTP 1.1 for Ruby. |
Expresstech · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13767 | Medium | 6.5 | — | 2026-07-16 | The Quiz Master Next plugin for WordPress is vulnerable to SQL Injection via stored quiz page data in versions up to, and including, 11.2.0. |
Eyecix · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57383 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Stored XSS.This issue affects JobSearch: from n/a through <= 3.2.9. |
Fahad Mahmood · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57419 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Locations for WooCommerce… |
Faisalman · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48125 | Medium | 5.3 | — | 2026-07-14 | UAParser.js is a JavaScript library to detect browsers, operating systems, CPUs, and devices from user-agent data. |
Favethemes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57768 | High | 8.2 | — | 2026-07-13 | Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege Escalation.This issue affects Houzez Login Register: from n/a through <= 3.3.3. |
Feast-dev · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56121 | Critical | 9.8 | — | 2026-06-24 | Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request to the registry server. |
Feathersjs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54335 | Low | 3.7 | — | 2026-07-17 | Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. |
Fernandobt · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12434 | Medium | 4.3 | — | 2026-07-16 | The List category posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.95.0 via the sanitize_status. |
Fgmacedo · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47103 | Critical | 9.8 | — | 2026-06-17 | Python StateMachine versions 3.0.0 before 3.2.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary code by supplying malicious SCXML documents containing crafted `<data expr="...">` attributes evaluat… |
Flameshot-org · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62294 | — | — | — | 2026-07-15 | Flameshot is powerful yet simple to use screenshot software. |
Flintop · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57396 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Flintop Free Gifts for WooCommerce free-gifts-for-woocommerce allows Stored XSS.This issue affects Free Gifts for WooCommerce: from n/a t… |
Flowise · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56271 | Critical | 9.8 | — | 2026-07-12 | Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refresh_token') and default audience and issuer values ('AUDIENCE', 'ISSUER') in the enterprise passport authentication mid… |
Flux159 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61459 | Critical | 9.8 | — | 2026-07-10 | MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying reso… |
Fluxbuilder · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57375 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in FluxBuilder MStore API mstore-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MStore API: from n/a through <= 4.18.4. |
Fossasia · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63101 | High | 7.5 | — | 2026-07-17 | Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers to export the complete member roster of any group, including email addresses, names, join dates, and roles, by submittin… |
Freshlabs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-1382 | Medium | 6.4 | — | 2026-07-11 | The fresh Podcaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'freshpodcaster' shortcode in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping on user supplie… |
Funnelkit · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57816 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Funnel Builder by FunnelKit funnel-builder allows Reflected XSS.This issue affects Funnel Builder by FunnelKit: from n/a throug… |
Gallerycreator · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-5743 | Medium | 6.4 | — | 2026-07-11 | The SimpLy Gallery Block & Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via block attributes in all versions up to, and including, 3.3.3.2. |
Garu · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13410 | High | 8.2 | — | 2026-07-17 | Dancer::Plugin::Auth::Google versions before 0.08 for Perl have TLS verification disabled. |
Genolve · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-1359 | High | 8.8 | — | 2026-07-11 | The Genolve – AI image AI video generation plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the genolve_setOpt() function in all versions up to, and including, 5.0.5. |
Getmaxun · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56767 | High | 8.8 | — | 2026-06-25 | Maxun before 0.0.42 contains a cross-tenant insecure direct object reference vulnerability in storage and webhook API handlers that allows authenticated users to access other users' robots and OAuth tokens. |
Getredash · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-33213 | Medium | 6.1 | — | 2026-07-15 | Redash is a package for data visualization and sharing. |
Gigabyte · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9492 | High | 7.8 | — | 2026-07-13 | The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYTE Technology has an Improper Access Control vulnerability. |
Gitroomhq · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48799 | High | 7.7 | — | 2026-07-15 | Postiz is an AI social media scheduling tool. |
Glarysoft · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15684 | High | 7.3 | — | 2026-07-13 | Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. |
Gnome · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6653 | Critical | 9.8 | — | 2026-06-22 | Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling. |
Gnu Wget · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15146 | Medium | 5.9 | — | 2026-07-10 | GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. |
Go-shiori · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61463 | High | 8.8 | — | 2026-07-13 | Shiori contains a privilege escalation vulnerability in the account update endpoint that allows authenticated users to modify the owner field without authorization checks. |
Gophish · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-39904 | Medium | 6.5 | — | 2026-06-22 | Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to exhaust server memory by uploading a crafted Office document as an email template attachment. |
Gorse-io · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56782 | Critical | 9.8 | — | 2026-06-29 | Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_key is empty, which is the default confi… |
Gotenberg · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55229 | High | 7.5 | — | 2026-07-10 | Gotenberg is a Docker-powered stateless API for PDF files. |
Gpsd_project · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58459 | High | 7.8 | — | 2026-07-09 | gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads i… |
Gpustack · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58658 | High | 8.2 | — | 2026-07-15 | GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to access sensitive inference logs and modify worker configuration by exploiting unprot… |
Grafana-cold-storage · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63087 | Critical | 9.8 | — | 2026-07-16 | Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stack_… |
Gravity Forms · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12997 | High | 7.5 | — | 2026-07-15 | The Gravity Forms plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.10.4 via the 'gform_uploaded_files' parameter parameter. |
Haarg · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57433 | Critical | 9.8 | — | 2026-07-13 | Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. |
Hackplayers · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55201 | Medium | 6.8 | — | 2026-06-17 | Evil-WinRM through 3.9, fixed in commit 6ecd570, contains a path traversal vulnerability in the download_dir() function that allows a rogue or compromised remote Windows server to write files outside the intended download directory by retu… |
Haiwen · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56768 | High | 8.8 | — | 2026-06-25 | Seahub before 13.0.23 does not enforce SHARE_LINK_LOGIN_REQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. |
Hamsalam · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61956 | High | 7.1 | — | 2026-07-13 | Cross-Site Request Forgery (CSRF) vulnerability in hamsalam ووسلام – همگام سازی ووکامرس و باسلام sync-basalam allows Cross Site Request Forgery.This issue affects ووسلام – همگام سازی ووکامرس و باسلام: from n/a through <= 1.9.1. |
Hannan · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61955 | High | 7.6 | — | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hannan گرویتی فرم فارسی persian-gravity-forms allows Blind SQL Injection.This issue affects گرویتی فرم فارسی: from n/a through <= 3.0.2. |
Hashtopolis · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-22104 | — | — | — | 2026-07-17 | Improper access control in Hashtopolis server web-interface chunk activity component for versions prior to 0.14.8 allows any created account to read all cracked hashes of a Hashtopolis server instance. |
Hcengineering · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56769 | High | 8.5 | — | 2026-06-25 | Huly Platform through 0.7.423, fixed in commit 68cbf8a contains an authenticated server-side request forgery vulnerability in the /import endpoint of front pod that allows workspace users to make arbitrary server requests. |
