CVE-2026 list

CVE-2026 records published in June 2026

Page two of eight: records 1,001 to 2,000 of the 7,316 published in June 2026, newest first. The first page carries the figures for June 2026.

CVE-2026 records published in June 2026, newest first: records 1,001 to 2,000 of 7,316
CVE Summary CVSS EPSS Published Signals
CVE-2026-56823AutoGPT: IDOR in Webhook Ping endpoint allows Enumeration and Cross-User Ping Triggering5.4CNA v3.10.3%2026-06-26Fix
CVE-2026-56773Teable missing authorization in v2 REST API8.7CNA v4.00.5%2026-06-26Fix
CVE-2026-56663AutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock`8.5CNA v3.10.4%2026-06-26Fix
CVE-2026-56414H.VIEW HV-500S6 IP Camera unrestricted upload of file with dangerous type8.6CNA v4.00.4%2026-06-26
CVE-2026-56072WoodMart WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-56070Advance Product Search WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-26NucleiFix
CVE-2026-56069Toolset Forms WordPress plugin insecure direct object references (IDOR)7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-56068JetEngine WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-26Fix
CVE-2026-56067JetSmartFilters WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-26Fix
CVE-2026-56066ShortPixel Adaptive Images WordPress plugin arbitrary file deletion5.8CNA v3.10.5%2026-06-26Fix
CVE-2026-56064Tourfic WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-26Fix
CVE-2026-56063MailChimp Block WordPress plugin broken access control8.3CNA v3.10.3%2026-06-26Fix
CVE-2026-56062Quotes llama WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-26NucleiFix
CVE-2026-56061Subscriptions for WooCommerce WordPress plugin broken access control7.5CNA v3.10.3%2026-06-26Fix
CVE-2026-56060Print Invoice and Delivery Notes for WooCommerce WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-56059Travel Booking WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-06-26Fix
CVE-2026-56058Quform WordPress plugin arbitrary file upload9.9CNA v3.10.5%2026-06-26Fix
CVE-2026-56057Uncanny Automator Pro WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-26Fix
CVE-2026-56055RealHomes WordPress theme PHP object injection8.8CNA v3.10.5%2026-06-26Fix
CVE-2026-56048Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 versions.6.5CNA v3.10.3%2026-06-26Fix
CVE-2026-56047perfmatters WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-56046ListingPro WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-26Fix
CVE-2026-56045Automatic WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-56044Blog2Social WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-56043Customer Reviews for WooCommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-56041Responsive Lightbox WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-56040Gutenverse Form WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-56039Quick Interest Slider WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-56038Frisbii Pay WordPress plugin privilege escalation8.8CNA v3.10.4%2026-06-26Fix
CVE-2026-56036워드프레스 결제 심플페이 WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-26Fix
CVE-2026-56035BitFire Security WordPress plugin improper quantity validation8.6CNA v3.10.4%2026-06-26Fix
CVE-2026-56034Library Management System WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-26Fix
