CVE-2026 records published in June 2026

This page lists the 7,316 CVE-2026 records published in June 2026, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 25 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2026 list filters these records by severity or signal.

Critical
89312.2% of these records
Listed in CISA KEV
250.3% of these records
Reported exploited
160.2% of these records
Detection signal
781.1% of these records
Exploit code
2022.8% of these records
Actionable vendor fix
6,13183.8% of these records

Figures as of 2026-10-24 13:48 UTC. Records published in June 2026 have had from about four months to about five months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2026 records published in June 2026, newest first: records 1 to 1,000 of 7,316
CVE Summary CVSS EPSS Published Signals
CVE-2026-58450Invoice Ninja open redirect in client Portal Login via intended parameter5.3CNA v4.00.3%2026-06-30
CVE-2026-58449txtai unauthenticated remote code execution via unsafe reflection in API /reindex function parameter9.3CNA v4.01.4%2026-06-30
CVE-2026-58448yudao-cloud BPM module broken access control via process-instance API7.1CNA v4.00.4%2026-06-30Fix
CVE-2026-58447Invidious Cross-User Playlist Video Deletion via Missing Ownership Check7.1CNA v4.00.4%2026-06-30
CVE-2026-58446Presenton authentication bypass of Session Auth via Unprotected MCP endpoint6.9CNA v4.00.7%2026-06-30Fix
CVE-2026-58377JeecgBoot OpenAPI credential endpoints missing authorization8.6CNA v4.00.4%2026-06-30
CVE-2026-58376Dolibarr SQL injection via sqlfilters parameter in multiple REST API List endpoints7.2CNA v4.00.4%2026-06-30
CVE-2026-58375JimuReport Unauthenticated Report Export via /jmreport/auto/export8.7CNA v4.00.6%2026-06-30
CVE-2026-58374w1.fi hostapd off-by-one error7.1v3.10.3%2026-06-30Fix
CVE-2026-58373CVAT quality reports API missing authorization5.3CNA v4.00.3%2026-06-30Fix
CVE-2026-58372SeaweedFS Cross-Bucket Object Deletion via DeleteObjects Request-Body Keys7.2CNA v4.00.9%2026-06-30Fix
CVE-2026-58371SeaweedFS Cross-Origin information disclosure via Unvalidated JSONP callback parameter2.3CNA v4.00.3%2026-06-30Fix
CVE-2026-58370Woodpecker GitLab Approval Gate Bypass via Spoofable Commit Author Name9.2CNA v4.00.7%2026-06-30Fix
CVE-2026-58369Woodpecker organization lookup endpoint null pointer dereference6.9CNA v4.00.6%2026-06-30Fix
CVE-2026-58302LinuxCNC path traversal8.4CNA v3.10.2%2026-06-30Fix
CVE-2026-58176RuoYi-Vue-Plus missing authorization on Workflow Task Management endpoints7.1CNA v4.00.5%2026-06-30
CVE-2026-58174nesquena hermes-webui Hermes WebUI Cross-Profile authorization bypass6.0CNA v4.00.5%2026-06-30Fix
CVE-2026-58173Vibe-Trading path traversal via Persistent Memory Type6.0CNA v4.00.4%2026-06-30Fix
CVE-2026-58172Ocelot IP Allow/Block List Bypass for WebSocket Upgrade requests9.3CNA v4.00.6%2026-06-30
CVE-2026-58171Vibe-Trading path traversal via Swarm Run Identifier2.3CNA v4.00.3%2026-06-30Fix
CVE-2026-58170Vibe-Trading path traversal in Proposal Identifier allows Forging Live Trading Mandates7.2CNA v4.00.6%2026-06-30Fix
CVE-2026-58169HKUDS Vibe-Trading local API server authentication bypass7.7CNA v4.00.4%2026-06-30Fix
CVE-2026-58168DeepTutor insecure default Grants Unrestricted MCP Tool Access to Non-Admin Users7.7CNA v4.00.6%2026-06-30Fix
CVE-2026-58167Nightingale Datasource credential disclosure to Low-Privilege Users7.1CNA v4.00.4%2026-06-30Fix
CVE-2026-58166OpenBMB ChatDev file upload handler path traversal8.8CNA v4.00.9%2026-06-30
CVE-2026-58165OpenZiti privilege escalation to Admin via Unauthorized Enrollment Creation8.7CNA v4.00.3%2026-06-30
CVE-2026-58138Orkes Conductor Unauthenticated RCE via GraalVM Script Evaluators9.3CNA v4.014.7%2026-06-30Reported exploitedNucleiExploit codeFix
CVE-2026-58116LLaMA-Factory remote code execution via WebUI Model Path8.8NVD v3.10.9%2026-06-30
CVE-2026-58016GLib: Integer underflow in gio/gdbusintrospection.c via g_dbus_node_info_new_for_xml9.1NVD v3.10.5%2026-06-30Fix
CVE-2026-58015GLib: Path traversal in GLib/gio/gdbusauthmechanismsha1.c7.5NVD v3.10.8%2026-06-30Fix
CVE-2026-58014GLib: Off-by-one error in GLib/gkeyfile.c via g_key_file_get_locale_string_list8.6NVD v3.10.5%2026-06-30Fix
CVE-2026-58013GLib: Buffer over-read in GLib/giochannel.c via g_io_channel_read_line_backend8.2NVD v3.10.5%2026-06-30Fix
CVE-2026-58012GLib: Buffer over-read in g_regex_replace via GLib/gregex.c:string_append and g_utf8_next_char8.2NVD v3.10.5%2026-06-30Fix
CVE-2026-58011GLib: Out-of-bounds read in GLib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime7.5NVD v3.10.5%2026-06-30Fix
CVE-2026-58010GLib: Buffer over-read in GLib/gvariant-serialiser.c via gvs_tuple_is_normal8.2NVD v3.10.5%2026-06-30Fix
CVE-2026-57995phpMyFAQ privilege escalation8.7CNA v4.00.4%2026-06-30Fix
CVE-2026-57585MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error7.5CNA v3.10.5%2026-06-30Fix
CVE-2026-57204pypdf content stream parser denial of service6.9CNA v4.00.4%2026-06-30Fix
CVE-2026-57082SANKO Net::BitTorrent MSE key exchange insufficient randomness5.9CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-57081Net::BitTorrent versions for Perl allow remote memory exhaustion via deeply nested bencoded input7.5CISA ADP v3.10.5%2026-06-30Fix
CVE-2026-57080Net::BitTorrent versions for Perl allow remote memory exhaustion7.5CISA ADP v3.10.5%2026-06-30Fix
CVE-2026-57079SANKO Net::BitTorrent peer metadata handling path traversal5.3CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-56809Ricoh Multiple laser printers and MFPs which implement Ricoh Web Image Monitor cross-site scripting5.1CNA v4.00.3%2026-06-30
CVE-2026-56808AVTECH SECURITY DGM3103SCT OS command injection8.6CNA v4.02.5%2026-06-30
CVE-2026-56777n8n AST Validator Bypass in Python Code Node5.3CNA v4.00.3%2026-06-30Fix
CVE-2026-56700Grav multiple remote code execution vulnerabilities via Unsafe Unserialize and command injection9.3CNA v4.02.5%2026-06-30Fix
CVE-2026-56415OS command injection in StoneFly Storage Concentrator10.0CNA v4.04.4%2026-06-30Fix
CVE-2026-56413OS command injection in StoneFly Storage Concentrator10.0CNA v4.04.2%2026-06-30Fix
CVE-2026-56399open-webui open WebUI server-side request forgery5.3CNA v4.00.5%2026-06-30Fix
CVE-2026-56377ImageMagick Policy Bypass via Incorrect Path Validation4.8CNA v4.00.2%2026-06-30Fix
CVE-2026-56369ImageMagick information disclosure via AES-CTR nonce reuse in PasskeyEncipherImage6.3CNA v4.00.2%2026-06-30Fix
CVE-2026-56365ImageMagick memory leak in PNG Encoder via MNG Image Writing5.3v3.10.3%2026-06-30Fix
CVE-2026-56364ImageMagick memory leak in LoadOpenCLDeviceBenchmark via Malformed XML1.8CNA v4.00.2%2026-06-30Fix
CVE-2026-56363ImageMagick division by zero in Binomial Kernel Processing4.8CNA v4.00.1%2026-06-30Fix
CVE-2026-56361ImageMagick heap buffer overflow via off-by-one in Morphology Processing7.1v3.10.1%2026-06-30Fix
CVE-2026-56356n8n stored cross-site scripting in Chat Trigger Node Custom CSS field5.1CNA v4.00.3%2026-06-30Fix
CVE-2026-56350n8n SSO Enforcement Bypass via API7.7v3.10.4%2026-06-30Fix
CVE-2026-56334Capgo Missing UPDATE RLS Policy for Build Status Persistence5.3CNA v4.00.3%2026-06-30Fix
CVE-2026-56333Capgo Server-Side Validation Bypass via Direct Browser-Side Organization Security Settings Updates5.3CNA v4.00.3%2026-06-30Fix
CVE-2026-56331Capgo improper error handling in Accept Invitation endpoint via Invalid Magic String6.9CNA v4.00.3%2026-06-30Fix
CVE-2026-56328Capgo Integrity issue in Release Routing via multiple Public Channels7.1CNA v4.00.3%2026-06-30Fix
CVE-2026-56327Capgo Unauthenticated Organization Existence Oracle via public.invite_user_to_org RPC6.9CNA v4.00.4%2026-06-30Fix
CVE-2026-56320Capgo Org/App Scope Mismatch in Device Creation endpoint7.1CNA v4.00.3%2026-06-30Fix
CVE-2026-56318Capgo information disclosure via /private/validate_password_compliance endpoint6.9CNA v4.00.4%2026-06-30Fix
CVE-2026-56300Capgo Unauthenticated API Key Validity and Permission Oracle via RPC functions8.7CNA v4.00.5%2026-06-30Fix
CVE-2026-56286Capgo Account Deletion without Password Confirmation7.0CNA v4.00.5%2026-06-30Fix
CVE-2026-56278Flowise session hijacking via Weak Default Express Session Secret9.3CNA v4.00.5%2026-06-30Fix
CVE-2026-56277Flowise Hard-coded CORS Wildcard in TTS endpoint6.5v3.10.2%2026-06-30Fix
CVE-2026-56264Crawl4AI arbitrary JavaScript Execution via /execute_js endpoint6.1NVD v3.10.5%2026-06-30Fix
CVE-2026-56249Capgo Unauthorized Channel Overwrite and Ownership takeover via POST /channel Name Collision7.2CNA v4.00.4%2026-06-30Fix
CVE-2026-56247Capgo privilege escalation via Cross-Scope RBAC Role Assignment8.7CNA v4.00.4%2026-06-30Fix
CVE-2026-56233Capgo SSRF and privilege escalation via path traversal in Builder Upload Proxy8.7CNA v4.00.6%2026-06-30Fix
CVE-2026-56230Capgo Broken Object Level Authorization via x-limited-key-id header8.7CNA v4.00.5%2026-06-30Fix
CVE-2026-56224Capgo login CSRF and session fixation via URL Query parameters5.1CNA v4.00.3%2026-06-30Fix
CVE-2026-56219Capgo Unauthenticated RBAC Bindings and email disclosure8.7CNA v4.00.4%2026-06-30Fix
CVE-2026-56137Gotcha Gotcha Games RPG MAKER MV OS command injection8.4CNA v4.01.1%2026-06-30
CVE-2026-55721SQL injection in StoneFly Storage Concentrator9.2CNA v4.00.5%2026-06-30Fix
CVE-2026-55223c3p0 exposes a deserialization sink via JDBC DataSource bean properties6.3CNA v4.00.5%2026-06-30Fix
CVE-2026-54696Ruby JSON: JSON generator heap buffer overflow when streaming to an IO3.7CNA v3.10.4%2026-06-30Fix
CVE-2026-54673electron-updater HTTP redirect handler information disclosure8.2CNA v4.00.4%2026-06-30Fix
CVE-2026-54672Electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`7.8CNA v3.10.2%2026-06-30Fix
CVE-2026-54475Apache ActiveMQ Broker missing authorization7.5CISA ADP v3.10.6%2026-06-30Fix
CVE-2026-53917Apache ActiveMQ excessive memory allocation7.5CISA ADP v3.10.7%2026-06-30Fix
CVE-2026-53916Apache ActiveMQ excessive memory allocation7.5CISA ADP v3.10.7%2026-06-30Fix
CVE-2026-53692Weak hashing algorithm in Redeight CMS5.9CNA v4.00.1%2026-06-30
CVE-2026-53691Remote code execution in Redeight CMS8.6CNA v4.00.7%2026-06-30
CVE-2026-53690SQL injection in Redeight CMS9.3CNA v4.00.5%2026-06-30
CVE-2026-53433Denial of service in fzf7.5v3.10.4%2026-06-30Fix
CVE-2026-53432Integer overflow in fzf7.5v3.10.4%2026-06-30Fix
CVE-2026-52868OFFIS DCMTK Toolkit path traversal8.8CNA v4.00.5%2026-06-30Fix
CVE-2026-52760Apache ActiveMQ, Apache ActiveMQ Web Console: Stored XSS6.1CISA ADP v3.10.7%2026-06-30Fix
CVE-2026-52198UTT nv518G nv518GV3v3.2.7-210919-161313 buffer overflow7.5CISA ADP v3.10.6%2026-06-30
CVE-2026-52197UTT nv518G denial of service7.5CISA ADP v3.10.6%2026-06-30
CVE-2026-52196UTT nv518G nv518GV3v3.2.7-210919-161313 buffer overflow7.5CISA ADP v3.10.6%2026-06-30
CVE-2026-52195UTT nv518G nv518GV3v3.2.7-210919-161313 buffer overflow7.5CISA ADP v3.10.6%2026-06-30
CVE-2026-52193UTT nv518G nv518GV3v3.2.7-210919-161313 buffer overflow7.5CISA ADP v3.10.6%2026-06-30
CVE-2026-50750Apache ActiveMQ Broker denial of service7.5CISA ADP v3.10.7%2026-06-30Fix
CVE-2026-50734Apache ActiveMQ Client excessive memory allocation7.5CISA ADP v3.10.7%2026-06-30Fix
CVE-2026-50254OFFIS DCMTK Toolkit missing release of memory after effective lifetime8.7CNA v4.00.6%2026-06-30Fix
CVE-2026-50110StoneFly Storage Concentrator hard-coded credentials9.3CNA v4.00.2%2026-06-30Fix
CVE-2026-50040Cross-site scripting in StoneFly Storage Concentrator5.1CNA v4.00.3%2026-06-30Fix
CVE-2026-50003OFFIS DCMTK Toolkit path traversal9.3CNA v4.00.7%2026-06-30Fix
CVE-2026-49877Apache ActiveMQ: Authenticated web users retain admin access by default in the Web console8.1CISA ADP v3.10.5%2026-06-30Fix
CVE-2026-49451Microsoft OpenAPI.NET Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing7.5CNA v3.11.2%2026-06-30Fix
CVE-2026-49434Apache ActiveMQ Broker improper input validation7.5CISA ADP v3.10.6%2026-06-30Fix
CVE-2026-49432Apache ActiveMQ improper input validation7.5CISA ADP v3.10.8%2026-06-30Fix
CVE-2026-48315Adobe ColdFusion improper input validation9.3CNA v3.11.0%2026-06-30Fix
CVE-2026-48314Adobe ColdFusion improper limitation of a pathname to a restricted directory (path traversal)6.5CNA v3.10.6%2026-06-30Fix
CVE-2026-48313Adobe ColdFusion improper limitation of a pathname to a restricted directory (path traversal)9.3CNA v3.13.0%2026-06-30Reported exploitedNucleiEmerging ThreatsKCVFix
CVE-2026-48307Adobe ColdFusion cross-site scripting (reflected XSS)8.8CNA v3.10.6%2026-06-30Fix
CVE-2026-48286Adobe Campaign Classic (ACC) incorrect authorization10.0CNA v3.11.2%2026-06-30Fix
CVE-2026-48285Adobe ColdFusion server-side request forgery (SSRF)8.6CNA v3.10.8%2026-06-30Fix
CVE-2026-48283Adobe ColdFusion unrestricted upload of file with dangerous type10.0CNA v3.11.3%2026-06-30KCVFix