Hcr707305003 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15488 | High | 7.3 | — | 2026-07-12 | A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. |
Helicone · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15508 | Medium | 6.3 | — | 2026-07-12 | A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. |
Helm · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63308 | Medium | 4.3 | — | 2026-07-17 | Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger an index out of range panic by including zero-length byte sl… |
Hestiacp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-43633 | Critical | 10.0 | — | 2026-05-19 | HestiaCP versions 1.9.0 through 1.9.4 contain a deserialization vulnerability in the web terminal component caused by a session format mismatch between PHP and Node.js that allows unauthenticated remote attackers to achieve root-level code… |
Hey-api · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48819 | Medium | 4.8 | — | 2026-07-17 | Hey API is an ecosystem for turning API specifications into production-ready code. |
Hitesh Chandwani · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57365 | Medium | 6.5 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hitesh Chandwani reCAPTCHA (v2 & v3) for Asgaros Forum recaptcha-for-asgaros-forum allows DOM-Based XSS.This issue affects reCAPTCHA… |
Hiyouga · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58116 | Critical | 9.8 | — | 2026-06-30 | LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces. |
Hubspotdev · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9656 | Medium | 4.3 | — | 2026-07-17 | The HubSpot All-In-One Marketing – Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.62 via the wp_localize_script() / window.leadinConfig JavaScript ob… |
Hupe13 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57380 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows DOM-Based XSS.This issue affects Extensions for Leaflet Map: from n/a thr… |
Igweze · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15492 | Medium | 4.3 | — | 2026-07-12 | A security vulnerability has been detected in igweze wizgrade up to b1d55f22b90cd7e7a6e5002f006d7c649e8086d6. |
Ikas Technology Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7488 | High | 7.5 | — | 2026-07-17 | Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. |
Ilias · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12789 | Medium | 4.7 | — | 2026-06-21 | A vulnerability was identified in ILIAS Learning Management System 11.0. |
Immich-app · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59258 | High | 8.3 | — | 2026-07-15 | immich before 3.0.3 contains a broken access control vulnerability in the PUT /albums/:id/user/:userId endpoint that allows shared album editors to modify member roles without owner-only restrictions. |
Inc2734 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-2594 | Medium | 6.4 | — | 2026-07-17 | The Smart Custom Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.0.7. |
Infiniflow · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58579 | Medium | 5.4 | — | 2026-07-02 | RAGFlow before 0.26.3 stores an agent pipeline (DSL) node name without sanitization: the agent update endpoint normalizes the submitted DSL via normalize_dsl, which only performs JSON serialization validation and preserves the node name ve… |
Invoiceninja · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58450 | Medium | 4.3 | — | 2026-06-30 | Invoice Ninja through 5.13.26 contains an open redirect vulnerability in the client portal login that allows unauthenticated attackers to redirect authenticated victims to attacker-controlled external URLs by injecting a malicious value in… |
Jadx_project · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-42447 | Low | 3.6 | — | 2026-07-14 | jadx is a Dex to Java decompiler. |
Janssenproject · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45795 | Medium | 5.3 | — | 2026-07-16 | The Janssen Project is an open-source identity and access management (IAM) platform. |
Jberger · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9537 | Medium | 5.3 | — | 2026-07-17 | Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. |
Jg-rp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55865 | — | — | — | 2026-07-09 | Python Liquid is a Python engine for the Liquid template language. |
Jgwhite33 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15651 | Medium | 4.9 | — | 2026-07-16 | The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via the 'filtersource' parameter in all versions up to, and including, 14.6 due to insufficient escaping on the user supplied parameter and lack o… |
Jinher · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15517 | High | 7.3 | — | 2026-07-13 | A flaw has been found in Jinher OA 1.0. |
Jose Vega · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61952 | Medium | 4.9 | — | 2026-07-13 | Missing Authorization vulnerability in Jose Vega WooCommerce Bulk Edit Products – WP Sheet Editor woo-bulk-edit-products allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Bulk Edit Produ… |
Jsonata · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-52746 | High | 7.5 | — | 2026-07-17 | JSONata is a JSON query and transformation language. |
Jsonpickle · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2021-47952 | Critical | 9.8 | — | 2026-05-16 | python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON payloads containing py/repr objects. |
Jwsthemes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57789 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Aqua aqua allows PHP Local File Inclusion.This issue affects Aqua: from n/a through <= 5.1.2. |
Jwt · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45363 | Critical | 9.1 | — | 2026-07-14 | ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. |
Keras · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12482 | Medium | 6.5 | — | 2026-07-14 | A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the `filter_safe_tarinfos` validation in `keras/src/utils/file_utils.py`. |
Kevp75 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15350 | Medium | 4.3 | — | 2026-07-16 | The The Cache Purger plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.20. |
Keycloak · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-1609 | High | 8.1 | — | 2026-07-16 | A flaw was found in Keycloak. |
Klosk · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15525 | Medium | 6.3 | — | 2026-07-13 | A vulnerability was detected in kLOsk adloop up to 0.9.0. |
Knadh · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62361 | Medium | 5.5 | — | 2026-07-15 | listmonk is a standalone, self-hosted, newsletter and mailing list manager. |
Knitpay · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57424 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in knitpay Razorpay Payment Links for WooCommerce rzp-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Razorpay Payment Links for WooCommerce: from n… |
Kodezen · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9341 | Medium | 4.3 | — | 2026-07-14 | The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.8.0 via the 'save_lesson_note', 'get_lesson_note', and 'c… |
Kodezen Llc · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57386 | High | 8.8 | — | 2026-07-13 | Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a through < 2.9.1. |
Kofi Mokome · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57423 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kofi Mokome Message Filter for Contact Form 7 cf7-message-filter allows Reflected XSS.This issue affects Message Filter for Contact Form… |
Kofrasa · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15698 | Medium | 6.3 | — | 2026-07-14 | A vulnerability was determined in kofrasa mingo up to 7.2.1. |
Kopia · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45695 | Critical | 9.8 | — | 2026-07-16 | Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast incremental backups, client-side end-to-end encryption, compression, and data deduplication. |
Lamaalrajih · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15528 | Low | 3.3 | — | 2026-07-13 | A vulnerability was found in lamaalrajih kicad-mcp up to 3.3.1. |
Langchain4j · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55405 | High | 7.6 | — | 2026-07-10 | LangChain4j is a Java library for building LLM-powered applications on the JVM. |
Langroid · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50181 | High | 7.1 | — | 2026-07-10 | Langroid is a framework for building large-language-model-powered applications. |
Latepoint · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57714 | Critical | 9.3 | — | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LatePoint LatePoint latepoint allows Blind SQL Injection.This issue affects LatePoint: from n/a through <= 5.6.3. |
Leap13 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12141 | Medium | 4.9 | — | 2026-07-11 | The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premium_tooltip_text' parameter in all versions up to, and including, 4.11.84 due to insuf… |
Legion Of The Bouncy Castle Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15997 | — | — | — | 2026-07-16 | Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. |
Lepture · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49851 | High | 7.5 | — | 2026-06-24 | Mistune is a Python Markdown parser with renderers and plugins. |