CVE-2026-56033Dokan Pro WordPress plugin privilege escalation9.8CNA v3.10.5%2026-06-26Fix
CVE-2026-56032Buddyboss Platform WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-26Fix
CVE-2026-56031Uncanny Automator WordPress plugin PHP object injection8.1CNA v3.10.4%2026-06-26Fix
CVE-2026-56030Paytium WordPress plugin privilege escalation9.8CNA v3.10.5%2026-06-26Fix
CVE-2026-56029CorvusPay WooCommerce Payment Gateway WordPress plugin broken authentication7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-56028Easy Elements for Elementor Addons and Website Templates WordPress plugin privilege escalation9.8CNA v3.10.5%2026-06-26Fix
CVE-2026-56027Booster for WooCommerce WordPress plugin arbitrary file upload9.9CNA v3.10.5%2026-06-26Fix
CVE-2026-56026utm.codes WordPress plugin server side request forgery (SSRF)6.4CNA v3.10.2%2026-06-26Fix
CVE-2026-56025Paymob for WooCommerce WordPress plugin broken access control7.5CNA v3.10.3%2026-06-26Fix
CVE-2026-56011MapPress Maps for WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-26Fix
CVE-2026-56010Abandoned Cart Pro for WooCommerce WordPress plugin privilege escalation8.8CNA v3.10.4%2026-06-26Fix
CVE-2026-56008Fusion Builder WordPress plugin privilege escalation8.8CNA v3.10.4%2026-06-26Fix
CVE-2026-55975H.VIEW HV-500S6 IP Camera OS command injection8.6CNA v4.00.6%2026-06-26
CVE-2026-55838RustFS metrics endpoint missing authorization4.3CNA v3.10.3%2026-06-26
CVE-2026-55686Podman: WORKDIR symlink traversal vulnerability5.3CNA v3.10.4%2026-06-26Fix
CVE-2026-55677Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-55448Mise's local credential_command executes untrusted config6.3CNA v3.10.2%2026-06-26Fix
CVE-2026-55441Mise vulnerable to arbitrary command execution8.6CNA v3.10.2%2026-06-26Fix
CVE-2026-55189RustFS: FTP frontend skips IAM authorization on object reads7.7CNA v3.10.3%2026-06-26
CVE-2026-55188RustFS: ListRemoteTargetHandler authorization bypass leaks replication target credentials8.2CNA v3.10.3%2026-06-26
CVE-2026-55069Kestra BasicAuth Password Stored as SHA-512 enables Offline brute-force Attack8.7CNA v3.10.2%2026-06-26Fix
CVE-2026-54847Stylish Cost Calculator WordPress plugin broken access control7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-54846Syncee Premium Dropshipping and Wholesale WordPress plugin broken access control7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-54840Newsletters WordPress plugin broken access control7.3CNA v3.10.3%2026-06-26Fix
CVE-2026-54839Trinity Backup WordPress plugin Unauthenticated information disclosure7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-54837Intranet and Private Site All-In-One Intranet WordPress plugin broken access control7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-54835Five Star Restaurant Menu WordPress plugin broken access control7.5CNA v3.10.3%2026-06-26Fix
CVE-2026-54834Object Cache 4 everyone WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-54833Enable CORS WordPress plugin backdoor7.4CNA v3.10.3%2026-06-26Fix
CVE-2026-54832Gutenverse Companion WordPress plugin broken access control7.5CNA v3.10.3%2026-06-26Fix
CVE-2026-54831GeoDirectory WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-26Fix
CVE-2026-54827Real Estate 7 WordPress theme SQL injection9.3CNA v3.10.4%2026-06-26Fix