CVE-2026-48282Adobe ColdFusion path traversal10.0CNA v3.142.4%2026-06-30KEVNucleiExploit codeFix
CVE-2026-48281Adobe ColdFusion improper input validation10.0CNA v3.11.4%2026-06-30Fix
CVE-2026-48277Adobe ColdFusion improper input validation10.0CNA v3.11.3%2026-06-30Fix
CVE-2026-48276Adobe ColdFusion unrestricted upload of file with dangerous type10.0CNA v3.11.3%2026-06-30Fix
CVE-2026-48192Siemens Mendix Studio Pro code injection6.8CNA v4.00.3%2026-06-30Fix
CVE-2026-45822SamVerschueren decode-uri-component algorithmic complexity6.6CNA v4.00.5%2026-06-30Fix
CVE-2026-44949SUSE Rancher unauthenticated namespace creation and RBAC injection7.0CNA v4.00.4%2026-06-30Fix
CVE-2026-44948Path traversal in Rancher Fleet ImageScan GitRepo Path handler5.3CNA v4.00.4%2026-06-30Fix
CVE-2026-44947Stale PSA ClusterRoleBinding Persists after RoleTemplate Downgrade in Rancher6.9CNA v4.00.4%2026-06-30Fix
CVE-2026-44946SAML Authentication Replay in Rancher9.5CNA v4.00.4%2026-06-30Fix
CVE-2026-44628OFFIS DCMTK Toolkit type confusion8.7CNA v4.00.6%2026-06-30Fix
CVE-2026-41053Over-inclusive team membership expansion in GitHub App authentication provider for Rancher8.8CNA v3.10.5%2026-06-30Fix
CVE-2026-37106DokuWiki user registration function vulnerability9.8CISA ADP v3.10.7%2026-06-30
CVE-2026-35505OFFIS DCMTK Toolkit missing release of memory after effective lifetime8.7CNA v4.00.6%2026-06-30Fix
CVE-2026-35098Improper restriction of excessive authentication attempts in KTM System e-BOK6.9CNA v4.00.6%2026-06-30Fix
CVE-2026-35097Weak password requirements in KTM System e-BOK6.9CNA v4.00.4%2026-06-30Fix
CVE-2026-35096Cross-site request forgery (CSRF) in KTM System e-BOK5.1CNA v4.00.2%2026-06-30Fix
CVE-2026-35095Session fixation in KTM System e-BOK4.8CNA v4.00.2%2026-06-30Fix
CVE-2026-28322SolarWinds Database Performance Analyzer stored cross-site scripting5.6CNA v3.10.4%2026-06-30Fix
CVE-2026-27957Coolify: Authenticated RCE via command injection in CA certificate management feature8.8CNA v3.11.2%2026-06-30Fix
CVE-2026-27956Coolify: Cross-team application domain enumeration via domains_by_server endpoint4.3CNA v3.10.3%2026-06-30Fix
CVE-2026-27955Coolify: Command injection via Single-Quote Breakout in `executeInDocker`6.6CNA v3.10.4%2026-06-30Fix
CVE-2026-27883Coolify: IDOR in Deployment API Cross-Team Deployment information disclosure5.0CNA v3.10.4%2026-06-30Fix
CVE-2026-27882Coolify: Timing Attack in GitLab Webhook Token Validation4.8CNA v3.10.2%2026-06-30Fix
CVE-2026-27881Coolify deployments API insecure direct object reference5.0CNA v3.10.3%2026-06-30Fix
CVE-2026-14241Mozilla memory safety bugs fixed in Firefox9.8v3.10.4%2026-06-30Fix
CVE-2026-14209Red Hat Keycloak admin UI brute-force-user endpoint insecure direct object reference4.3CNA v3.10.4%2026-06-30Fix
CVE-2026-14178openGauss-server-7.0.0-RC2 openGauss存在非法内存访问导致DoS漏洞5.9CNA v3.10.4%2026-06-30
CVE-2026-14164Red Hat Enterprise Linux 10 libarchive: Double free vulnerability in rar5 decompression logic7.5CNA v3.10.8%2026-06-30Fix
CVE-2026-14162Advantech|Hospital Quering Management missing authentication9.3CNA v4.00.6%2026-06-30Fix
CVE-2026-14161Advantech|Hospital Queuing Management sensitive data exposure8.7CNA v4.00.5%2026-06-30Fix
CVE-2026-14160Samsung Open Source Escargot time-of-check time-of-use race condition5.9CNA v3.10.1%2026-06-30
CVE-2026-14156Google Chrome StorageAccessAPI insufficient policy enforcement6.5v3.10.3%2026-06-30Fix
CVE-2026-14155Google Chrome StorageAccessAPI insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14154Google Chrome DevTools inappropriate implementation4.8CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14153Google Chrome Glic inappropriate implementation5.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14152Google Chrome ANGLE out-of-bounds read9.6CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14151Google Chrome AI inappropriate implementation8.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14150Google Chrome spoofing5.4v3.10.2%2026-06-30Fix
CVE-2026-14149Google Chrome Audio use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-14148Google Chrome CSS type confusion6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14147Google Chrome CSS inappropriate implementation6.1CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14146Google Chrome CSS inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14145Google Chrome CSS inappropriate implementation6.1CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14144Google Chrome Views incorrect security UI4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14143Google Chrome Passwords incorrect security UI4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14142Google Chrome extensions inappropriate implementation5.4v3.10.2%2026-06-30Fix
CVE-2026-14141Google Chrome Document Picture-in-Picture incorrect security UI4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14140Google Chrome spoofing4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14139Google Chrome TabStrip inappropriate implementation4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14138Google Chrome WebAppInstalls inappropriate implementation4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14137Google Chrome spoofing4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14136Google Chrome UI misrepresentation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14135Google Chrome spoofing5.4v3.10.2%2026-06-30Fix
CVE-2026-14134Google Chrome Autofill inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14133Google Chrome race condition4.2v3.10.2%2026-06-30Fix
CVE-2026-14132Google Chrome WebXR inappropriate implementation5.4v3.10.2%2026-06-30Fix
CVE-2026-14131Google Chrome spoofing5.4v3.10.2%2026-06-30Fix
CVE-2026-14130Google Chrome Omnibox incorrect security UI4.3v3.10.2%2026-06-30Fix
CVE-2026-14129Google Chrome PreviewTab inappropriate implementation4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14128Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14127Google Chrome Printing inappropriate implementation4.3v3.10.2%2026-06-30Fix
CVE-2026-14126Google Chrome UI incorrect security UI4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14125Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14124Google Chrome CredentialProvider inappropriate implementation7.8CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-14123Google Chrome Chrome for iOS incorrect security UI4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14122Google Chrome improper input validation8.1CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14121Google Chrome Chromoting use-after-free9.8CISA ADP v3.10.5%2026-06-30Fix
CVE-2026-14120Google Chrome DevTools inappropriate implementation9.6v3.10.3%2026-06-30Fix
CVE-2026-14119Google Chrome Bluetooth type confusion6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14118Google Chrome DevTools improper input validation6.5v3.10.3%2026-06-30Fix
CVE-2026-14117Google Chrome improper input validation5.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14116Google Chrome improper input validation4.3v3.10.3%2026-06-30Fix
CVE-2026-14115Google Chrome privilege escalation7.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14114Google Chrome WebAppInstalls inappropriate implementation7.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14113Google Chrome Updater use-after-free9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14112Google Chrome Enterprise inappropriate implementation5.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14111Google Chrome WebProtect use-after-free8.1CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-14110Google Chrome DarkMode inappropriate implementation4.3v3.10.2%2026-06-30Fix
CVE-2026-14109Google Chrome Mojo insufficient policy enforcement9.6v3.10.3%2026-06-30Fix
CVE-2026-14108Google Chrome PDFium use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-14107Google Chrome Scheduling use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-14106Google Chrome sandbox escape9.6v3.10.3%2026-06-30Fix
CVE-2026-14105Google Chrome Speech insufficient policy enforcement4.3NVD v3.10.2%2026-06-30Fix
CVE-2026-14104Google Chrome arbitrary code execution9.8v3.10.5%2026-06-30Fix
CVE-2026-14103Google Chrome SSL use-after-free6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14102Google Chrome Passwords use-after-free8.8v3.10.3%2026-06-30Fix
CVE-2026-14101Google Chrome Sandbox insufficient policy enforcement9.6v3.10.3%2026-06-30Fix
CVE-2026-14100Google Chrome NetworkCache improper input validation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14099Google Chrome Chrome for iOS use-after-free8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14098Google Chrome CSS inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14097Google Chrome WebAppInstalls inappropriate implementation9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14096Google Chrome Input inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14095Google Chrome Browser insufficient policy enforcement9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14094Google Chrome Installer use-after-free7.8CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-14093Google Chrome Cast use-after-free9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14092Google Chrome Privacy insufficient policy enforcement4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14091Google Chrome DevTools use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-14090Google Chrome out-of-bounds read8.1NVD v3.10.3%2026-06-30Fix
CVE-2026-14089Google Chrome spoofing4.3v3.10.2%2026-06-30Fix
CVE-2026-14088Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14087Google Chrome WebNN heap-based buffer overflow8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-14086Google Chrome HID insufficient policy enforcement8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-14085Google Chrome CSS side-channel information leak6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14084Google Chrome improper input validation8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14083Google Chrome improper input validation6.1CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14082Google Chrome race condition6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14081Google Chrome DevTools insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14080Google Chrome improper input validation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14079Google Chrome Network insufficient policy enforcement4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14078Google Chrome privilege escalation8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14077Google Chrome Select inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14076Google Chrome Network insufficient policy enforcement4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14075Google Chrome Chrome for iOS insufficient policy enforcement4.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14074Google Chrome WebAuthentication side-channel information leak6.5CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-14073Google Chrome improper input validation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14072Google Chrome SplitView inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14071Google Chrome WebAudio side-channel information leak6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14070Google Chrome WebNN integer overflow6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14069Google Chrome WebNN integer overflow6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14068Google Chrome Omnibox inappropriate implementation6.1CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14067Google Chrome Chrome for iOS use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-14066Google Chrome improper input validation4.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14065Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14064Google Chrome PageInfo use-after-free7.5CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-14063Google Chrome Chromecast out-of-bounds read5.7CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-14062Google Chrome Views inappropriate implementation5.9CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14061Google Chrome Dawn inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14060Google Chrome privilege escalation7.8CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-14059Google Chrome Related-Website-Sets insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14058Google Chrome parser insufficient policy enforcement4.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14057Google Chrome FedCM inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14056Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14055Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14054Google Chrome Network insufficient policy enforcement4.