Librephotos · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57943 | Medium | 5.9 | — | 2026-06-29 | LibrePhotos before 1.0.0 contains a broken object level authorization vulnerability in the SetPhotosShared endpoint that allows authenticated users to grant themselves access to other users' private photos by bypassing ownership validation. |
Liftoff-sr · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-16013 | Medium | 5.3 | — | 2026-07-17 | A vulnerability has been found in liftoff-sr CIPster up to 632336d414ef708a542377c1aa8d6fdb7c70a760. |
Lima-vm · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53657 | High | 8.2 | — | 2026-07-10 | Lima launches Linux virtual machines, typically on macOS, for running containerd. |
Lmsys · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14890 | Critical | 9.1 | — | 2026-07-16 | SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain authentication or deserialization safeguards, allowing an attacker to provide a malicious pickle file t… |
Lookyloo · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63175 | — | — | — | 2026-07-15 | PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables. |
Lucee · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-29519 | High | 8.2 | — | 2026-07-10 | Lucee CFML Server versions across the 5.3.x, 6.1.x, 6.2.x, and 7.0.x release lines contain a reflected cross-site scripting vulnerability in URL path parsing that allows unauthenticated remote attackers to execute arbitrary JavaScript in a… |
Lustmored · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-3367 | Medium | 4.4 | — | 2026-07-11 | The Lockme OAuth2 calendars integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'App ID' setting in all versions up to, and including, 2.11.0. |
Maaassistantarknights · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55576 | — | — | — | 2026-07-15 | MaaAssistantArknights is a one-click tool for daily Arknights tasks. |
Mailerpress Team · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57410 | High | 8.8 | — | 2026-07-13 | Incorrect Privilege Assignment vulnerability in MailerPress Team MailerPress mailerpress allows Privilege Escalation.This issue affects MailerPress: from n/a through <= 2.0.2. |
Makafeli · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15521 | Medium | 5.3 | — | 2026-07-13 | A vulnerability was identified in makafeli n8n-workflow-builder up to 0.11.0. |
Manyfold3d · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46336 | High | 7.1 | — | 2026-07-16 | Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. |
Marcus (Aka @Msykes) · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57713 | High | 8.8 | — | 2026-07-13 | Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Object Injection.This issue affects Events Manager: from n/a through <= 7.3.6. |
Marimo-team · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54386 | Medium | 6.1 | — | 2026-06-17 | marimo before 0.23.9 contains a reflected cross-site scripting vulnerability in the notebook page that allows unauthenticated attackers to inject arbitrary JavaScript by exploiting improper escaping of single quotes in the file query param… |
Markdown-it · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48801 | High | 7.5 | — | 2026-07-14 | linkify-it is a links recognition library with full Unicode support. |
Marlinfirmware · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56111 | Critical | 9.1 | — | 2026-06-24 | Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESH_BED_LEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out… |
Masaakitanaka · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15335 | High | 7.5 | — | 2026-07-11 | The Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form Parameter (form<N>) in all versions up to, and including, 1.7.20 due to insufficient escaping on the user supplied parameter and lack of suffi… |
Maybe-finance · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63100 | Medium | 6.5 | — | 2026-07-17 | Maybe through 0.6.0 contains a missing authorization vulnerability that allows authenticated low-privilege member-role users to access and modify global hosting settings by exploiting unprotected show and update actions in the Settings::Ho… |
Mediawiki · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13707 | High | 7.6 | — | 2026-07-01 | Session fixation vulnerability in Wikimedia Foundation OAuth. |
Melograno · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14782 | Medium | 4.9 | — | 2026-07-16 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the Customer Import in all versions up to, and including, 2.4.3 due to insufficient escaping on the user supplied parameter a… |
Melograno Venture Studio · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57702 | Critical | 9.3 | — | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Melograno Venture Studio Amelia ameliabooking allows Blind SQL Injection.This issue affects Amelia: from n/a through <= 2.4.2. |
Merkulove · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57783 | Medium | 6.5 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in merkulove Speaker speaker allows Stored XSS.This issue affects Speaker: from n/a through <= 4.1.13. |
Metagauss · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57697 | High | 7.5 | — | 2026-07-13 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Password Recovery Exploitation.This issue affects ProfileGrid : from n/a through <= 5… |
Metaguru · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15804 | High | 8.8 | — | 2026-07-15 | The HCM developed by MetaGuru has a SQL Injection vulnerability. |
Metasoft 美特软件 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15514 | High | 7.3 | — | 2026-07-13 | A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. |
Mettle · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15191 | Medium | 6.3 | — | 2026-07-09 | A flaw has been found in mettle sendportal up to 3.0.1. |
Mikado-themes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57792 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclusion.This issue affects Dør: from n/a through <= 2.4.1. |
Milestone Systems · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-3014 | Critical | 9.1 | — | 2026-07-14 | Milestone has released a new version of XProtect® (and several cumulative patch updates) which fix security vulnerability in Management Server API. |
Minitool · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15475 | Medium | 5.3 | — | 2026-07-12 | A weakness has been identified in MiniTool Partition Wizard up to 13.6. |
Misp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62143 | — | — | — | 2026-07-13 | A Server-Side Request Forgery (SSRF) protection bypass existed in the html_to_markdown expansion module of misp-modules. |
Mitchell Bennis · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57382 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Reflected XSS.This issue affects Simple File List: from n/a through <= 6.3.8. |
Mohibshaikh · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62241 | Critical | 9.1 | — | 2026-07-17 | clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me') in auth.ts and ships it as the default in .env.example. |
Monsta Limited Of New Zealand · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-60105 | High | 8.6 | — | 2026-07-08 | Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteFile action caused by an incomplete IP blocklist check in the isBlockedIP() function, which fails to detect embedded IPv4 addresses within IPv4… |
Mura Software · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12257 | — | — | — | 2026-07-13 | Versions of Mura CMS prior to 10.0.712 contain a critical remote code execution (RCE) vulnerability. |
Mxchat · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13005 | Medium | 4.4 | — | 2026-07-16 | The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.2.10 due to insufficient input sanitization and output… |
Nandhiniwp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-1946 | Medium | 4.3 | — | 2026-07-10 | The GW AI Website Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gwaiwebu_gravitywrite_disconnect_handler() function in all versions up to, and including, 1.0.1. |
Nasa · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15352 | High | 7.5 | — | 2026-07-16 | A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS). |
Ncalc · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55254 | Medium | 4.8 | — | 2026-07-17 | NCalc is a fast, lightweight expression evaluator for .NET. |
Netcad Software Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8396 | High | 7.5 | — | 2026-07-17 | Improper restriction of XML external entity reference vulnerability in Netcad Software Inc. |
Netdata · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-71385 | Medium | 6.1 | — | 2026-07-02 | Netdata before 2.3.1 reflects the user-supplied love query parameter of the api/v2/ilove.svg and api/v3/ilove.svg endpoints verbatim into the generated SVG document (into a text element) without HTML or XML escaping, and serves the respons… |
Netrr · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57420 | Medium | 6.5 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Netrr Author Box WP Lens author-box-for-divi allows Stored XSS.This issue affects Author Box WP Lens: from n/a through <= 2.1.5. |
Neuml · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58449 | Critical | 9.8 | — | 2026-06-30 | txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs __import__ and getattr on the caller-supplied dotted path with no allowli… |
Nexcess · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57705 | High | 7.5 | — | 2026-07-13 | Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through <= 5.28.5. |