CVE-2026-54826SupportCandy WordPress plugin insecure direct object references (IDOR)7.6CNA v3.10.3%2026-06-26Fix
CVE-2026-54825wpDataTables WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-26Fix
CVE-2026-54824Ads by WPQuads WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-54820JetBooking WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-26Fix
CVE-2026-54753Nx: `nx graph` dev server permissive CORS policy5.9CNA v3.11.2%2026-06-26Fix
CVE-2026-54636Dokku: OS command injection via app.json managed Cron9.0CNA v3.10.5%2026-06-26Fix
CVE-2026-54557mise HTTP backend uses raw version path for install symlink destination5.5CNA v3.10.2%2026-06-26Fix
CVE-2026-54353Budibase: Potential SSRF DNS rebinding bypass in outbound fetch validation8.5CNA v3.10.2%2026-06-26Fix
CVE-2026-54352Budibase: Arbitrary file read by workspace-builder via PWA-zip symlink upload9.6CNA v3.10.5%2026-06-26Fix
CVE-2026-54351Budibase: Mass assignment in Webhook Trigger allows Cross-Workspace Automation Execution8.2CNA v3.10.5%2026-06-26Fix
CVE-2026-54350Budibase: Anonymous NoSQL operator injection via published-app query templates10.0CNA v3.10.5%2026-06-26Exploit codeFix
CVE-2026-54341Dragonfly: RESTORE operations may crash the server7.5CNA v3.10.7%2026-06-26Fix
CVE-2026-53914JetBrains Kotlin: Unsafe deserialization in Kotlin Build Cache enables code execution6.7CNA v3.10.3%2026-06-26Fix
CVE-2026-53577Kestra: Cross-Execution File Read via Preview Endpoint (IDOR)6.5CNA v3.10.4%2026-06-26Fix
CVE-2026-53576Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass10.0CNA v3.13.3%2026-06-26NucleiEmerging ThreatsExploit codeFix
CVE-2026-53324Linux kernel mana null pointer dereference5.5v3.10.1%2026-06-26Fix
CVE-2026-53323Linux kernel DSA conduit ethtool ops deadlock5.5v3.10.1%2026-06-26Fix
CVE-2026-53322Linux kernel VFIO PCI DMABUF handling vulnerability8.8CNA v3.10.4%2026-06-26Fix
CVE-2026-53321Linux kernel io_uring NAPI busy polling vulnerability5.5NVD v3.10.2%2026-06-26Fix
CVE-2026-53320Linux kernel nilfs2 block dirtying ioctl reachable assertion5.5v3.10.1%2026-06-26Fix
CVE-2026-53319Linux kernel block layer writeback throttling reachable assertion5.5v3.10.1%2026-06-26Fix
CVE-2026-53318Linux kernel mt7925 Wi-Fi driver null pointer dereference5.5v3.10.1%2026-06-26Fix
CVE-2026-53317Linux kernel mt7921 Wi-Fi driver denial of service5.5NVD v3.10.2%2026-06-26Fix
CVE-2026-53316Linux kernel drm/amd/ras null pointer dereference5.5v3.10.1%2026-06-26Fix
CVE-2026-53315Linux kernel drm/amd/ras null pointer dereference5.5v3.10.1%2026-06-26Fix
CVE-2026-53314Linux kernel padata CPU hotplug handling vulnerability5.5v3.10.1%2026-06-26Fix
CVE-2026-53313Linux kernel drm/amd/display null pointer dereference5.5NVD v3.10.1%2026-06-26Fix
CVE-2026-53312Linux kernel RISC-V IOMMU invalidation path infinite loop5.5v3.10.1%2026-06-26Fix
CVE-2026-53311Linux kernel FUSE dentry revalidation vulnerability5.5v3.10.1%2026-06-26Fix
CVE-2026-53310In the Linux kernel, the following vulnerability has been resolved: soc/tegra: cbb: Fix cross-fabric target timeout lookup When a fabric receives an error interrupt, the error may have occurred on a different fabric. The target timeout lookup was using the wrong base address (cbb->regs) with offse5.5v3.10.1%2026-06-26Fix
CVE-2026-53309Linux kernel ocfs2/dlm off-by-one error9.8CNA v3.10.4%2026-06-26Fix