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14053Google Chrome extensions insufficient policy enforcement4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14052Google Chrome FileSystem insufficient policy enforcement4.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14051Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14050Google Chrome Passwords insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14049Google Chrome GPU inappropriate implementation5.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14048Google Chrome Chromecast use-after-free6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14047Google Chrome extensions insufficient policy enforcement4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14046Google Chrome CustomTabs inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14045Google Chrome improper input validation4.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14044Google Chrome ANGLE use-after-free9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14043Google Chrome GetUserMedia use-after-free9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14042Google Chrome Isolated Web Apps inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14041Google Chrome Serial insufficient policy enforcement8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14040Google Chrome BrowserTag use-after-free8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14039Google Chrome GetUserMedia insufficient policy enforcement4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14038Google Chrome sandbox escape9.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14037Google Chrome GPU insufficient policy enforcement9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14036Google Chrome Bluetooth insufficient policy enforcement8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14035Google Chrome Bluetooth insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14034Google Chrome WebXR inappropriate implementation4.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14033Google Chrome Media insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14032Google Chrome Bluetooth use-after-free8.1CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14031Google Chrome File Input inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14030Google Chrome SplitView inappropriate implementation4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14028Google Chrome Chrome for iOS incorrect security UI4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14027Google Chrome SignIn use-after-free8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14026Google Chrome SplitView incorrect security UI4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14025Google Chrome Views use-after-free8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14024Google Chrome Ozone use-after-free8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14023Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14022Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14021Google Chrome StorageAccessAPI insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14020Google Chrome spoofing4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14019Google Chrome Passwords inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14018Google Chrome Updater use-after-free7.8CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-14017Google Chrome Navigation inappropriate implementation9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14016Google Chrome SVG inappropriate implementation6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14015Google Chrome race condition6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14014Google Chrome Paint inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14013Google Chrome SVG inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14012Google Chrome CSS side-channel information leak5.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14011Google Chrome SurfaceCapture out-of-bounds read8.1CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14010Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14009Google Chrome Passwords inappropriate implementation8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14008Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14007Google Chrome PermissionsPolicy insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14006Google Chrome Navigation use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-14005Google Chrome Omnibox use-after-free8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14004Google Chrome CSS inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14003Google Chrome extensions insufficient policy enforcement4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14002Google Chrome Geolocation inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-14001Google Chrome Network inappropriate implementation6.1CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-14000Google Chrome XML inappropriate implementation6.1CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13999Google Chrome spoofing4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13998Google Chrome File Input incorrect security UI4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13997Google Chrome extensions incorrect security UI4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13996Google Chrome Permissions inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13995Google Chrome spoofing4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13994Google Chrome Credential Management inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13993Google Chrome WebAppInstalls incorrect security UI4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13992Google Chrome UI inappropriate implementation4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13991Google Chrome spoofing4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13990Google Chrome spoofing6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13989Google Chrome PageInfo inappropriate implementation5.3v3.10.3%2026-06-30Fix
CVE-2026-13988Google Chrome Paint inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13987Google Chrome Mobile incorrect security UI4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13986Google Chrome Media UI inappropriate implementation4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13985Google Chrome MediaCapture inappropriate implementation6.5v3.10.3%2026-06-30Fix
CVE-2026-13984Google Chrome TabStrip incorrect security UI4.3v3.10.2%2026-06-30Fix
CVE-2026-13983Google Chrome Chrome for iOS inappropriate implementation4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13982Google Chrome Passwords incorrect security UI3.1CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13981Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13980Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13979Google Chrome Paint inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13978Google Chrome PageInfo insufficient policy enforcement4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13977Google Chrome HTMLParser inappropriate implementation5.4CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13976Google Chrome Storage improper input validation5.8CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13975Google Chrome ANGLE out-of-bounds read5.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13974Google Chrome Safe Browsing integer overflow8.1CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13973Google Chrome UI inappropriate implementation4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13972Google Chrome Paint inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13971Google Chrome uninitialized variable use5.3CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13970Google Chrome uninitialized variable use5.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13969Google Chrome uninitialized variable use5.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13968Google Chrome arbitrary code execution7.5CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13967Google Chrome V8 heap-based buffer overflow8.8CISA ADP v3.10.5%2026-06-30Fix
CVE-2026-13966Google Chrome History inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13965Google Chrome Oilpan use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13964Google Chrome WebView insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13963Google Chrome DevTools inappropriate implementation3.1CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13962Google Chrome PDF improper input validation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13961Google Chrome improper input validation5.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13960Google Chrome Passwords inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13959Google Chrome improper input validation4.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13958Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13957Google Chrome extensions incorrect security UI4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13956Google Chrome PageInfo incorrect security UI4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13955Google Chrome spoofing3.3CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-13954Google Chrome XML insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13953Google Chrome SplitView inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13952Google Chrome PerformanceAPIs inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13951Google Chrome USB insufficient policy enforcement8.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13950Google Chrome uninitialized variable use5.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13949Google Chrome Payments insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13948Google Chrome extensions insufficient policy enforcement3.1CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13947Google Chrome uninitialized variable use5.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13946Google Chrome ScriptInjections inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13945Google Chrome extensions insufficient policy enforcement3.1CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13944Google Chrome DataTransfer inappropriate implementation3.1CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13943Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13942Google Chrome Video Capture inappropriate implementation3.3CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-13941Google Chrome SiteSettings inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13940Google Chrome uninitialized variable use6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13939Google Chrome spoofing3.1CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13938Google Chrome Fonts integer overflow8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13937Google Chrome Passwords insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13936Google Chrome Passwords inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13935Google Chrome ComputePressure side-channel information leak6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13934Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-06-30Exploit codeFix