Nextendweb · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12385 | Medium | 4.3 | — | 2026-07-13 | The Smart Slider 3 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.1.37 via the 'keyword' parameter. |
Nezhahq · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59155 | — | — | — | 2026-07-10 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. |
Nicu_m · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14262 | High | 8.8 | — | 2026-07-11 | The Simple JWT Login – Allows you to use JWT on REST endpoints. |
Nilfs-dev · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55392 | Medium | 5.5 | — | 2026-06-18 | NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfs_sb_is_valid() function fails to validate s_log_block_size field in NILFS2 superblock before bit-shift operations. |
Nixos · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61828 | — | — | — | 2026-07-15 | Nixpkgs is a collection of software packages that can be installed with the Nix package manager. |
Nootheme · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57368 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through <= 4.8.5. |
Notifiarr · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58455 | Critical | 9.8 | — | 2026-07-02 | Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing exit() after an authentication redirect in loader.php combine… |
Nv-tlabs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53805 | Critical | 9.8 | — | 2026-06-17 | NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code execution vulnerability in the inference API server where the /request-inference and /seed-model endpoints deserialize raw HTTP request bodies using Pyth… |
Nvm-sh · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15921 | Low | 3.1 | — | 2026-07-15 | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. |
Oalders · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14741 | High | 7.5 | — | 2026-07-17 | HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date. |
Ollama · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15685 | High | 7.5 | — | 2026-07-13 | Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. |
Ongres · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53712 | — | — | — | 2026-07-17 | SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms. |
Open-telemetry · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48504 | Medium | 5.3 | — | 2026-07-17 | OpenTelemetry Rust is the Rust OpenTelemetry implementation. |
Open5gs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15720 | High | 8.6 | — | 2026-07-14 | In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of service. |
Openbmb · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58166 | Critical | 9.1 | — | 2026-06-30 | OpenBMB ChatDev through 2.2.0, fixed in commit 4fd4da6, contains a path traversal vulnerability that allows unauthenticated remote attackers to write or delete arbitrary files by supplying a malicious multipart filename in the file upload… |
Openmcdf · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45785 | Medium | 6.2 | — | 2026-07-17 | OpenMcdf is a fully .NET / C# library to manipulate Compound File Binary File Format files, also known as Structured Storage. |
Openplc · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14480 | Critical | 9.9 | — | 2026-07-10 | OpenPLC Runtime v3 contains an authenticated arbitrary file write vulnerability in the legacy web UI program‑upload workflow. |
Openresty · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55233 | High | 7.5 | — | 2026-07-10 | OpenResty is a high performance web platform. |
Opensuse · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-48863 | High | 7.5 | — | 2026-07-16 | A flaw was found in libsolv. |
Openziti · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58165 | High | 8.8 | — | 2026-06-30 | OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that allows authenticated non-admin identities with fine-grained enrollment management permissions to create enrollments for any identity, inclu… |
Osticket · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14871 | — | — | — | 2026-07-17 | osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization (BOLA) leading to Insecure Direct Object Reference (IDOR) in the AJAX ticket-management subsystem. |
Ottermind · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63307 | Medium | 6.5 | — | 2026-07-17 | Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api/connection/datasource/{id} endpoint. |
Pagekit · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57518 | High | 8.8 | — | 2026-06-26 | Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users with the 'user: manage users' permission to escalate privileges by assigning arbitrary custom roles to themselves due to missing authorization… |
Palo Alto Networks · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-0276 | High | 7.8 | — | 2026-07-09 | A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a locally authenticated user to perform actions as the root user. |
Papermark · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57957 | Medium | 4.7 | — | 2026-06-29 | Papermark through 0.22.0 contains a cross-origin resource sharing (CORS) misconfiguration vulnerability that allows unauthenticated remote attackers to perform credentialed cross-origin requests by exploiting the TUS-based viewer upload en… |
Parse-community · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61448 | — | — | — | 2026-07-11 | Parse Server is affected by a stored cross-site scripting (XSS) vulnerability in versions >= 9.0.0, < 9.10.0-alpha.2 and <= 8.6.83. |
Parseablehq · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56783 | Medium | 6.5 | — | 2026-06-29 | Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns webhook tokens and basic-auth credentials in cleartext due to commented-out secret-masking functionality. |
Passwordpusher · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59802 | High | 8.2 | — | 2026-07-08 | PasswordPusher before 2.8.1 accepts data URI schemes in URL push payloads due to insufficient validation in the valid_url function. |
Pathwaycom · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59094 | High | 7.5 | — | 2026-07-02 | Pathway through 0.31.1, fixed in commit d09722e, document store applies a caller-supplied glob pattern to indexed document paths using a hand-written recursive matcher that branches two ways on each ** token without memoization, giving exp… |
Peachpayments · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57408 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in peachpayments Peach Payments Gateway wc-peach-payments-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Peach Payments Gateway: from n/a through <= 4… |
Perforce · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14254 | — | — | — | 2026-07-16 | A race condition in the account lockout mechanism in Delphix Continous Data allowed the lockout threshold to be bypassed through concurrent authentication requests. |
Pglombardo · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61458 | High | 7.5 | — | 2026-07-13 | PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-specific rate limiting and per-push lockout mechanisms. |
Phil Kurth · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57378 | High | 7.5 | — | 2026-07-13 | Missing Authorization vulnerability in Phil Kurth Advanced Forms advanced-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Forms: from n/a through <= 1.9.3.7. |
Phoenixframework · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58228 | — | — | — | 2026-07-13 | Cross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. |
Photoprism · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57945 | Medium | 4.3 | — | 2026-06-29 | PhotoPrism before 260601-a7d098548 contains a broken access control vulnerability that allows authenticated non-admin users to modify other users' profile information by sending requests to arbitrary user endpoints. |
Phpmyfaq · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57996 | High | 8.8 | — | 2026-07-15 | phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in the user/add API endpoint that allows non-SuperAdmin administrators to create SuperAdmin accounts. |
Phppoet · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15324 | Medium | 4.4 | — | 2026-07-16 | The SysBasics Customize My Account for WooCommerce – Live My Account Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'row_type' parameter in all versions up to, and including, 4.4.14 due to insufficient… |
Pi-hole · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50130 | High | 8.8 | — | 2026-07-14 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. |
Picu · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57387 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in picu picu picu allows Stored XSS.This issue affects picu: from n/a through <= 3.5.1. |
Pig-mesh · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15512 | Medium | 6.3 | — | 2026-07-13 | A vulnerability was identified in pig-mesh Pig up to 3.9.2. |
Pipecat · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54695 | High | 7.5 | — | 2026-07-09 | Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. |
Ploudapp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14503 | Medium | 6.5 | — | 2026-07-17 | The pCloud WP Backup plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.3 via the wp2pcl_ajax_process_request_inner. |