CVE-2026-53308Linux kernel MAX77705 power supply driver memory leak5.5NVD v3.10.2%2026-06-26Fix
CVE-2026-53307Linux kernel pinctrl pinmux property parser null pointer dereference5.5v3.10.1%2026-06-26Fix
CVE-2026-53306Linux kernel hvc_iucv virtual console driver off-by-one error5.5v3.10.1%2026-06-26Fix
CVE-2026-53305Linux kernel PS883x USB Type-C driver null pointer dereference5.5v3.10.1%2026-06-26Fix
CVE-2026-53304Linux kernel SCSI generic (sg) driver denial of service5.5v3.10.1%2026-06-26Fix
CVE-2026-53303Linux kernel f2fs extension list sysfs interface out-of-bounds read7.1v3.10.1%2026-06-26Fix
CVE-2026-53302Linux kernel EIP93 crypto driver null pointer dereference5.5v3.10.1%2026-06-26Fix
CVE-2026-53301Linux kernel Amlogic T7 reset driver null pointer dereference5.5v3.10.1%2026-06-26Fix
CVE-2026-53300Linux kernel enetc NTMP DMA command buffer use-after-free7.8CNA v3.10.2%2026-06-26Fix
CVE-2026-53299Linux kernel Airoha Ethernet TX queue init null pointer dereference5.5v3.10.1%2026-06-26Fix
CVE-2026-53298Linux kernel Airoha Ethernet RX queue init null pointer dereference5.5v3.10.1%2026-06-26Fix
CVE-2026-53297Linux kernel mana kernel panic5.5NVD v3.10.2%2026-06-26Fix
CVE-2026-53296Linux kernel mailbox test driver probe error path use-after-free7.8v3.10.1%2026-06-26Fix
CVE-2026-53295Linux kernel mailbox core channel array vulnerability5.5NVD v3.10.1%2026-06-26Fix
CVE-2026-53294Linux kernel mailbox test driver channel reuse double free7.8v3.10.1%2026-06-26Fix
CVE-2026-53293Linux kernel amdgpu MMR register read deadlock5.5v3.10.1%2026-06-26Fix
CVE-2026-53292Linux kernel Phonet socket autobind reachable assertion5.5NVD v3.10.2%2026-06-26Fix
CVE-2026-53291Linux kernel HDA Conexant jack detection null pointer dereference5.5v3.10.1%2026-06-26Fix
CVE-2026-53290Linux kernel Xe GPU EU stall monitoring use-after-free7.8CNA v3.10.1%2026-06-26Fix
CVE-2026-53289Linux kernel ice Ethernet driver VF reset null pointer dereference5.5v3.10.1%2026-06-26Fix
CVE-2026-53288Linux kernel arm64 early kernel page mapping vulnerability5.5v3.10.1%2026-06-26Fix
CVE-2026-53287Linux kernel audit CAPSET logging vulnerability5.5v3.10.1%2026-06-26Fix
CVE-2026-53286Linux kernel idpf auxiliary device driver double free7.8v3.10.1%2026-06-26Fix
CVE-2026-53285Linux kernel AMD display DCN32 phantom plane allocation reachable assertion5.5NVD v3.10.1%2026-06-26Fix
CVE-2026-53284Linux kernel Btrfs dirty pages io tree null pointer dereference7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-53283Linux kernel AMD IOMMU device lookup table vulnerability5.5v3.10.1%2026-06-26Fix
CVE-2026-53282Linux kernel kexec purgatory code vulnerability5.5v3.10.1%2026-06-26Fix
CVE-2026-53281Linux kernel iommu/vt-d null pointer dereference8.8CNA v3.10.2%2026-06-26Fix
CVE-2026-53280Linux kernel IOMMU PCI device reset handling null pointer dereference5.5v3.10.1%2026-06-26Fix
CVE-2026-53279Linux kernel gma500 Oaktrail LVDS driver denial of service5.5v3.10.1%2026-06-26Fix
CVE-2026-53278Linux kernel MPAM configuration handling null pointer dereference5.5v3.10.1%2026-06-26Fix
CVE-2026-52885Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memory7.5CNA v4.00.1%2026-06-26Fix
CVE-2026-52884Notepad++ trusted directory path check path traversal7.8CNA v3.10.2%2026-06-26
CVE-2026-52785OpenProject: SQL injection in timestamps functionality9.9CNA v3.10.4%2026-06-26Fix