CVE-2026-13933Google Chrome Passwords insufficient policy enforcement5.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13932Google Chrome Sharing inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13931Google Chrome Media inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13930Google Chrome Actor insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13929Google Chrome DevTools insufficient policy enforcement5.5CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-13928Google Chrome privilege escalation8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13927Google Chrome privilege escalation7.8CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-13926Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13925Google Chrome Downloads inappropriate implementation7.5CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13924Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13923Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13922Google Chrome Paint side-channel information leak6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13921Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13920Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13919Google Chrome extensions insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13918Google Chrome Chrome for iOS use-after-free8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13917Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13916Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13915Google Chrome Chrome for iOS use-after-free8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13914Google Chrome Passwords inappropriate implementation5.5CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-13913Google Chrome Autofill insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13912Google Chrome Safe Browsing inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13911Google Chrome Spellcheck insufficient policy enforcement5.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13910Google Chrome WebXR insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13909Google Chrome DevTools insufficient policy enforcement9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13908Google Chrome improper input validation6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13907Google Chrome iOSWeb inappropriate implementation4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13906Google Chrome Codecs out-of-bounds read6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13905Google Chrome race condition4.2CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-13904Google Chrome Safe Browsing inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13903Google Chrome Bluetooth insufficient policy enforcement8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13902Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13901Google Chrome Serial insufficient policy enforcement9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13900Google Chrome Chromecast inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13899Google Chrome HTML use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13898Google Chrome Cast Receiver use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13897Google Chrome Chromecast insufficient policy enforcement8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13896Google Chrome Glic insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13895Google Chrome Autofill inappropriate implementation4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13894Google Chrome Network insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13893Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13892Google Chrome Chrome for iOS inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13891Google Chrome privilege escalation7.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13890Google Chrome Chromecast out-of-bounds read5.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13889Google Chrome WebAuthentication side-channel information leak6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13888Google Chrome extensions use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13887Google Chrome NFC inappropriate implementation6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13886Google Chrome Isolated Web Apps insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13885Google Chrome Skia use-after-free8.8CISA ADP v3.10.5%2026-06-30Fix
CVE-2026-13884Google Chrome Chromecast integer overflow8.8CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13883Google Chrome ANGLE type confusion9.6CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13882Google Chrome race condition9.6CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13881Google Chrome WebAppInstalls inappropriate implementation6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13880Google Chrome USB use-after-free9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13879Google Chrome Bluetooth use-after-free6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13878Google Chrome Bluetooth use-after-free9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13877Google Chrome improper input validation5.3CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13876Google Chrome Network inappropriate implementation6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13875Google Chrome improper input validation5.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13874Google Chrome race condition5.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13873Google Chrome Layout out-of-bounds read6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13872Google Chrome sandbox escape9.1CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13871Google Chrome GuestView insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13870Google Chrome WebView use-after-free8.8CISA ADP v3.10.5%2026-06-30Fix
CVE-2026-13869Google Chrome Device use-after-free9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13868Google Chrome Network inappropriate implementation6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13867Google Chrome Geolocation inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13866Google Chrome Input inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13865Google Chrome spoofing4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13864Google Chrome WebHID insufficient policy enforcement8.1CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13863Google Chrome privilege escalation7.8CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-13862Google Chrome Web Authentication insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13861Google Chrome Core use-after-free9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13860Google Chrome Autofill incorrect security UI4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13859Google Chrome ANGLE inappropriate implementation9.6CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13858Google Chrome FFmpeg out-of-bounds read6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13857Google Chrome Geometry inappropriate implementation4.2CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13856Google Chrome privilege escalation7.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13855Google Chrome Ozone use-after-free7.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13854Google Chrome Ozone use-after-free9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13853Google Chrome Journeys use-after-free9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13852Google Chrome improper input validation9.1CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13851Google Chrome improper input validation9.1CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13850Google Chrome arbitrary code execution8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13849Google Chrome sandbox escape8.6CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-13848Google Chrome forms use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13847Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13846Google Chrome USB use-after-free9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13845Google Chrome DOM use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13844Google Chrome Updater use-after-free7.8CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-13843Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13842Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13841Google Chrome Skia integer overflow8.3CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13840Google Chrome Canvas insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13839Google Chrome CSS inappropriate implementation6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13838Google Chrome CSS inappropriate implementation6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13837Google Chrome CSS inappropriate implementation4.3CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13836Google Chrome CSS inappropriate implementation6.1CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13835Google Chrome XML inappropriate implementation8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13834Google Chrome sandbox escape8.3CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13833Google Chrome uninitialized variable use6.5CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13832Google Chrome Headless use-after-free8.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13831Google Chrome GPU out-of-bounds read7.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13830Google Chrome Chromoting use-after-free8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13829Google Chrome sandbox escape8.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13828Google Chrome Enterprise inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13827Google Chrome Updater use-after-free7.8CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-13826Google Chrome Autofill inappropriate implementation6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13825Google Chrome uninitialized variable use8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13824Google Chrome extensions insufficient policy enforcement7.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13823Google Chrome Glic use-after-free8.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13822Google Chrome extensions inappropriate implementation6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13821Google Chrome Canvas use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13820Google Chrome Skia out-of-bounds read6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13819Google Chrome ANGLE out-of-bounds read8.1CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13818Google Chrome Passwords inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13817Google Chrome sandbox escape8.8CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13816Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13815Google Chrome Blink use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13814Google Chrome Views use-after-free7.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13813Google Chrome Chrome for iOS insufficient policy enforcement8.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13812Google Chrome improper input validation4.7CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13811Google Chrome IME use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13810Google Chrome Input inappropriate implementation6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13809Google Chrome Safe Browsing side-channel information leak6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13808Google Chrome Chrome for iOS improper input validation4.6CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-13807Google Chrome Import use-after-free7.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13806Google Chrome improper input validation8.1CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13805Google Chrome GFX use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13804Google Chrome Chromecast use-after-free8.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13803Google Chrome Chrome Tabs type confusion8.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13802Google Chrome Views use-after-free7.5CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13801Google Chrome Chromecast integer overflow8.3CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13800Google Chrome Updater inappropriate implementation7.8CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-13799Google Chrome QUIC use-after-free8.1CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13798Google Chrome Chromecast heap-based buffer overflow9.6CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13797Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13796Google Chrome Chromecast integer overflow9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13795Google Chrome Chrome for iOS insufficient policy enforcement6.5v3.10.3%2026-06-30Fix
CVE-2026-13794Google Chrome arbitrary code execution7.5CISA ADP v3.10.5%2026-06-30Fix
CVE-2026-13793Google Chrome SVG insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-13792Google Chrome Touchbar use-after-free9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13791Google Chrome arbitrary code execution8.1CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13790Google Chrome Scroll side-channel information leak6.5CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13789Google Chrome GPU use-after-free9.6CISA ADP v3.10.3%2026-06-30Fix
CVE-2026-13788Google Chrome Fullscreen use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13787Google Chrome Chromoting use-after-free8.1CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13786Google Chrome Ozone use-after-free8.8CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13785Google Chrome Bluetooth use-after-free9.6v3.10.3%2026-06-30Fix
CVE-2026-13784Google Chrome Views use-after-free8.8NVD v3.10.3%2026-06-30Fix
CVE-2026-13783Google Chrome Views use-after-free8.8NVD v3.10.3%2026-06-30Fix
CVE-2026-13782Google Chrome Browser use-after-free10.0v3.10.3%2026-06-30Fix
CVE-2026-13781Google Chrome sandbox escape9.6v3.10.3%2026-06-30Fix
CVE-2026-13780Google Chrome sandbox escape9.6v3.10.3%2026-06-30Fix