Plugin Envision · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57780 | Medium | 6.5 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Envision Envision Page Builder envision-page-builder allows DOM-Based XSS.This issue affects Envision Page Builder: from n/a throu… |
Pluginsglpi · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11321 | Medium | 6.4 | — | 2026-07-10 | The DataInjection plugin for GLPI 2.15.6 (GLPI 11 builds) concatenates user-supplied CSV field values directly into SQL queries during CSV import, without parameterization or escaping, resulting in authenticated SQL injection. |
Postmagthemes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6801 | Medium | 5.3 | — | 2026-07-11 | The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the context_blog_modal_popup. |
Preferredai · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-43637 | Critical | 9.1 | — | 2026-07-15 | Cornac before 2.6.0 contains a path traversal (Tar Slip) vulnerability that allows attackers to write arbitrary files outside the intended cache directory by supplying a crafted TAR archive containing ../ sequences, absolute paths, or syml… |
Premailer · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53727 | High | 8.6 | — | 2026-07-17 | css_parser is a Ruby CSS parser. |
Presenton · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58446 | Medium | 6.5 | — | 2026-06-30 | Presenton before 0.8.8-beta bundles an MCP server that, on server/Docker deployments configured with session authentication (AUTH_USERNAME/AUTH_PASSWORD), is reachable unauthenticated at /mcp because the nginx front-end does not apply the… |
Presstigers · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57782 | Medium | 5.3 | — | 2026-07-13 | Missing Authorization vulnerability in PressTigers Universal Clocks universal-clocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Universal Clocks: from n/a through <= 1.2.0. |
Primefaces · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15538 | Medium | 6.3 | — | 2026-07-13 | A weakness has been identified in primefaces primereact up to 10.9.8. |
Printfriendly · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9738 | Medium | 4.4 | — | 2026-07-11 | The Print, PDF, Email by PrintFriendly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content_position_css' parameter in all versions up to, and including, 5.5.10 due to insufficient input sanitization and outpu… |
Priyanshuchaudhary · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12400 | Medium | 4.3 | — | 2026-07-10 | The FlowForms – Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.1 via the update_form due to missing validation on a user controlled key. |
Proftpd · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-35025 | High | 8.1 | — | 2026-06-24 | ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. |
Proliz Software Ltd. Co. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7189 | High | 7.5 | — | 2026-07-17 | Insertion of sensitive information into sent data vulnerability in Proliz Software Ltd. |
Property Hive · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57381 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows Reflected XSS.This issue affects PropertyHive: from n/a through <= 2.2.3. |
Protobufjs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59876 | Medium | 4.8 | — | 2026-07-08 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. |
Proxy &Amp; Vpn Blocker · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57399 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proxy & VPN Blocker Proxy & VPN Blocker proxy-vpn-blocker allows Stored XSS.This issue affects Proxy & VPN Blocker: from n/a… |
Psm Plugins · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57711 | Medium | 6.5 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PSM Plugins SupportCandy supportcandy allows Stored XSS.This issue affects SupportCandy: from n/a through <= 3.4.8. |
Purethemes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57786 | High | 8.8 | — | 2026-07-13 | Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScout-Core workscout-core allows Authentication Bypass.This issue affects WorkScout-Core: from n/a through <= 1.7.08. |
Pypa · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59890 | Medium | 6.1 | — | 2026-07-08 | setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. |
Qiling · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15476 | Medium | 5.3 | — | 2026-07-12 | A security vulnerability has been detected in QILING Disk Master 6.0.0.0. |
Qt · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12379 | — | — | — | 2026-07-16 | An Open Redirect vulnerability (CWE-601) exists in the OAuth/OIDC authentication implementation of the Axivion Dashboard. |
Rainafarai · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7620 | Medium | 4.3 | — | 2026-07-11 | The Notification for Telegram plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.5.1. |
Rd Station Conversas · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-4765 | — | — | — | 2026-07-13 | Stored Cross-Site Scripting (XSS) vulnerability in the RD Station Conversas chat. |
Realmag777 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57409 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows DOM-Based XSS.This issue affects Active P… |
Realtyna · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57811 | Critical | 10.0 | — | 2026-07-13 | Improper Control of Generation of Code ('Code Injection') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through… |
Redefiningtheweb · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7559 | Medium | 4.3 | — | 2026-07-11 | The Affilia – Affiliate Program & Referral Tracking for WordPress plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.3.3. |
Remorses · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63397 | Medium | 6.4 | — | 2026-07-16 | remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL schema that is passed to genql to inject arbitrary JavaScript or TypeScript. |
Reputeinfosystems · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15302 | Medium | 5.3 | — | 2026-07-10 | The ARMember plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.0.27 via the 'X-FILENAME' HTTP header. |
Richardperdaan · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8678 | Medium | 4.3 | — | 2026-07-11 | The MyParcel plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.25.1. |
Rizinorg · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45612 | Medium | 5.5 | — | 2026-07-16 | rz-libdemangle is a Rizin library for demangling symbols. |
Robin-w · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15010 | Medium | 6.4 | — | 2026-07-11 | The bbp Style Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.4.5 via the Topic Form Additional Fields feature. |
Room 34 Creative Services, Llc · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59516 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Reflected XSS.This issue affects ICS Calendar: from n/a through <= 12.1.1. |
Roxnor · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57406 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in Roxnor FundEngine wp-fundraising-donation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FundEngine: from n/a through <= 1.7.6. |
Rust-openssl · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45784 | High | 7.1 | — | 2026-07-17 | rust-openssl provides OpenSSL bindings for the Rust programming language. |
Rustcrypto · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50185 | Low | 3.3 | — | 2026-07-17 | RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compiler. |
Rustfs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62378 | Critical | 9.0 | — | 2026-07-15 | RustFS Console is a web management console for the RustFS distributed file system. |
Ruvnet · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58195 | High | 8.8 | — | 2026-07-17 | Agentic-Flow is an AI agent orchestration platform. |
Saadiqbal · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12738 | Medium | 4.3 | — | 2026-07-11 | The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0. |
Sagold · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-16008 | Medium | 6.3 | — | 2026-07-17 | A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. |
Salto · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11889 | Medium | 6.5 | — | 2026-07-16 | SALTO ProAccess Space software using the tenancy feature / logical partition is vulnerable to a privilege escalation attack that could allow an authorized attacker to access any space managed by the affected product. |
Samsung Mobile · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-21052 | — | — | — | 2026-07-10 | Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege. |
Samsung Open Source · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15551 | Medium | 5.5 | — | 2026-07-13 | Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. |
Sandboxie-plus · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45313 | High | 7.7 | — | 2026-07-15 | Sandboxie-Plus is an open source sandbox-based isolation software for Windows. |
Saurabhsharma · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57798 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SaurabhSharma NewsPlus Shortcodes newsplus-shortcodes allows PHP Local File Inclusion.This issue affects NewsPlus Shor… |
Sbi Securities Co.,ltd. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-42936 | High | 7.8 | — | 2026-07-15 | The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. |
Secureage · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15506 | High | 7.8 | — | 2026-07-12 | A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. |