CVE-2026-52784OpenProject: CSRF on TARGET through /users/:id via POST parameter user[admin]8.8CNA v3.10.2%2026-06-26Fix
CVE-2026-52783OpenProject: Information disclosure on localhost8.2CNA v3.10.2%2026-06-26Fix
CVE-2026-52782OPF OpenProject project storage settings insecure direct object reference9.9CNA v3.10.5%2026-06-26Exploit codeFix
CVE-2026-52781OpenProject: Stored XSS on openproject.example.com6.4CNA v3.10.3%2026-06-26Fix
CVE-2026-52780OpenProject: Cache store poisoning leads to remote code execution (RCE)9.6CNA v3.10.4%2026-06-26Fix
CVE-2026-52779OPF OpenProject Calendar and Team Planner incorrect authorization5.4CNA v3.10.3%2026-06-26Fix
CVE-2026-52701User Registration WordPress plugin broken access control6.5CNA v3.10.3%2026-06-26Fix
CVE-2026-50767Koha item type administration page stored cross-site scripting5.4CISA ADP v3.10.3%2026-06-26
CVE-2026-50766Koha OPAC item detail page stored cross-site scripting5.4CISA ADP v3.10.3%2026-06-26
CVE-2026-50765Koha patron restriction type administration page stored cross-site scripting6.1CISA ADP v3.10.3%2026-06-26
CVE-2026-50745Revive Adserver cross-site scripting6.1v3.10.4%2026-06-26
CVE-2026-50744Revive Adserver improper access control4.3CNA v3.00.3%2026-06-26
CVE-2026-50742Revive Adserver stored cross-site scripting5.4v3.10.3%2026-06-26
CVE-2026-50741Revive Adserver code injection8.8CNA v3.04.9%2026-06-26
CVE-2026-50740Revive Adserver cross-site scripting5.4v3.10.4%2026-06-26
CVE-2026-50739Revive Adserver improper access control4.3CNA v3.00.5%2026-06-26
CVE-2026-50137Budibase attachments URL endpoint missing authorization8.2CNA v4.00.4%2026-06-26Fix
CVE-2026-50136Budibase S3 upload URL endpoint missing authentication7.4CNA v3.10.3%2026-06-26Fix
CVE-2026-50132Budibase chat link handoff endpoint cross-site request forgery7.3CNA v3.10.2%2026-06-26Fix
CVE-2026-49991RustFS Snowball Auto-Extract: Path traversal allows cross-bucket object injection8.6CNA v3.10.4%2026-06-26
CVE-2026-49984Kestra LocalStorage file download API path traversal7.7CNA v3.10.6%2026-06-26Fix
CVE-2026-49869Kestra OSS OS command injection10.0CNA v3.12.1%2026-06-26KEVEmerging ThreatsExploit codeFix
CVE-2026-49486Apache Airflow FTP provider: FTP Provider does not protect FTPS data channel (missing PROT_P)7.5CISA ADP v3.10.4%2026-06-26Fix
CVE-2026-49355OpenProject: Private work package data disclosure through single meeting agenda item API4.3CNA v3.10.3%2026-06-26Fix
CVE-2026-48936Node.js Node improper access control3.3CNA v3.00.1%2026-06-26Fix
CVE-2026-48935Node.js Node incorrect default permissions3.3CNA v3.00.2%2026-06-26Fix
CVE-2026-48934Node.js Node improper certificate validation4.3CNA v3.00.3%2026-06-26Fix
CVE-2026-48933Node.js Node integer overflow7.5CNA v3.03.7%2026-06-26Fix
CVE-2026-48930Node.js Node improper access control9.8v3.10.3%2026-06-26Fix
CVE-2026-48928Node.js Node improper access control5.4v3.10.2%2026-06-26Fix
CVE-2026-48800Notepad++: Arbitrary code execution via shortcuts.xml UserCommand injection7.8CNA v3.10.2%2026-06-26Fix
CVE-2026-48778Notepad++: Arbitrary code execution via config.xml commandLineInterpreter7.8CNA v3.10.6%2026-06-26Exploit codeFix
CVE-2026-48770Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash5.0CNA v3.10.1%2026-06-26Exploit codeFix