CVE-2026-13779Google Chrome Chromoting use-after-free8.1CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-13778Google Chrome WebUSB use-after-free7.8CISA ADP v3.10.1%2026-06-30Fix
CVE-2026-13777Google Chrome improper input validation8.8v3.10.3%2026-06-30Fix
CVE-2026-13776Google Chrome Dawn type confusion9.8v3.10.3%2026-06-30Fix
CVE-2026-13775Google Chrome GPU use-after-free9.8v3.10.3%2026-06-30Fix
CVE-2026-13774Google Chrome extensions use-after-free8.1v3.10.3%2026-06-30Fix
CVE-2026-13773IBM WebSphere eXtreme Scale CORBA ORB transport server-side request forgery6.0CNA v3.16.1%2026-06-30Fix
CVE-2026-13772IBM WebSphere eXtreme Scale's OQL is affected by remote code execution7.5CNA v3.10.5%2026-06-30Fix
CVE-2026-13766DBIx::QuickORM versions for Perl allow SQL injection via unquoted SQL identifiers9.8CISA ADP v3.10.5%2026-06-30Fix
CVE-2026-13759IBM WebSphere eXtreme Scale ObjectInputStream deserialization deserialization of untrusted data7.5CNA v3.10.5%2026-06-30Fix
CVE-2026-13474NetScaler ADC denial of service via malformed HTTP/2 requests8.7CNA v4.00.6%2026-06-30Fix
CVE-2026-13455PostgreSQL Anonymizer: Unrestricted function can leak the secret salt4.3CNA v3.10.2%2026-06-30Fix
CVE-2026-13449XXE attack in IBM Business Automation Manager Open Editions7.6CNA v3.10.4%2026-06-30Fix
CVE-2026-13316Foreman: Ssrf to cloud metada service through unvalidated test_url parameters in Foreman config4.4CNA v3.10.2%2026-06-30
CVE-2026-13207Frangoteam FUXA SCADA/HMI authentication bypass by spoofing8.7CNA v4.00.6%2026-06-30Fix
CVE-2026-13149juliangruber brace-expansion algorithmic complexity7.7CNA v4.00.4%2026-06-30Fix
CVE-2026-12819DVP-12SE missing authentication and Unauthorized Write access9.3CNA v4.00.5%2026-06-30
CVE-2026-12818DVP-12SE exposure of sensitive information9.3CNA v4.00.4%2026-06-30
CVE-2026-12610Fedora sssd PAM responder use-after-free6.4CNA v3.10.1%2026-06-30Fix
CVE-2026-12578DTMSoft deserialization of untrusted data8.4CNA v4.00.4%2026-06-30
CVE-2026-12560Editorial Rating WordPress plugin stored cross-site scripting4.4CNA v3.10.4%2026-06-30Fix
CVE-2026-12388Keycloak-broker: Keycloak: Privilege escalation to realm administrator6.5CNA v3.10.4%2026-06-30
CVE-2026-12349Premium Addons for KingComposer WordPress plugin unauthorized access5.3CNA v3.10.4%2026-06-30
CVE-2026-12240Export User Data WordPress plugin PHP object injection to arbitrary file deletion8.0CNA v3.10.6%2026-06-30
CVE-2026-12114Team Members WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-06-30Fix
CVE-2026-12086IBM UrbanCode Deploy log files information disclosure6.2CNA v3.10.1%2026-06-30Fix
CVE-2026-12085IBM UrbanCode Deploy API responses information disclosure6.5CNA v3.10.4%2026-06-30Fix
CVE-2026-12084IBM UCD permissive cross-domain policy5.4CNA v3.10.3%2026-06-30Fix
CVE-2026-12076SQL injection in Raytha CMS9.3CNA v4.00.5%2026-06-30
CVE-2026-12073ProfileGrid WordPress plugin privilege escalation9.8CNA v3.10.5%2026-06-30Fix
CVE-2026-11906IBM Db2 improper quantity validation6.5CNA v3.10.4%2026-06-30Fix
CVE-2026-11806IBM WebSphere Application Server Liberty is affected by a an arbitrary file read7.2CNA v3.10.5%2026-06-30Fix
CVE-2026-11714IBM WebSphere Application Server Liberty is affected by an authorization bypass8.5CNA v3.10.4%2026-06-30Fix
CVE-2026-11712IBM WebSphere Application Server is affected by a cross-site scripting9.3CNA v3.10.4%2026-06-30Fix
CVE-2026-11708IBM WebSphere Application Server is affected by a cross-site scripting9.3CNA v3.10.4%2026-06-30Fix
CVE-2026-11595IBM WebSphere Application Server is affected by a path traversal4.3CNA v3.10.8%2026-06-30Fix
CVE-2026-11594IBM WebSphere Application Server is affected by multiple cross-site scripting8.5CNA v3.10.3%2026-06-30Fix
CVE-2026-11590WP Support Plus Responsive Ticket System WordPress plugin unauthenticated SQL injection8.6CISA ADP v3.10.4%2026-06-30
CVE-2026-11589WP Support Plus Responsive Ticket System WordPress plugin unauthenticated stored XSS via file upload8.8CISA ADP v3.10.5%2026-06-30
CVE-2026-11581Kali Forms WordPress plugin Contributor+ stored XSS via form field Caption5.9CISA ADP v3.10.2%2026-06-30Fix
CVE-2026-11546IBM WebSphere Application Server Liberty is affected by a server-side request forgery7.1CNA v3.10.4%2026-06-30Fix
CVE-2026-11541IBM inconsistent interpretation of HTTP requests in CICS Transaction Gateway for Multiplatforms7.4CNA v3.10.4%2026-06-30Fix
CVE-2026-11367PixMagix WordPress plugin authenticated (Author+) path traversal in layers[].id parameter6.5CNA v3.10.8%2026-06-30Fix
CVE-2026-10817NetScaler ADC insufficient input validation leading to memory overread6.9CNA v4.00.6%2026-06-30Exploit codeFix
CVE-2026-10816NetScaler ADC arbitrary file read (Unauthenticated)7.1CNA v4.00.6%2026-06-30Fix
CVE-2026-10763Hitachi Energy PROMOD V Digipede server communication vulnerability7.0CNA v4.00.4%2026-06-30Fix
CVE-2026-10655Zephyr SNTP client socket close use-after-free6.5CNA v3.10.4%2026-06-30Fix
CVE-2026-10654zephyrproject zephyr A race condition3.1CNA v3.10.2%2026-06-30Fix
CVE-2026-10653Zephyr net_buf reference counting double free6.4CNA v3.10.4%2026-06-30Fix
CVE-2026-10652Out-of-bounds read in Zephyr DNS resolver TXT/SRV record parsing (unvalidated `rdlength`)4.8CNA v3.10.4%2026-06-30Fix
CVE-2026-10585GitHub Enterprise Server Discussion Q&A titles stored cross-site scripting6.3CNA v4.00.3%2026-06-30Fix
CVE-2026-10564IBM SSRF vulnerability in Langflow OSS Legacy Components Bypasses Protection8.2CNA v3.10.3%2026-06-30Fix
CVE-2026-10562Unauthenticated open redirect vulnerability on TP-Link Archer AX20 Web interface5.9CNA v4.00.5%2026-06-30Fix
CVE-2026-10560IBM unauthenticated access to Private Flow Build Events and Cancellation in Langflow OSS8.2CNA v3.10.5%2026-06-30Fix
CVE-2026-10546IBM DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL component7.1CNA v3.10.2%2026-06-30Fix
CVE-2026-10513Webmention WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-06-30Fix
CVE-2026-10140IBM Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode subsystem9.6CNA v3.10.4%2026-06-30Fix
CVE-2026-10134IBM Langflow OSS Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows10.0CNA v3.10.6%2026-06-30MetasploitExploit codeFix
CVE-2026-10129IBM SSRF via HTTP Redirect Following in Langflow API request component8.5CNA v3.10.3%2026-06-30Fix
CVE-2026-10109IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling9.8CNA v3.10.9%2026-06-30Fix
CVE-2026-9836IBM DataStage Flow Designer application is affected by an information disclosure3.5CNA v3.10.4%2026-06-30Fix
CVE-2026-9711EventON - WordPress Virtual Event Calendar plugin unauthenticated blind SQL injection9.8CNA v3.10.5%2026-06-30
CVE-2026-9576Fluent Booking WordPress plugin Calendar Manager+ sensitive information disclosure4.9CISA ADP v3.10.4%2026-06-30Fix
CVE-2026-9263Zephyr Bluetooth Controller ISOAL out-of-bounds read6.5CNA v3.10.3%2026-06-30Fix
CVE-2026-9132GitHub Enterprise Server Copilot pull request diff summary endpoint missing authorization6.0CNA v4.00.4%2026-06-30Fix
CVE-2026-9106GitHub Enterprise Server OAuth consent screen UI misrepresentation4.8CNA v4.00.4%2026-06-30Fix
CVE-2026-9002IBM WebSphere eXtremes Scale is affected by uncontrolled resource consumption when XDF is enabled6.5CNA v3.10.3%2026-06-30Fix
CVE-2026-8944Plugin for Google Analytics by IO technologies WordPress plugin cross-site request forgery4.3CNA v3.10.1%2026-06-30
CVE-2026-8864HP Fan Control App potential escalation of privilege7.3CNA v4.00.1%2026-06-30Fix
CVE-2026-8655NetScaler ADC and Gateway memory corruption8.8CNA v4.00.6%2026-06-30Fix
CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway improper restriction of operations within the bounds of a memory buffer8.8CNA v4.01.0%2026-06-30KEVEmerging ThreatsExploit codeFix
CVE-2026-8451NetScaler ADC insufficient input validation leading to memory overread8.8CNA v4.00.5%2026-06-30Reported exploitedExploit codeFix
CVE-2026-8403Stored XSS in Exagate's SYSGUARD 60016.1CNA v3.10.3%2026-06-30Fix
CVE-2026-8402SQLi in Exagate's SYSGUARD 60019.8CNA v3.10.5%2026-06-30Fix
CVE-2026-8141Ajax Load More - Filters WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-06-30Fix
CVE-2026-7874IBM Langflow OSS weak cryptographic Key Derivation Exposed All Stored Credentials9.1CNA v3.10.3%2026-06-30Fix
CVE-2026-7873IBM Langflow OSS code injection vulnerability in Code Validation endpoint9.9CNA v3.10.5%2026-06-30MetasploitExploit codeFix
CVE-2026-7871IBM Langflow OSS insecure deserialization in Redis Cache Backend9.8CNA v3.10.7%2026-06-30Fix
CVE-2026-7803IBM Langflow OSS Flow Validation Bypass via Empty Component Type field9.8CNA v3.10.6%2026-06-30Fix
CVE-2026-7663IBM Langflow streamable MCP transport endpoint authorization bypass9.1CNA v3.10.5%2026-06-30Fix
CVE-2026-6954Intermark IT WebControl CMS Intermark IT's cross-site scripting5.1CNA v4.00.4%2026-06-30
CVE-2026-6953Intermark IT WebControl CMS Intermark IT's HTML injection5.1CNA v4.00.4%2026-06-30
CVE-2026-6556@fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed plugins9.1CNA v3.10.5%2026-06-30Fix
CVE-2026-4629Keycloak: Keycloak: Privilege escalation through hard-coded role mapper injection6.5CNA v3.10.5%2026-06-30Fix
CVE-2026-4360Python CPython tarfile.extract doesn't fully respect filter parameter2.0CNA v4.00.5%2026-06-30Fix
CVE-2026-3602IBM App Connect Enterprise and Integration Bus SQL injection4.7CNA v3.10.3%2026-06-30Fix
CVE-2026-58000luci-proto-openvpn command injection via cl_meta parameter in generateKey8.7CNA v4.02.7%2026-06-29
CVE-2026-57999luci-app-tailscale-community command injection via tailscale.do_login RPC7.7CNA v4.02.3%2026-06-29
CVE-2026-57997Strapi users-permissions JWT Algorithm Confusion via Missing Algorithm Configuration5.4v3.10.2%2026-06-29Fix
CVE-2026-57966Spice-vdagent: Path traversal in file transfer via unsanitized filename4.4CNA v3.10.1%2026-06-29Fix
CVE-2026-57965Spice-vdagent: Integer overflow in udscs_write leading to heap buffer overflow5.1CNA v3.10.1%2026-06-29Fix
CVE-2026-57960Hi.Events Unauthenticated Attendee PII Exposure via Check-in List short_id8.3CNA v4.00.4%2026-06-29
CVE-2026-57959Hi.Events Promo Code Max-Usage Bypass via Asynchronous Job race condition8.2CNA v4.00.3%2026-06-29
CVE-2026-57958Mixpost reflected XSS via OAuth Callback Error parameter5.1CNA v4.00.3%2026-06-29
CVE-2026-57957Papermark CORS Misconfiguration in Viewer upload endpoint2.3CNA v4.00.4%2026-06-29
CVE-2026-57956SigNoz Cross-Organization insecure direct object reference in Alert Rules6.1CNA v4.00.4%2026-06-29Fix
CVE-2026-57955SigNoz SQL injection in Alert History endpoints via Rule ID parameter8.3CNA v4.00.3%2026-06-29
CVE-2026-57954Elide permission bypass in Sort Expression Validation5.3CNA v4.00.3%2026-06-29
CVE-2026-57953Mythic Unauthorized Automation Workflow Modification via eventing_import_automatic_webhook endpoint5.3CNA v4.00.4%2026-06-29Fix
CVE-2026-57952Mythic Unauthorized C2 Profile Configuration Access via Unverified Payload UUID6.5v3.10.3%2026-06-29Fix
CVE-2026-57951Mythic Broken Permission Filter in payload_build_step Table7.1CNA v4.00.4%2026-06-29Fix
CVE-2026-57950ruoyi-vue-pro Incorrect Permission Namespace in ErpSaleOrderController8.6CNA v4.00.4%2026-06-29
CVE-2026-57949ruoyi-vue-pro missing authorization in CRM Follow-up Record GET endpoint7.1CNA v4.00.4%2026-06-29
CVE-2026-57948Pinpoint Insecure Session Cookie attributes in pinpointJwt7.6CNA v4.00.2%2026-06-29
CVE-2026-57947Pinpoint server-side request forgery via Alarm Webhook Registration6.3CNA v4.00.3%2026-06-29
CVE-2026-57946Invidious Private Playlist Disclosure via Unauthenticated RSS Feed endpoint6.3CNA v4.00.4%2026-06-29Fix
CVE-2026-57945PhotoPrism user profile endpoint insecure direct object reference5.3CNA v4.00.3%2026-06-29Fix
CVE-2026-57943LibrePhotos insecure direct object reference in SetPhotosShared endpoint6.0CNA v4.00.3%2026-06-29Fix
CVE-2026-57942LibreTranslate IP spoofing via X-Forwarded-For header6.9CNA v4.00.3%2026-06-29
CVE-2026-57919Matrix42 Empirum PBackupVSS named pipe privilege escalation7.8CNA v3.10.2%2026-06-29
CVE-2026-57676Simple User Avatar WordPress plugin insecure direct object references (IDOR)4.3CNA v3.10.3%2026-06-29Fix
CVE-2026-57498Coolify Livewire deployment endpoints insecure direct object reference9.6CNA v3.10.4%2026-06-29Fix
CVE-2026-57346Embed Privacy WordPress plugin arbitrary file deletion7.1CNA v3.10.4%2026-06-29Fix
CVE-2026-57341Colissimo Officiel: Méthodes de livraison pour WooCommerce insecure direct object reference6.5CNA v3.10.3%2026-06-29Fix
CVE-2026-57340Japanized For WooCommerce WordPress plugin broken access control6.5CNA v3.10.3%2026-06-29Fix
CVE-2026-57339Business Directory WordPress plugin broken access control6.6CNA v3.10.3%2026-06-29Fix
CVE-2026-57338ARForms WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-29Fix
CVE-2026-57337Landing Page Builder WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-29Fix