Seppmail · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9592 | — | — | — | 2026-07-17 | SEPPmail Secure Email Gateway & SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay & hijack a user session in the GINA web portal, as the session token is disclosed inside the URL and a HTTP header. |
Sergey · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59515 | Critical | 9.3 | — | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sergey AIWU ai-copilot-content-generator allows Blind SQL Injection.This issue affects AIWU: from n/a through <= 1.5.4. |
Sergomanov · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15498 | High | 7.3 | — | 2026-07-12 | A vulnerability was identified in sergomanov SmartHomeAdatum up to cf495353d81b680675eb8d9aa14a318aa45ce12c. |
Servicenow · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6875 | — | — | — | 2026-07-13 | ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. |
Sesame Time · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15389 | — | — | — | 2026-07-14 | A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. |
Shapedplugin · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15652 | Medium | 6.4 | — | 2026-07-16 | The Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'align' Block Attribute in all versions up to, and including, 3.1.6 due to insufficient input sanitiz… |
Shapedplugin Llc · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59521 | High | 7.2 | — | 2026-07-13 | Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC Real Testimonials testimonial-free allows Object Injection.This issue affects Real Testimonials: from n/a through <= 3.1.15. |
Shimosyan · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56124 | High | 7.5 | — | 2026-06-29 | phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allows remote attackers to access the full contents of the uploaded-files database table by visiting any page of the application. |
Shivammathur · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46420 | Medium | 5.6 | — | 2026-07-17 | setup-php is a GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and tools. |
Simplesamlphp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49284 | High | 7.1 | — | 2026-07-17 | SimpleSAMLphp versions before 1.18.6 contain an information disclosure vulnerability. |
Sipeed · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15317 | Medium | 6.3 | — | 2026-07-10 | A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. |
Siteground · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57416 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/… |
Siyuan-note · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59855 | — | — | — | 2026-07-09 | SiYuan is an open-source personal knowledge management system. |
Skillable · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56877 | Medium | 6.3 | — | 2026-07-13 | The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token. |
Smackcoders · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13353 | High | 8.8 | — | 2026-07-11 | The WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.0.1 via the 'MappedFields' parameter. |
Solacewp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13250 | Medium | 5.3 | — | 2026-07-11 | The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.3. |
Sovlix · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57781 | Medium | 5.3 | — | 2026-07-13 | Missing Authorization vulnerability in Sovlix MeetingHub meetinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MeetingHub: from n/a through <= 1.25.10. |
Spacetime · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57693 | Medium | 6.5 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spacetime Ad Inserter ad-inserter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ad Inserter… |
Specterops · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59255 | High | 7.1 | — | 2026-07-15 | BloodHound through 9.4.0, fixed in commit 8f79035, contains a missing authorization vulnerability in the custom-nodes API endpoints that allows any authenticated user to modify the global graph schema. |
Spencermountain · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15699 | Medium | 6.3 | — | 2026-07-14 | A vulnerability was identified in spencermountain compromise up to 14.15.1. |
Spotfire · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8590 | — | — | — | 2026-07-14 | Vulnerability in Spotfire Spotfire Enterprise (Spotfire Server modules), Spotfire Spotfire Enterprise with External Consumers (Spotfire Server modules), Spotfire Spotfire on Kubernetes (Spotfire Server modules). |
Spring Security · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-22752 | Critical | 9.6 | — | 2026-07-16 | Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. |
Square · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45799 | High | 7.5 | — | 2026-07-17 | Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. |
Sri · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15747 | Critical | 9.1 | — | 2026-07-14 | Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle. |
Stanford · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54499 | High | 7.5 | — | 2026-07-08 | Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. |
Starboardsuite · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-13968 | Medium | 6.4 | — | 2026-07-11 | The Starboard Suite Reservation Calendars plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in the [starboard-suite-lightbox] shortcode in all versions up to, and including, 3.1.4 due to insufficien… |
Stefanprodan · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-43644 | Medium | 5.4 | — | 2026-05-14 | podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Conte… |
Stellarwp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14987 | Medium | 6.4 | — | 2026-07-16 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'twitter_message' Sequoia Template Setting in all versions up to, and including, 4.16.3 due to insufficient input s… |
Stirling · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-41580 | Medium | 6.1 | — | 2026-07-15 | Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. |
Strangebee · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63098 | Medium | 5.3 | — | 2026-07-17 | TheHive through 4.1.24 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration data by sending a GET request to the /api/status endpoint, which lacks authen… |
Stratonwebdesigners · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45336 | Critical | 10.0 | — | 2026-07-16 | HireFlow is a web-based interview management system for managing candidates, scheduling interviews, and tracking hiring progress. |
Subratamal · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12103 | Medium | 4.3 | — | 2026-07-11 | The Wallet for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.4. |
Supercleanse · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12426 | Medium | 5.3 | — | 2026-07-11 | The Members – Membership & User Role Editor Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.22 via the members_filter_protected_posts_for_rest. |
Surecart · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7655 | High | 8.1 | — | 2026-07-11 | The SureCart plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 4.2.3. |
Surflabtech · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-3552 | Medium | 4.3 | — | 2026-07-11 | The SurfLink - Ultimate Link Manager plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the ajax_import_410() function in all versions up to 2.6.0. |
Svgdotjs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15697 | Medium | 6.3 | — | 2026-07-14 | A vulnerability was found in svgdotjs svg.js up to 3.2.5. |
Taiga · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59097 | Medium | 5.3 | — | 2026-07-02 | Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue d… |
Tailcallhq · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57860 | High | 7.8 | — | 2026-07-17 | ForgeCode (tailcallhq/forgecode), an AI pair-programming CLI, automatically loads and executes the MCP servers defined in a repository's .mcp.json file on startup without user confirmation. |
Tangible · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57391 | Medium | 6.5 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tangible Loops & Logic tangible-loops-and-logic allows Stored XSS.This issue affects Loops & Logic: from n/a through <= 4.2.3. |
Tanstack · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15607 | Medium | 4.3 | — | 2026-07-13 | A vulnerability was detected in tanstack db up to 0.6.8. |
Techarohq · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-62314 | Medium | 5.8 | — | 2026-07-15 | Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. |
Tenable · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15265 | Critical | 9.1 | — | 2026-07-14 | A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution. |
Tenteeglobal · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15282 | Critical | 9.8 | — | 2026-07-10 | The Instant Appointment plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'insapp_upload_image_as_attachment' function in all versions up to, and including, 1.2. |
Thales Cert · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13014 | — | — | — | 2026-07-13 | A vulnerability in Thales CERT "Suspicious" application =< 1.3.4 allows a remote and unauthenticated attacker to execute arbitrary code and arbitrarily overwrite writable application files—including Python modules, configuration files, cro… |