CVE-2026-48743Envoy: HTTP/3 to HTTP/1 request smuggling via headers-only request with nonzero Content-Length7.5CNA v3.10.3%2026-06-26Fix
CVE-2026-48706Envoy heap buffer overflow in TcpStatsdSink5.9CNA v3.10.6%2026-06-26Fix
CVE-2026-48619Node.js Node resource exhaustion7.5v3.10.6%2026-06-26Fix
CVE-2026-48618Node.js Node improper Unicode handling6.5NVD v3.13.2%2026-06-26Fix
CVE-2026-48615Node.js Node personal information exposure7.5v3.10.4%2026-06-26Fix
CVE-2026-48529GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion6.0CNA v3.10.2%2026-06-26Fix
CVE-2026-48497Envoy: Abnormal process termination in DNS UDP filter5.9CNA v3.10.4%2026-06-26Fix
CVE-2026-48090Envoy HTTP: OAuth2 filter late async token completion after stream teardown (UAF / crash risk)5.9CNA v3.10.6%2026-06-26Fix
CVE-2026-48044Envoy Zstd Decompressor: Ratio Check at Wrong Loop Depth lead to memory explosion7.5CNA v3.10.5%2026-06-26Fix
CVE-2026-48042Envoy: Stack overflow in destructor of highly nested JSON7.5CNA v3.10.6%2026-06-26Fix
CVE-2026-47778Envoy: Embedded NUL in TLS DNS SAN Truncation in the Default TLS Certificate Validator4.4CNA v3.10.2%2026-06-26Fix
CVE-2026-47775Envoy OAuth2 Filter: Padding Oracle via AES-256-CBC Cookie Decryption6.8CNA v3.10.2%2026-06-26Fix
CVE-2026-47692Envoy PROXY protocol v2 header generator vulnerability4.8CNA v3.10.2%2026-06-26Fix
CVE-2026-47221Envoy: Null pointer deref in internal redirects5.9CNA v3.10.4%2026-06-26Fix
CVE-2026-47220Envoy: Segmentation fault when using %REQUESTED_SERVER_NAME% in log format7.5CNA v3.10.7%2026-06-26Fix
CVE-2026-47214Docling: Unsafe URI and Path Handling in HTML Backend7.1CNA v3.10.4%2026-06-26Fix
CVE-2026-47207Envoy crashes if multiple unexpected ext_proc responses are packed into one gRPC message6.5CNA v3.10.4%2026-06-26Fix
CVE-2026-47206Dragonfly: RESP protocol injection via Lua redis.error_reply in EvalSerializer2.3CNA v4.00.5%2026-06-26Fix
CVE-2026-47205Envoy: Ext_authz use-after-free during Stream Teardown with Per-Route Overrides5.9CNA v3.10.4%2026-06-26Fix
CVE-2026-47204Envoy: Grpc_stats filter segfault on Connect protocol requests to direct_response routes6.5CNA v3.10.4%2026-06-26Fix
CVE-2026-47193OpenProject: Journal diff endpoint bypasses object, journal, and field visibility checks7.5CNA v3.10.4%2026-06-26Fix
CVE-2026-46710Notepad++: Privilege escalation in the Installer via Uncontrolled Executable Search Path7.5CNA v4.00.2%2026-06-26Fix
CVE-2026-46604Panic decoding image with out-of-bounds strip offset in x/image/TIFF in golang.org/x/image7.5CISA ADP v3.10.6%2026-06-26Fix
CVE-2026-46386OpenProject: Pre-authentication RCE in openproject/openproject Docker image9.9CNA v3.10.5%2026-06-26Fix
CVE-2026-45807Kestra: Path traversal7.7CNA v3.10.6%2026-06-26Fix
CVE-2026-45408Dokku: OS command injection via App Name in Git Pre-Receive Hook9.0CNA v3.10.4%2026-06-26Fix
CVE-2026-45407Dokku: Git Credentials in .netrc Stored World-Readable due to Premature touch5.0CNA v3.10.1%2026-06-26Fix
CVE-2026-45406Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected through eval9.0CNA v3.10.5%2026-06-26Fix
CVE-2026-45405Dokku: Arbitrary file write via Tar Symlink Traversal in git:from-archive and certs:add9.0CNA v3.10.5%2026-06-26Fix
CVE-2026-45257FreeBSD arbitrary file overwrite via the KTLS receive path7.8CISA ADP v3.10.2%2026-06-26Fix
CVE-2026-45256FreeBSD missing permission check in thr_kill2(2)5.5CISA ADP v3.10.1%2026-06-26Fix