CVE-2026-57336Jobify WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-29Fix
CVE-2026-57335Ads by WPQuads WordPress plugin broken access control6.5CNA v3.10.3%2026-06-29Fix
CVE-2026-57334WP User Frontend WordPress plugin broken access control6.5CNA v3.10.3%2026-06-29Fix
CVE-2026-57333Link Whisper Free WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-29Fix
CVE-2026-57332Wallet System for WooCommerce WordPress plugin broken access control7.1CNA v3.10.3%2026-06-29Fix
CVE-2026-57331Paid Videochat Turnkey Site WordPress plugin arbitrary file deletion9.9CNA v3.10.5%2026-06-29Fix
CVE-2026-57330MasterStudy LMS WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-29Fix
CVE-2026-57329WooCommerce Designer Pro WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-29Fix
CVE-2026-57328Business Directory WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-29Fix
CVE-2026-57327MainWP WordPress plugin broken access control6.3CNA v3.10.3%2026-06-29Fix
CVE-2026-57326Business Directory WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2026-06-29Fix
CVE-2026-57320BEAR WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-29Fix
CVE-2026-56783Parseable Cleartext credential exposure in Notification Target API7.1CNA v4.00.5%2026-06-29Fix
CVE-2026-56782Gorse Unauthenticated Database Dump and Restore via /API/dump and /API/restore endpoints9.3CNA v4.03.6%2026-06-29NucleiExploit codeFix
CVE-2026-56781Teable Unauthenticated Hidden Field Disclosure via Projection Parameter Override6.9CNA v4.00.4%2026-06-29Fix
CVE-2026-56780Modoboa insecure direct object reference in Account Password Change API7.7CNA v4.00.5%2026-06-29Fix
CVE-2026-56457HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information4.3CNA v3.10.3%2026-06-29Fix
CVE-2026-56290Joomlack Page Builder improper access control9.8NVD v3.130.9%2026-06-29KEVNucleiExploit codeFix
CVE-2026-56285Nitter server-side request forgery in /video Media Proxy endpoint7.7CNA v4.00.5%2026-06-29
CVE-2026-56124phpUploader Unauthenticated Database Exposure via index model8.7CNA v4.00.6%2026-06-29Fix
CVE-2026-56018GTERMARS JavaScript::Minifier::XS minify function memory leak7.5CISA ADP v3.10.6%2026-06-29Fix
CVE-2026-56017GTERMARS JavaScript::Minifier::XS token disambiguator null pointer dereference7.5CISA ADP v3.10.5%2026-06-29Fix
CVE-2026-55957Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind7.3CISA ADP v3.12.9%2026-06-29Exploit codeFix
CVE-2026-55956Apache Tomcat: Security constraints for default servlet ignored method6.5CISA ADP v3.10.7%2026-06-29Fix
CVE-2026-55955Apache Tomcat: EncryptInterceptor not protected against replay attacks6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-55844Home Assistant iOS companion app information disclosure7.5CNA v3.10.3%2026-06-29Fix
CVE-2026-55607anthropics claude-code Claude Code: Sandbox escape7.7CNA v4.00.7%2026-06-29Fix
CVE-2026-55276Apache Tomcat: Logged effective web.xml is incomplete9.1CISA ADP v3.10.6%2026-06-29Fix
CVE-2026-54889Unsanitized URL schemes in MDEx Quill Delta output allow javascript: Injection (XSS)5.1CNA v4.00.5%2026-06-29Fix
CVE-2026-54888Uncontrolled recursion over deeply nested Markdown crashes the BEAM in mdex6.9CNA v4.00.2%2026-06-29Fix
CVE-2026-54371attr Symlink Traversal privilege escalation via getfattr/setfattr8.4CNA v4.00.2%2026-06-29Fix
CVE-2026-54370acl TOCTOU Symlink Traversal via getfacl/setfacl/chacl7.2CNA v4.00.1%2026-06-29Fix
CVE-2026-54369acl Symlink Traversal privilege escalation via libacl functions8.4CNA v4.00.2%2026-06-29Fix
CVE-2026-53434Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector9.1CISA ADP v3.10.6%2026-06-29Fix
CVE-2026-53429Unbounded native memory leak in mdex escaped-tag rendering enables unauthenticated denial of service6.9CNA v4.00.2%2026-06-29Fix
CVE-2026-53428Unbounded memory allocation in highlight_lines range expansion in mdex6.9CNA v4.00.2%2026-06-29Fix
CVE-2026-53427Cross-site scripting in MDEx via unescaped highlight_lines_class code-fence attribute2.3CNA v4.00.7%2026-06-29Fix
CVE-2026-53426Atom-table exhaustion denial of service via JSON parse_document in MDEx8.2CNA v4.00.2%2026-06-29Fix
CVE-2026-53404Apache Tomcat: Bad ornext processing in RewriteValve7.3CISA ADP v3.10.7%2026-06-29Fix
CVE-2026-53325Linux kernel AMD64 AGP driver null pointer dereference5.5NVD v3.10.1%2026-06-29Fix
CVE-2026-51221EIPStackGroup OpENer attribute list handling buffer overflow7.5CISA ADP v3.10.5%2026-06-29
CVE-2026-51219A heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of lib60870 v2.3.3 to v2.3.6 allows attackers to cause a Denial of Service (DoS) via a crafted payload.7.5CISA ADP v3.10.7%2026-06-29
CVE-2026-51218TS7Worker::PerformFunctionWrite function A heap-based buffer overflow7.5CISA ADP v3.10.6%2026-06-29
CVE-2026-50229Apache Tomcat: XSS in number guess example6.1CISA ADP v3.14.1%2026-06-29NucleiExploit codeFix
CVE-2026-49049Joomla extension joomshaper.com unauthenticated access to Helix3 template ajax handler7.5CISA ADP v3.11.0%2026-06-29Reported exploitedNucleiExploit code
CVE-2026-46406Anthropic Claude Code /copy command temporary file handling information disclosure4.4CNA v4.00.2%2026-06-29Fix
CVE-2026-43746Apple Safari use-after-free6.5CISA ADP v3.10.3%2026-06-29Fix
CVE-2026-43745Apple Safari out-of-bounds write6.5CISA ADP v3.10.7%2026-06-29Fix
CVE-2026-43743Apple macOS race condition4.7CISA ADP v3.10.1%2026-06-29Fix
CVE-2026-43742Apple Safari use-after-free6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43740Apple Safari use-after-free6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43735Apple Safari cross-site request forgery8.1CISA ADP v3.10.2%2026-06-29Exploit codeFix
CVE-2026-43734Apple Safari use-after-free6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43732Apple Safari path traversal6.5CISA ADP v3.10.5%2026-06-29Fix
CVE-2026-43731Apple Safari use-after-free8.8CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43727Apple Safari use-after-free6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43726Apple Safari use-after-free6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43725Apple Safari improper input validation7.1CISA ADP v3.10.9%2026-06-29Fix
CVE-2026-43724Apple macOS denial of service7.8CISA ADP v3.10.2%2026-06-29Exploit codeFix
CVE-2026-43722Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-06-29Fix
CVE-2026-43721Apple Safari incorrect permission assignment6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43720Apple Safari use-after-free6.5CISA ADP v3.10.7%2026-06-29Fix
CVE-2026-43718Apple Safari stack-based buffer overflow6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43717Apple Safari use-after-free6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43716Apple Safari use-after-free6.5CISA ADP v3.10.6%2026-06-29Fix
CVE-2026-43715Apple Safari use-after-free8.8CISA ADP v3.11.3%2026-06-29Fix
CVE-2026-43713Apple Safari insecure permissions6.5CISA ADP v3.10.5%2026-06-29Fix
CVE-2026-43712Apple Safari out-of-bounds read6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43709Apple Safari use-after-free6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43708Apple Safari improper input validation4.3CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43707Apple Safari memory corruption6.5CISA ADP v3.10.7%2026-06-29Fix
CVE-2026-43706Apple macOS double free6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43705Apple Safari type confusion8.8CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43704Apple Safari use-after-free5.3CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43703Apple macOS out-of-bounds read6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43701Apple Safari improper access control7.1CISA ADP v3.10.6%2026-06-29Fix
CVE-2026-43700Apple Safari origin validation error6.5CISA ADP v3.10.2%2026-06-29Exploit codeFix
CVE-2026-43699Apple Safari use-after-free6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-43676Apple Safari out-of-bounds read6.5CISA ADP v3.10.5%2026-06-29Fix
CVE-2026-43663Apple Safari use-after-free6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-41992Global buffer overflow in GNU gzip7.5v3.10.6%2026-06-29Fix
CVE-2026-41991Predictable Temporary file in GNU gzip4.7v3.10.1%2026-06-29Fix
CVE-2026-41896Coolify: Unauthenticated Deployment Trigger via Webhook HMAC Bypass with Null Secret7.5CNA v3.10.4%2026-06-29Fix
CVE-2026-41052Rancher privilege escalation from Project Owner to host9.4CNA v4.00.4%2026-06-29Fix
CVE-2026-40524FrontAccounting SQL injection via get_gl_transactions7.2CNA v4.00.5%2026-06-29Fix
CVE-2026-40523FrontAccounting SQL injection via reporting/rep710.php7.2CNA v4.00.5%2026-06-29Fix
CVE-2026-40522FrontAccounting SQL injection via rep601.php7.1CNA v4.00.2%2026-06-29Fix
CVE-2026-40521FrontAccounting path traversal RCE via attachment upload8.7CNA v4.01.0%2026-06-29Fix
CVE-2026-39872Apple Safari use-after-free6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-39868Apple macOS denial of service9.1CISA ADP v3.10.7%2026-06-29Fix
CVE-2026-37637Alexantr filemanager filemanager.php code injection9.1CISA ADP v3.10.7%2026-06-29Exploit code
CVE-2026-36848Gigamon Gigavue-os path traversal7.5CISA ADP v3.10.9%2026-06-29Exploit code
CVE-2026-34597Coolify: Authenticated host RCE8.8CNA v3.11.0%2026-06-29Fix
CVE-2026-34594Coolify: Authenticated remote code execution via command injection in Destination Network Management8.8CNA v3.11.9%2026-06-29Fix
CVE-2026-34592Coolify: Cross-Team IDOR via Unscoped Server and Project Lookups exposes SSH Keys and Infrastructure7.7CNA v3.10.3%2026-06-29Fix
CVE-2026-31016Squidex.io Squidex CMS v.7.21.0 and cross-site request forgery6.5CISA ADP v3.10.2%2026-06-29
CVE-2026-28979Apple Safari out-of-bounds read6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-25707Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp8.8CNA v3.10.6%2026-06-29Fix
CVE-2026-22078O+ Connect's lack of authentication for IPC channels led to a local privilege escalation7.3CNA v3.10.1%2026-06-29
CVE-2026-13763HTTP/2 Stream Parser Confusion Body-Inspection Bypass in AWS Application Load Balancer with AWS WAF7.9CNA v4.00.7%2026-06-29Fix
CVE-2026-13762HTTP/2 Stream Parser Confusion Body-Inspection Bypass in Amazon CloudFront with AWS WAF7.9CNA v4.00.6%2026-06-29Fix
CVE-2026-13758CryptX AEAD tag verification timing side channel3.7CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-13757P11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing6.2CNA v3.10.2%2026-06-29Fix
CVE-2026-13752Snowflake CLI SQL injection8.0v3.10.3%2026-06-29Fix
CVE-2026-13751Snowflake CLI server-side request forgery via arbitrary URL Fetch in !source/!load9.6v3.10.2%2026-06-29Fix
CVE-2026-13750Snowflake CLI sensitive credential exposure through Debug Logging5.5CNA v3.10.2%2026-06-29Fix
CVE-2026-13749Snowflake CLI arbitrary code execution via Snowpark Annotation Processor template injection8.8CNA v3.10.5%2026-06-29Fix
CVE-2026-13748Snowflake CLI arbitrary Local File Read and Exfiltration through Improper File Path Restriction6.3CNA v3.10.2%2026-06-29Fix
CVE-2026-13746Snowflake CLI SQL injection through improper neutralization of Local CLI parameters5.4v3.10.2%2026-06-29Fix
CVE-2026-13744Snowflake CLI SQL injection through improper neutralization of User-Controlled Input8.8v3.10.5%2026-06-29Fix
CVE-2026-13742Honeywell IQ MultiAccess lack of signature verification before execution of downloaded content5.9CNA v4.00.1%2026-06-29
CVE-2026-13676fast-uri vulnerable to host confusion via failed IDN canonicalization7.5CNA v3.10.5%2026-06-29Fix
CVE-2026-13601GNOME Yelp yelp-xsl content security policy information disclosure6.5NVD v3.10.2%2026-06-29Fix
CVE-2026-13595Util-linux: Util-linux: Heap use-after-free in libblkid nested partition probing5.3NVD v3.10.2%2026-06-29Fix
CVE-2026-13593CSS::Minifier::XS versions for Perl have a memory leak when the entire document is minified away6.5CISA ADP v3.10.3%2026-06-29Fix
CVE-2026-13592liftoff-sr CIPster EtherNet IP message append out-of-bounds write6.9CNA v4.00.6%2026-06-29
CVE-2026-13591DeepMyst Mysti Contact Tracking ChannelBridge.ts _isTrackedConversation improper authorization2.3CNA v4.00.3%2026-06-29
CVE-2026-13590seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow6.3CNA v4.00.4%2026-06-29Fix
CVE-2026-13589seladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow6.3CNA v4.00.4%2026-06-29Fix
CVE-2026-13588seladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflow6.3CNA v4.00.4%2026-06-29Fix
CVE-2026-13587seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow6.3CNA v4.00.4%2026-06-29Fix
CVE-2026-13583Edimax EW-7478APC POST request formUSBFolder buffer overflow8.7CNA v4.00.8%2026-06-29
CVE-2026-13582Edimax EW-7478APC POST request formUSBAccount buffer overflow8.7CNA v4.00.8%2026-06-29
CVE-2026-13581Edimax EW-7478APC POST request formStaDrvSetup os command injection5.3CNA v4.02.0%2026-06-29