Thehive-project · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63099 | Medium | 6.5 | — | 2026-07-17 | TheHive through 4.1.24 contains a broken object-level authorization vulnerability in the attachment download endpoints that allows any authenticated user to access attachments belonging to other organizations by supplying a content-hash id… |
Themeatelier · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15759 | Medium | 6.4 | — | 2026-07-17 | The ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributes in all versions up to, and including, 3.5.1… |
Themebeez · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57779 | Medium | 5.3 | — | 2026-07-13 | Missing Authorization vulnerability in themebeez Fascinate fascinate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fascinate: from n/a through <= 1.1.5. |
Themefusion · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12536 | Medium | 6.4 | — | 2026-07-13 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Module Title’ parameter in all versions up to, and including, 3.15.5 due to insufficient input sanitization and output escaping. |
Themegoods · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57770 | Critical | 9.8 | — | 2026-07-13 | Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Photography grandphotography allows Object Injection.This issue affects Grand Photography: from n/a through <= 5.7.8. |
Themeisle · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61970 | Medium | 4.9 | — | 2026-07-13 | Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail) auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image (Auto Post Thumbnail): from n/a through <… |
Themelexus · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57795 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themelexus Kitchor kitchor allows PHP Local File Inclusion.This issue affects Kitchor: from n/a through <= 1.4.3. |
Themelooks · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11802 | Medium | 5.3 | — | 2026-07-14 | The FoodBook Lite - Online Food Ordering System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.6. |
Themexpert.com · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58078 | — | — | — | 2026-07-16 | Joomla Extension - themexpert.com - Unauthenticated SQL injection in Quix Page Builder Pro < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an unauthenticated SQL injection. |
Threemammals · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58172 | Critical | 9.1 | — | 2026-06-30 | Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypass vulnerability that allows denied clients to circumvent IP-based access restrictions by sending WebSocket upgrade requests. |
Thrivedesk · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-1832 | Medium | 4.3 | — | 2026-07-11 | The ThriveDesk – Live Chat, AI Chatbot, Helpdesk & Knowledge Base plugin for WordPress is vulnerable to unauthorized cache deletion due to a missing capability check on the 'thrivedesk_clear_cache' AJAX action in all versions up to, and in… |
Tigroumeow · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-6784 | High | 8.8 | — | 2026-07-11 | The Code Engine plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 0.3.5 via the 'code-engine' shortcode. |
Timwhitlock · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15005 | High | 8.8 | — | 2026-07-16 | The Loco Translate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.5. |
Tmlmobilidade · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45325 | High | 8.2 | — | 2026-07-16 | Gestor de Oferta is a web application for managing mobility service offerings. |
Tokuhirom · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-3031 | Critical | 9.8 | — | 2026-07-16 | Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library. |
Tomdever · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15021 | Medium | 6.4 | — | 2026-07-16 | The wpForo Forum plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'location' Profile Field in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping. |
Topoteretes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58473 | Critical | 9.1 | — | 2026-07-07 | Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which performs… |
Trellix · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12588 | — | — | — | 2026-07-14 | An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. |
Tribulant Software · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57394 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Reflected XSS.This issue affects Newsletters: from n/a through <= 4.14. |
Trustindex · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11591 | Medium | 4.4 | — | 2026-07-11 | The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 13.3 due to insufficient input sanitization and output escaping. |
Tryghost · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59817 | Medium | 5.3 | — | 2026-07-09 | Ghost is a Node.js content management system. |
Tugcantopaloglu · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15522 | Medium | 5.3 | — | 2026-07-13 | A security flaw has been discovered in tugcantopaloglu godot-mcp 2.0.0. |
Txone Networks · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-41993 | Medium | 4.4 | — | 2026-07-17 | Improper Access Control vulnerability in the Removable Media Validation function of TXOne Networks products allows a local attacker with administrator privileges to bypass the file lockdown mechanism, resulting in unauthorized file transfe… |
Typemill · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-49133 | Medium | 6.5 | — | 2026-06-17 | Typemill before 2.24.0 contains a path traversal vulnerability that allows authenticated attackers with Author-level privileges to read arbitrary files outside the content directory by supplying traversal sequences in the path query parame… |
Typo3 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15305 | — | — | — | 2026-07-14 | Users were able to upload files with arbitrary MIME types to forms using FileUpload or ImageUpload elements with allowedMimeTypes configured. |
Ueberauth · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55954 | — | — | — | 2026-07-14 | Authentication Bypass by Spoofing vulnerability in ueberauth ueberauth_apple allows account takeover via unvalidated ID token claims. |
Ueberdosis · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47110 | Medium | 6.5 | — | 2026-06-24 | Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the attrs.href field set to an array instead of a string, causin… |
Umarbajwa · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12409 | Medium | 4.3 | — | 2026-07-16 | The Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.3.6. |
Uncannyowl · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15008 | High | 8.1 | — | 2026-07-16 | The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the fr_token function in all versions up to… |
Unitedover · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13741 | High | 8.8 | — | 2026-07-16 | The Digits: WordPress Mobile Number Signup and Login plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.1.0.5. |
Unlimited Elements · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57718 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected X… |
Usestrix · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15519 | Medium | 5.0 | — | 2026-07-13 | A vulnerability was found in usestrix strix up to 1.0.2. |
Vanhauser-thc · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56766 | High | 8.8 | — | 2026-06-25 | Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. |
Videousermanuals · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11898 | Medium | 4.4 | — | 2026-07-11 | The White Label CMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.7.12 due to insufficient input sanitization and output escaping. |
Vllm · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56340 | High | 8.8 | — | 2026-06-20 | vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. |
Vlthemes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57796 | High | 7.5 | — | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in VLThemes Leedo leedo allows PHP Local File Inclusion.This issue affects Leedo: from n/a through <= 3.0.0. |
Vnotex · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15505 | Low | 3.5 | — | 2026-07-12 | A weakness has been identified in vnotex vnote up to 3.20.1. |
Wago · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-4769 | Critical | 9.8 | — | 2026-07-13 | Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. |
Wavlink · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15513 | Medium | 6.3 | — | 2026-07-13 | A security flaw has been discovered in Wavlink WL-NU516U1 260515. |
Wcmp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12941 | Medium | 6.5 | — | 2026-07-16 | The MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions up to, and including, 5.0.9 due to insufficient escaping o… |
Weaviate · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59093 | High | 8.8 | — | 2026-07-02 | Weaviate before 1.38.0 does not verify that a principal performing an RBAC role assignment holds the permissions granted by the assigned role. |
Webaways · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-9017 | Medium | 5.3 | — | 2026-07-11 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 9.2.2. |
Webcodingplace · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57398 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace Real Estate Manager Pro real-estate-manager-pro allows Reflected XSS.This issue affects Real Estate Manager Pro: from n/a… |