CVE-2026-13580Edimax EW-7478APC POST request formQoS buffer overflow8.7CNA v4.00.8%2026-06-29
CVE-2026-13579itsourcecode Hospital Management System patientchangepassword.php SQL injection5.3CNA v4.00.3%2026-06-29
CVE-2026-13578itsourcecode Hospital Management System patientdetail.php SQL injection5.3CNA v4.00.3%2026-06-29
CVE-2026-13574llvm llvm-project Bitcode File IntrinsicInst.cpp getBasePtr heap-based overflow4.8CNA v4.00.2%2026-06-29Fix
CVE-2026-13573llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow4.8CNA v4.00.2%2026-06-29Fix
CVE-2026-13572itsourcecode Hospital Management System insertbillingrecord.php SQL injection5.3CNA v4.00.3%2026-06-29
CVE-2026-13571SourceCodester Simple Food Ordering System cart.php logic error6.9CNA v4.00.5%2026-06-29
CVE-2026-13570SourceCodester Inventory Management System user registration endpoint cross-site scripting5.1CNA v4.00.3%2026-06-29
CVE-2026-13569weng-xianhu EyouCMS API index.php SQL injection5.1CNA v4.00.3%2026-06-29
CVE-2026-13568SourceCodester Inventory Management System user registration endpoint vulnerability6.9CNA v4.00.5%2026-06-29
CVE-2026-13567code-projects Online Music Site POST Request Feedback.php cross-site scripting5.3CNA v4.00.5%2026-06-29
CVE-2026-13566SourceCodester Class and Exam Timetabling System preview3.php SQL injection6.9CNA v4.00.4%2026-06-29
CVE-2026-13565SourceCodester Class and Exam Timetabling System edit_class1.php SQL injection6.9CNA v4.00.4%2026-06-29
CVE-2026-13564Edimax EW-7478APC POST request formPPPoESetup stack-based overflow8.7CNA v4.00.8%2026-06-29
CVE-2026-13563Edimax EW-7478APC POST request formL2TPSetup stack-based overflow8.7CNA v4.00.8%2026-06-29
CVE-2026-13562Edimax EW-7478APC POST request formiNICSiteSurvey buffer overflow8.7CNA v4.00.8%2026-06-29
CVE-2026-13561Edimax EW-7478APC POST request formiNICbasic os command injection5.3CNA v4.02.0%2026-06-29
CVE-2026-13560Edimax EW-7478APC POST request formAccept os command injection5.3CNA v4.02.0%2026-06-29
CVE-2026-13559code-projects Real State Services single-list_sale.php add SQL injection6.9CNA v4.00.4%2026-06-29
CVE-2026-13558CodeAstro Complaint Management System Report addreport cross-site scripting5.1CNA v4.00.3%2026-06-29
CVE-2026-13557itsourcecode Online Hotel Management System POST request controller.php add cross-site scripting5.3CNA v4.00.5%2026-06-29
CVE-2026-13556itsourcecode Online Hotel Management System POST request controller.php edit cross-site scripting5.3CNA v4.00.5%2026-06-29
CVE-2026-13555itsourcecode Online Hotel Management System controller.php add SQL injection6.9CNA v4.00.4%2026-06-29
CVE-2026-13554itsourcecode Online Hotel Management System POST request controller.php add cross-site scripting5.3CNA v4.00.5%2026-06-29
CVE-2026-13553itsourcecode Online Hotel Management System controller.php add unrestricted upload6.9CNA v4.00.5%2026-06-29
CVE-2026-13552itsourcecode Online Hotel Management System controller.php edit SQL injection6.9CNA v4.00.4%2026-06-29
CVE-2026-13551itsourcecode Baptism Information Management System editBaptism.php SQL injection6.9CNA v4.00.4%2026-06-29
CVE-2026-13550itsourcecode Baptism Information Management System delbaptism.php SQL injection6.9CNA v4.00.4%2026-06-29
CVE-2026-13549CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization5.3CNA v4.00.5%2026-06-29
CVE-2026-13548itsourcecode Hospital Management System doctortimings.php SQL injection5.3CNA v4.00.3%2026-06-29
CVE-2026-13547Hanwang e-Face General Management Platform upload.do unrestricted upload6.9CNA v4.00.5%2026-06-29
CVE-2026-13546Feehi CMS REST API endpoint articles missing authentication6.9CNA v4.00.7%2026-06-29
CVE-2026-13545D-Link DCS-935L POST parameter setconf.cgi sub_400E40 os command injection8.7CNA v4.05.5%2026-06-29
CVE-2026-13544Feehi CMS API users access control5.3CNA v4.00.4%2026-06-29
CVE-2026-13543Documenso Google OAuth Login handle-oauth-callback-url.ts improper authentication6.3CNA v4.00.6%2026-06-29
CVE-2026-13542itsourcecode Hospital Management System doctorprofile.php SQL injection5.3CNA v4.00.3%2026-06-29
CVE-2026-13541itsourcecode Hospital Management System doctorchangepassword.php SQL injection5.3CNA v4.00.3%2026-06-29
CVE-2026-13540GitBucket RepositoryCreationService.scala Git.cloneRepository.setURI server-side request forgery5.3CNA v4.00.4%2026-06-29
CVE-2026-13539Wavlink WL-NU516U1-A POST parameter wireless.cgi sub_407504 stack-based overflow8.7CNA v4.00.9%2026-06-29Fix
CVE-2026-13538Wavlink WL-NU516U1-A POST parameter wireless.cgi sub_401D68 command injection5.3CNA v4.02.2%2026-06-29Fix
CVE-2026-13537CodeAstro Human Resource Management System cross-site request forgery5.3CNA v4.00.2%2026-06-29
CVE-2026-13536GotoHTTP reg.12x cross-site scripting5.3CNA v4.00.4%2026-06-29
CVE-2026-13535CodeAstro Human Resource Management System employee view endpoint SQL injection5.3CNA v4.00.3%2026-06-29
CVE-2026-13534CherryHQ cherry-studio CherryIN Preload API MemoryService.ts sha256 authorization2.3CNA v4.00.3%2026-06-29
CVE-2026-13533Agentejo Cockpit CMS htaccess config.yaml YAMLLoad file access6.9CNA v4.00.5%2026-06-29
CVE-2026-13532itsourcecode Hospital Management System departmentDoctor.php SQL injection5.3CNA v4.00.3%2026-06-29
CVE-2026-13531itsourcecode Hospital Management System department.php SQL injection5.3CNA v4.00.3%2026-06-29
CVE-2026-13530itsourcecode Hospital Management System Appointment appointmentdetail.php SQL injection5.3CNA v4.00.3%2026-06-29
CVE-2026-13529YzmCMS index.php SQL injection6.3CNA v4.00.4%2026-06-29
CVE-2026-13528YunaiV ruoyi-vue-pro path traversal6.9CNA v4.00.6%2026-06-29
CVE-2026-13527SourceCodester Class and Exam Timetabling System preview4.php SQL injection6.9CNA v4.00.4%2026-06-29
CVE-2026-13526SourceCodester Class and Exam Timetabling System edit_class.php SQL injection6.9CNA v4.00.4%2026-06-29
CVE-2026-13525CodeAstro Human Resource Management System Update Earn Leave endpoint SQL injection5.3CNA v4.00.3%2026-06-29
CVE-2026-13524CherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorization6.3CNA v4.00.4%2026-06-29
CVE-2026-13523GPAC ISOBMFF base_encoding.c data amplification4.8CNA v4.00.2%2026-06-29
CVE-2026-13522Investintech SlimPDFReader PDF File SlimPDFReader.exe TeighaDo+0x25cde0 out-of-bounds5.3CNA v4.00.5%2026-06-29
CVE-2026-13521SourceCodester Class and Exam Timetabling System preview5.php SQL injection6.9CNA v4.00.4%2026-06-29
CVE-2026-13520itsourcecode Hospital Management System Appointment appointmentapproval.php SQL injection5.3CNA v4.00.3%2026-06-29
CVE-2026-13519Tenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflow8.7CNA v4.00.9%2026-06-29
CVE-2026-13518Tenda JD12L addressNat fromAddressNat stack-based overflow8.7CNA v4.00.9%2026-06-29
CVE-2026-13517Tenda JD12L WifiBasicSet formWifiBasicSet stack-based overflow8.7CNA v4.00.9%2026-06-29
CVE-2026-13516Tenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow8.7CNA v4.00.9%2026-06-29
CVE-2026-13515Tenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow8.7CNA v4.00.9%2026-06-29
CVE-2026-13514Chess Play and Learn App com.Chess AndroidManifest.xml backup2.4CNA v4.00.2%2026-06-29Fix
CVE-2026-13513MyScale MyScaleDB SegmentId.h getCacheKey data authenticity2.3CNA v4.00.2%2026-06-29
CVE-2026-13437Devolutions PowerShell Universal AI agent job API information disclosure6.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-13165Remote code execution in SzafirHost8.6CNA v4.00.7%2026-06-29Fix
CVE-2026-12912Red Hat Enterprise Linux 10 libtiff: Libtiff: Heap-based buffer overflow7.3CNA v3.10.4%2026-06-29Fix
CVE-2026-12856Red Hat OpenShift Dev Spaces argument injection8.8CNA v3.10.5%2026-06-29Fix
CVE-2026-12616Eclipse CSI log injection6.9CNA v4.00.5%2026-06-29
CVE-2026-11979Stack-based buffer overflow in libxml27.8v3.10.1%2026-06-29Fix
CVE-2026-11720Path traversal in googleapis/mcp-toolbox HTTP Tool URL Builder9.3CNA v4.00.5%2026-06-29Fix
CVE-2026-10648Zephyr MCUmgr serial transport null pointer dereference6.2CNA v3.10.2%2026-06-29Fix
CVE-2026-10647zephyrproject zephyr deadlock denial of service in USB CDC-NCM device class on TX enqueue failure5.3CNA v3.10.2%2026-06-29Fix
CVE-2026-10083APCu Manager WordPress plugin unauthenticated stored XSS via Cache Key Pollution7.5CISA ADP v3.10.4%2026-06-29Fix
CVE-2026-9676f4 Post Tree WordPress plugin Subscriber+ arbitrary post Parent/Menu order modification4.3CISA ADP v3.10.1%2026-06-29Fix
CVE-2026-9267Eclipse tinydtls out-of-bounds read6.9CNA v4.00.3%2026-06-29
CVE-2026-9105Authenticated stack-based buffer overflow in TP-Link TL-WR841N Web interface6.8CNA v4.01.1%2026-06-29Emerging ThreatsFix
CVE-2026-8023Zephyr HTTP server static-filesystem handler path traversal7.5CNA v3.10.9%2026-06-29Exploit codeFix
CVE-2026-7656Zephyr IPv6 neighbor discovery spoofing8.1CNA v3.10.3%2026-06-29Fix
CVE-2026-58058Nmap integer underflow in IPv6 extension Header Parsing6.9CNA v4.01.5%2026-06-28Exploit codeFix
CVE-2026-58057Flowise Custom MCP Environment Variable Denylist Bypass via Case Sensitivity2.3CNA v4.01.6%2026-06-28Exploit codeFix
CVE-2026-58056RustDesk FileTransfer Session Authorization Scope Bypass7.2CNA v4.00.3%2026-06-28
CVE-2026-58055nghttp2 nghttpx HTTP Request/Response Smuggling via Upgrade request with Content-Length6.3CNA v4.00.3%2026-06-28Fix
CVE-2026-58053Gitea act_runner Container Hardening Bypass via Workflow Container options9.4CNA v4.00.4%2026-06-28
CVE-2026-580527-Zip Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision4.8CNA v4.00.2%2026-06-28Fix
CVE-2026-58051libssh2 Free of uninitialized pointer in publickey List Cleanup8.3CNA v4.00.3%2026-06-28Fix
CVE-2026-58050libssh2 integer overflow in publickey subsystem Attribute Allocation7.5v3.10.4%2026-06-28Fix
CVE-2026-58049FFmpeg out-of-bounds write in RASC Decoder decode_dlta8.8CNA v4.00.5%2026-06-28Fix
CVE-2026-49048Joomla Extension Joomcoder.com unauthenticated SQL injection in JoomCCK extension for Joomla9.8CISA ADP v3.10.6%2026-06-28Exploit code
CVE-2026-13512Databend Tenant client_session_manager.rs state_key authorization5.3CNA v4.00.4%2026-06-28
CVE-2026-13511VoltAgent Memory REST API memory.handlers.ts handleGetMemoryConversation improper authorization2.3CNA v4.00.3%2026-06-28
CVE-2026-13510SimStudioAI sim Password Protection deployment.ts weak hash6.3CNA v4.00.3%2026-06-28
CVE-2026-13509RAGapp Knowledge file files.py FileHandler.remove_file path traversal5.3CNA v4.00.4%2026-06-28
CVE-2026-13508khoj-ai khoj Conversation Sharing api_chat.py authorization5.1CNA v4.00.3%2026-06-28
CVE-2026-13507Volcengine OpenViking insufficient verification of data authenticity2.3CNA v4.00.2%2026-06-28
CVE-2026-13504code-projects Project Management System Mail Compose mail.php cross-site scripting5.1CNA v4.00.3%2026-06-28
CVE-2026-13503antlr ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal6.9CNA v4.00.8%2026-06-28
CVE-2026-13502antlr ANTLR4 Maven Plugin GrammarDependencies.java ObjectInputStream.readObject toctou2.0CNA v4.00.1%2026-06-28
CVE-2026-13501antlr ANTLR4 gofmt GoTarget.java GoTarget command injection4.8CNA v4.01.2%2026-06-28
CVE-2026-13500antlr ANTLR4 Grammar action Block OutputFile.java code injection6.9CNA v4.00.5%2026-06-28
CVE-2026-13499yashpokharna2555 restaurent-management-system Registration login_register.php cross-site scripting5.3CNA v4.00.5%2026-06-28
CVE-2026-13498yashpokharna2555 restaurent-management-system POST parameter forgotpassword.php SQL injection6.9CNA v4.00.4%2026-06-28
CVE-2026-13497itsourcecode Hospital Management System appointment.php SQL injection5.3CNA v4.00.3%2026-06-28
CVE-2026-13496itsourcecode Hospital Management System ajaxmedicine.php SQL injection5.3CNA v4.00.3%2026-06-28
CVE-2026-13495itsourcecode Hospital Management System adminprofile.php SQL injection5.1CNA v4.00.3%2026-06-28
CVE-2026-13493AIDC-AI ComfyUI-Copilot Workflow Checkpoint Restore conversation_api.py resource injection2.3CNA v4.00.4%2026-06-28
CVE-2026-1349178 xiaozhi-esp32 MQTT Goodbye mqtt_protocol.cc GetInstance denial of service6.3CNA v4.00.6%2026-06-28
CVE-2026-13490glpi-project glpi Document document.send.php canViewFile authorization6.3CNA v4.00.5%2026-06-28
CVE-2026-1348978 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronization2.3CNA v4.00.3%2026-06-28
CVE-2026-13488SourceCodester Class and Exam Timetabling System preview7.php SQL injection6.9CNA v4.00.4%2026-06-28
CVE-2026-13487SourceCodester Class and Exam Timetabling System archive.php SQL injection6.9CNA v4.00.4%2026-06-28
CVE-2026-13486SourceCodester Class and Exam Timetabling System preview6.php SQL injection6.9CNA v4.00.4%2026-06-28
CVE-2026-13485SourceCodester Class and Exam Timetabling System preview.php SQL injection6.9CNA v4.00.4%2026-06-28
CVE-2026-13484MLflow Experiment-scoped Label Schema CRUD API authorization8.8v3.10.5%2026-06-28Fix
CVE-2026-13483arc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authenticity2.3CNA v4.00.1%2026-06-28