Webfactory · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11426 | Medium | 6.5 | — | 2026-07-11 | The UnderConstructionPage PRO plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.76. |
Webp-sh · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53779 | High | 7.5 | — | 2026-06-22 | WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to read files outside the configured IMG_PATH directory by sending requests with percent-encoded backslashes (%5C) that… |
Wedevs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15349 | Medium | 4.3 | — | 2026-07-17 | The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.17.6. |
Wg-easy · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63089 | Critical | 9.3 | — | 2026-07-16 | WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation vulnerability that allows unauthenticated network attackers to recover WireGuard peer credentials by brute-forcing a k… |
Whyour · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55445 | — | — | — | 2026-07-15 | Qinglong is a timed task management platform supporting Python3, JavaScript, Shell, and Typescript. |
Windmill-labs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-47107 | High | 8.1 | — | 2026-05-19 | Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without read-write restrictions, allowing authenticated users to write arbitrary entries to… |
Winfsp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-7162 | High | 7.8 | — | 2026-07-13 | Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software. |
Wp Grid Builder · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13756 | High | 8.8 | — | 2026-07-11 | The WP Grid Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.3.3. |
Wp Inventory · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57772 | High | 8.5 | — | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Inventory WP Inventory Manager wp-inventory-manager allows Blind SQL Injection.This issue affects WP Inventory Manager: from n/a throu… |
Wpchill · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15395 | High | 7.2 | — | 2026-07-17 | The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'digitalSignature' Field Value in all versions up to, and including, 2.4.18 due to insufficient input sanitization… |
Wpdelicious · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15099 | Medium | 6.4 | — | 2026-07-16 | The Delicious Recipes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'steps' block attribute in versions up to, and including, 1.10.2. |
Wpdesk · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57402 | Medium | 6.5 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdesk Flexible Refund and Return Order for WooCommerce flexible-refund-and-return-order-for-woocommerce allows Stored XSS.This issue aff… |
Wpdevart · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57778 | Medium | 5.3 | — | 2026-07-13 | Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking calendar, Appointment Booking… |
Wpdeveloper · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57364 | Medium | 6.5 | — | 2026-07-13 | Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More better-payment allows Accessing Functionality Not Properly Constrained… |
Wpdevteam · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15155 | High | 8.8 | — | 2026-07-11 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Authenticated Account Takeover via Email Header Injection in all versions up to, and including, 6.6.10 This is due to insuffic… |
Wpmanageninja · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57715 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Fluent CRM fluent-crm allows Reflected XSS.This issue affects Fluent CRM: from n/a through <= 3.1.7. |
Wpmessiah · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-2354 | High | 8.8 | — | 2026-07-11 | The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a flawed file type validation bypass in the `upload_extension_files()` function in all versions up to, and including, 1.4.6. |
Wpovernight · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13116 | Medium | 4.3 | — | 2026-07-11 | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.14.0 via the generate_document_shortcode due to missing validation on a user co… |
Wppool · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57379 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects FormyChat: from n/a through <= 2.15.3. |
Wpswings · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10628 | Medium | 4.3 | — | 2026-07-11 | The Points and Rewards for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.10.0. |
Wpvibes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13378 | High | 7.2 | — | 2026-07-11 | The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form 7 Form Field in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escap… |
Wpwax · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-59518 | Critical | 9.8 | — | 2026-07-13 | Deserialization of Untrusted Data vulnerability in wpWax Directorist directorist allows Object Injection.This issue affects Directorist: from n/a through <= 8.8.2. |
Wpxpo · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57377 | Medium | 6.5 | — | 2026-07-13 | Missing Authorization vulnerability in WPXPO WowAddons product-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowAddons: from n/a through <= 1.6.8. |
Wpzoom · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57712 | High | 7.1 | — | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Portfolio wpzoom-portfolio allows Reflected XSS.This issue affects WPZOOM Portfolio: from n/a through <= 1.4.29. |
Wummel · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-29509 | Medium | 5.4 | — | 2026-06-26 | Patool before 4.0.5 contains a path traversal vulnerability in the safe_extract() function in patoolib/programs/py_tarfile.py when running on Python before 3.12, where the is_within_directory() helper uses os.path.commonprefix() for charac… |
X · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56002 | High | 8.5 | — | 2026-07-08 | A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server. |
Xhmikosr · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-53486 | Critical | 9.1 | — | 2026-07-14 | The decompress package for Node.js extracts archives. |
Xtreeme · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-3576 | High | 7.2 | — | 2026-07-11 | The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local File Inclusion in all versions up to, and including, 3.0. |
Xylus · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15727 | Medium | 4.9 | — | 2026-07-16 | The WP Bulk Delete plugin for WordPress is vulnerable to generic SQL Injection via the 'delete_user_roles' parameter in all versions up to, and including, 1.4.2 due to insufficient escaping on the user supplied parameter and lack of suffic… |
Yashbhalgat · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15531 | Medium | 5.3 | — | 2026-07-13 | A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to 82885e698295982504eb6a26d060a6b2473e3706. |
Yhirose · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54919 | High | 7.4 | — | 2026-07-10 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. |
Yo35 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13042 | High | 7.2 | — | 2026-07-16 | The RPB Chessboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 8.1.2 due to insufficient input sanitization and output escaping. |
Yt-dlp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55404 | High | 7.5 | — | 2026-07-08 | yt-dlp and youtube-dl are command-line audio/video downloaders. |
Yunaiv · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58448 | Medium | 6.5 | — | 2026-06-30 | yudao-cloud before 2026.06 contains a broken access control vulnerability in the BPM module that allows any authenticated user to access arbitrary process instance records by supplying a caller-controlled process-instance identifier to an… |
Yzhao062 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15529 | Medium | 6.3 | — | 2026-07-13 | A vulnerability was detected in yzhao062 pyod up to 3.6.1. |
Zalando · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-50197 | — | — | — | 2026-07-17 | Skipper is an HTTP router and reverse proxy for service composition. |
Zaproxy · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57527 | High | 8.8 | — | 2026-06-26 | Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a proxied web server to achieve arbitrary code execution by embedding a malicious serialized Java… |
Zcash · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54496 | Critical | 9.3 | — | 2026-07-17 | ZEBRA is a Zcash node written entirely in Rust. |
Zedeus · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56285 | High | 8.6 | — | 2026-06-29 | Nitter's /video media proxy endpoint fails to validate target URLs against Twitter/X domains and uses a hardcoded default HMAC key, allowing unauthenticated attackers to compute valid HMACs for arbitrary URLs. |
Zen-browser · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45150 | — | — | — | 2026-07-15 | Zen is a firefox-based browser. |
Zereight · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61462 | High | 8.6 | — | 2026-07-13 | mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. |
Zorem · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-57773 | High | 7.6 | — | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zorem Advanced Shipment Tracking for WooCommerce woo-advanced-shipment-tracking allows Blind SQL Injection.This issue affects Advanced Sh… |