CVE-2026-13482skypilot-org skypilot User ID server.py username.encode weak hash6.3CNA v4.00.3%2026-06-28
CVE-2026-10646Zephyr DNS getaddrinfo resolver use-after-free7.4CNA v3.10.4%2026-06-28Fix
CVE-2026-10644zephyrproject zephyr out-of-bounds write in Microchip SERCOM-G1 async UART RX with 1-byte buffer4.2CNA v3.10.2%2026-06-28Fix
CVE-2026-10593Zephyr Bluetooth LE Audio BAP unicast client null pointer dereference6.5CNA v3.10.3%2026-06-28Fix
CVE-2026-8095Frontend File Manager WordPress plugin authenticated (Subscriber+) arbitrary file deletion8.1CNA v3.10.6%2026-06-28
CVE-2026-49417FreeBSD multiple vulnerabilities in the sound(4) mmap path7.0CISA ADP v3.10.1%2026-06-27Exploit codeFix
CVE-2026-49416FreeBSD integer overflow in vt(4) CONS_HISTORY ioctl7.8CISA ADP v3.10.2%2026-06-27Fix
CVE-2026-49414FreeBSD ASLR bypass for setuid executables via procctl(2)7.8CISA ADP v3.10.2%2026-06-27Fix
CVE-2026-49413FreeBSD flaw in Linuxulator execution of setugid binaries7.1CISA ADP v3.10.1%2026-06-27Exploit codeFix
CVE-2026-49412FreeBSD use-after-free bug in the IPV6_MSFILTER socket option handler7.8CISA ADP v3.10.2%2026-06-27Fix
CVE-2026-45259FreeBSD sigqueue(2) missing capability mode restriction6.5CISA ADP v3.10.1%2026-06-27Fix
CVE-2026-45258FreeBSD multiple vulnerabilities in the sound(4) mmap path7.8CISA ADP v3.10.2%2026-06-27Exploit codeFix
CVE-2026-13422HD Quiz - cross-site request forgery via multiple AJAX Handlers4.3CNA v3.10.3%2026-06-27Fix
CVE-2026-13335CodePeople Post Map for Google Maps WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-06-27Fix
CVE-2026-13333Groundhogg WordPress plugin authenticated (Sales Rep+) SQL injection via query[select] parameter6.5CNA v3.10.6%2026-06-27Fix
CVE-2026-13331Groundhogg WordPress plugin authenticated (Marketer+) SQL injection via search parameter6.5CNA v3.10.5%2026-06-27Fix
CVE-2026-13295Page Builder by SiteOrigin WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-06-27Fix
CVE-2026-13245MaxButtons WordPress plugin reflected cross-site scripting via view parameter6.1CNA v3.10.4%2026-06-27Fix
CVE-2026-12471Spexo WordPress theme missing authorization to authenticated (Subscriber+) limited plugin activation4.3CNA v3.10.3%2026-06-27Fix
CVE-2026-12432WP Full Stripe Free WordPress plugin missing authorization5.3CNA v3.10.6%2026-06-27Exploit codeFix
CVE-2026-12415Invoice Generator WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.8%2026-06-27Exploit code
CVE-2026-12404NEX-Forms WordPress plugin missing authorization unauthenticated sensitive information disclosure5.3CNA v3.10.5%2026-06-27Fix
CVE-2026-12399Gutenverse WordPress plugin stored cross-site scripting4.4CNA v3.10.4%2026-06-27Fix
CVE-2026-11987Dokan Multivendor Marketplace product listing endpoint insecure direct object reference4.3CNA v3.10.5%2026-06-27Fix
CVE-2026-11783dokaninc Dokan product SKU field stored cross-site scripting6.4CNA v3.10.4%2026-06-27Fix
CVE-2026-11773Masteriyo LMS WordPress plugin authorization bypass4.3CNA v3.10.3%2026-06-27Fix
CVE-2026-11597Surbma Infusionsoft Shortcode WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-27Fix
CVE-2026-11364Product Specifications for WooCommerce WordPress plugin unauthorized access4.3CNA v3.10.4%2026-06-27Fix
CVE-2026-11356Ivory Search WordPress plugin stored cross-site scripting4.4CNA v3.10.4%2026-06-27Fix
CVE-2026-10820ProfilePress subscription cancellation insecure direct object reference8.1CISA ADP v3.10.4%2026-06-27Fix
CVE-2026-10643Out-of-bounds heap write in Zephyr `recvmsg` ancillary-data path8.7CNA v3.10.2%2026-06-27Fix
CVE-2026-9677Shariff for WordPress plugin Admin+ stored cross-site scripting4.8CISA ADP v3.10.2%2026-06-27
CVE-2026-9242RegistrationMagic WordPress plugin authentication bypass5.3CNA v3.10.3%2026-06-27Fix
CVE-2026-9233Quiz and Survey Master WordPress plugin missing authorization authenticated arbitrary modification4.3CNA v3.10.5%2026-06-27Fix
CVE-2026-3462Frisbii Pay WordPress plugin missing authorization authenticated Payment Token modification6.5CNA v3.10.4%2026-06-27Exploit codeFix
CVE-2026-57940danpros HTMLy server-side request forgery2.1CNA v4.00.4%2026-06-26
CVE-2026-57926JetBrains YouTrack prototype pollution2.6CNA v3.10.3%2026-06-26Fix
CVE-2026-57925JetBrains YouTrack missing authorization4.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57924JetBrains YouTrack incorrect default permissions4.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57923JetBrains YouTrack missing authorization5.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57922JetBrains YouTrack missing authorization3.1CNA v3.10.2%2026-06-26Fix
CVE-2026-57921JetBrains YouTrack missing authorization4.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57920Peplink InControl 2 REST API access control vulnerability7.7CNA v3.10.4%2026-06-26Fix
CVE-2026-57918sahlberg libnfs integer underflow7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-57915Apache Kerby: Kerberos Pre-authentication bypass7.3CISA ADP v3.10.5%2026-06-26Fix
CVE-2026-57914Apache Kerby: StackOverflow on parsing deeply nested ASN1 structures6.5CISA ADP v3.10.4%2026-06-26Fix
CVE-2026-57913Johnson & Johnson Audit Tracking Management System client-side enforcement of server-side security7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-57912Johnson & Johnson Campus Recruiting client-side enforcement of server-side security7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-57881GeoVision GV-LPCLPC2011/2211 vlsvr stack-based buffer overflow9.8CNA v3.10.6%2026-06-26
CVE-2026-57880GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized buffer overflow9.8CNA v3.10.9%2026-06-26
CVE-2026-57879GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized buffer overflow9.8CNA v3.10.9%2026-06-26
CVE-2026-57878GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized buffer overflow vulnerability (thttpd)9.8CNA v3.11.0%2026-06-26
CVE-2026-57877GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized format string vulnerability (vlsvr)8.6CNA v3.10.4%2026-06-26
CVE-2026-57876GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized out-of-bounds writing vulnerability7.5CNA v3.10.5%2026-06-26
CVE-2026-57875GeoVision GV-LPCLPC2011/2211 null pointer dereference7.5CNA v3.10.7%2026-06-26
CVE-2026-57874GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized buffer overflow vulnerability7.5CNA v3.10.5%2026-06-26
CVE-2026-57873GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized null pointer dereference vulnerability7.5CNA v3.10.3%2026-06-26
CVE-2026-57872GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized directory traversal vulnerability7.5CNA v3.11.5%2026-06-26
CVE-2026-57667Groundhogg WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-26Fix
CVE-2026-57665GravityView WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57664Bopo WooCommerce Product Bundle Builder WordPress plugin sensitive data exposure4.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57663Recipe Maker For Your Food Blog from Zip Recipes WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-26Fix
CVE-2026-57662Contest Gallery WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-26Fix
CVE-2026-57661WPComplete WordPress plugin broken access control5.4CNA v3.10.3%2026-06-26Fix
CVE-2026-57660Booking and Rental Manager WordPress plugin broken access control5.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57659Paid Memberships Pro - Add Member From Admin WordPress plugin cross-site request forgery (CSRF)8.8CNA v3.10.2%2026-06-26Fix
CVE-2026-57658TemplateSpare WordPress plugin arbitrary file upload9.1CNA v3.10.5%2026-06-26Fix
CVE-2026-57657Gmail SMTP WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-06-26Fix
CVE-2026-57656Hester Core WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-06-26Fix
CVE-2026-57655Child theme Wizard WordPress plugin cross-site request forgery (CSRF)8.2CNA v3.10.2%2026-06-26Fix
CVE-2026-57654Affiliates Manager WordPress plugin broken access control6.5CNA v3.10.3%2026-06-26Fix
CVE-2026-57653WP Job Portal WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-26Fix
CVE-2026-57652JS Help Desk WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57651Ghost Kit WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-26Fix
CVE-2026-57650Magazine Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-26Fix
CVE-2026-57649Shoppable Images Lite WordPress plugin broken access control4.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57648Nelio Content WordPress plugin broken access control4.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57647Panorama Viewer 360 Degree Image + Video Viewer WordPress plugin local file inclusion7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-57646Majestic Support WordPress plugin insecure direct object references (IDOR)5.4CNA v3.10.2%2026-06-26Fix
CVE-2026-57645Newsletters WordPress plugin broken access control8.1CNA v3.10.3%2026-06-26Fix
CVE-2026-57644Restaurant Menu by MotoPress WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-26Fix
CVE-2026-57643WP Post Author WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-26Fix
CVE-2026-57642Gallery WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-26Fix
CVE-2026-57641Real Estate 7 WordPress theme cross-site request forgery (CSRF)6.5CNA v3.10.2%2026-06-26Fix
CVE-2026-57640MasterStudy LMS WordPress plugin broken access control4.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57638Fluent Booking WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-26Fix
CVE-2026-57637Abandoned Cart Lite for WooCommerce WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-06-26Fix
CVE-2026-57636wpForo Forum WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-26Fix
CVE-2026-57635FunnelKit Payment Gateway for Stripe WooCommerce WordPress plugin cross-site request forgery (CSRF)6.5CNA v3.10.2%2026-06-26Fix
CVE-2026-57634PPWP WordPress plugin insecure direct object references (IDOR)4.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57633WCBoost Products Compare WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57632Email Marketing for WooCommerce by Omnisend WordPress plugin broken access control5.4CNA v3.10.3%2026-06-26Fix
CVE-2026-57631Popup box WordPress plugin SQL injection7.6CNA v3.10.4%2026-06-26Fix
CVE-2026-57630Blocksy Companion Pro WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57629StatCounter WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-26Fix
CVE-2026-57628WP All Import WordPress plugin SQL injection7.6CNA v3.10.4%2026-06-26Fix
CVE-2026-57627Kirki WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2026-06-26Fix
CVE-2026-57622WPCafe WordPress plugin broken access control4.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57620Exclusive Addons Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-26Fix
CVE-2026-57618Neve PRO WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-26Fix
CVE-2026-57617SeedProd Pro WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-26Fix
CVE-2026-57527zaproxy zap-extensions ZAP ViewState Add-on insecure deserialization via JSFViewState.decode8.7CNA v4.00.7%2026-06-26Fix
CVE-2026-57518Pagekit CMS privilege escalation via UserApiController8.7CNA v4.00.7%2026-06-26
CVE-2026-57473Reolink Home Hub weak credentials5.8CNA v4.00.2%2026-06-26
CVE-2026-57431Featured Image WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-26Fix
CVE-2026-57430SEOPress PRO WordPress plugin broken access control4.3CNA v3.10.3%2026-06-26Fix
CVE-2026-57325NanoMag WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-57324GIFT4U WordPress plugin broken access control6.5CNA v3.10.3%2026-06-26Fix
CVE-2026-57323Flash and HTML5 Video WordPress plugin broken access control5.8CNA v3.10.3%2026-06-26Fix
CVE-2026-57322weMail WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-57321H5P WordPress plugin arbitrary file deletion7.1CNA v3.10.4%2026-06-26Fix
CVE-2026-57319FOX WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-57318Site Reviews WordPress plugin sensitive data exposure6.5CNA v3.10.4%2026-06-26Fix
CVE-2026-57317Simply Schedule Appointments WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-06-26Fix
CVE-2026-57316GetGenie WordPress plugin sensitive data exposure6.5CNA v3.10.4%2026-06-26Fix
CVE-2026-57315Blocksy Companion Pro WordPress plugin remote code execution (RCE)8.5CNA v3.10.6%2026-06-26Fix
CVE-2026-57314SureCart WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-57313SureCart WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-26Fix
CVE-2026-57312Everest Forms WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-57231Podman environment variable passthrough information disclosure7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-56876extract-zip unvalidated symlink path traversal8.6CNA v4.00.5%2026-06-26Exploit codeFix