CVE-2026-45195Imagination Technologies Graphics DDK GPU firmware fault address handling vulnerability7.8CISA ADP v3.10.1%2026-06-26Fix
CVE-2026-44736OpenProject Relations API information disclosure6.5CNA v3.10.4%2026-06-26Fix
CVE-2026-44735OpenProject: Shares API information disclosure6.5CNA v3.10.4%2026-06-26Fix
CVE-2026-44734OpenProject: Improper access control on OpenProject6.5CNA v3.10.3%2026-06-26Fix
CVE-2026-44733OpenProject: Business logic error on OpenProject5.9CNA v3.10.3%2026-06-26Fix
CVE-2026-44732OpenProject: IDOR on OpenProject4.3CNA v3.10.3%2026-06-26Fix
CVE-2026-44731OpenProject: Improper access control on OpenProject4.3CNA v3.10.3%2026-06-26Fix
CVE-2026-44696OpenProject: Stored CSS injection5.7CNA v3.10.3%2026-06-26Fix
CVE-2026-44018Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend5.5CNA v3.10.2%2026-06-26Fix
CVE-2026-43920FOSSBilling: Unauthenticated update patcher endpoint allows remote maintenance execution6.9CNA v4.00.9%2026-06-26Fix
CVE-2026-40711Dell Container Storage Modules OS command injection8.0CNA v3.11.3%2026-06-26Fix
CVE-2026-39031Lansweeper lsrunase and lsencrypt credential encryption hard-coded cryptographic key5.5CISA ADP v3.10.1%2026-06-26Exploit code
CVE-2026-38641relibc shared library loader denial of service7.5CISA ADP v3.10.6%2026-06-26
CVE-2026-38639relibc strptime month parser improper input validation7.5CISA ADP v3.10.6%2026-06-26
CVE-2026-38571Cleartext storage and exposure of WPA2 credentials, and missing authentication on the rr/wr memory read/write commands, in the unauthenticated UART debug console of the Tenda N300 F3 (V603) allow a physically proximate attacker to obtain stored WPA2 credentials in cleartext and to read or write arbi4.6CISA ADP v3.10.2%2026-06-26
CVE-2026-36908A stack overflow in the AP4_Array::EnsureCapacity component of axiomatic-systems Bento4 before v1.8.9allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.5.5CISA ADP v3.10.2%2026-06-26
CVE-2026-36907AP4_StsdAtom::AP4_StsdAtom component of axiomatic-systems Bento4 stack-based buffer overflow5.5CISA ADP v3.10.2%2026-06-26
CVE-2026-36478Technitium DNS Server DnsServerApp denial of service7.5CISA ADP v3.10.5%2026-06-26
CVE-2026-33646Mise vulnerable to arbitrary code execution9.6CNA v3.10.7%2026-06-26Fix
CVE-2026-33560Daktronics controller Firmware unrestricted upload of file with dangerous type8.8v3.10.4%2026-06-26Fix
CVE-2026-32833Cudy LT300 OS command injection via NTP Configuration8.7CNA v4.02.4%2026-06-26Fix
CVE-2026-31928Daktronics controller Firmware use of hard-coded credentials9.8v3.10.6%2026-06-26Fix
CVE-2026-30041FastStone Image Viewer PSD parser integer overflow7.5CISA ADP v3.10.6%2026-06-26
CVE-2026-30040FastStone Image Viewer JPEG 2000 parser heap-based buffer overflow6.5CISA ADP v3.10.5%2026-06-26
CVE-2026-29509Patool path traversal via safe_extract function5.3CNA v4.00.4%2026-06-26Fix
CVE-2026-28701Daktronics controller Firmware path traversal5.3NVD v3.10.7%2026-06-26Fix
CVE-2026-28385Canonical LXD SSRF via image import from URL allows internal network probing by authenticated users5.0CNA v3.10.3%2026-06-26Fix
CVE-2026-24547SiteGround Email Marketing WordPress plugin broken access control5.3CNA v3.10.3%2026-06-26Fix
CVE-2026-21734GPU Ddk libusc OOB write at TreeRemove during WebGPU shader compilation7.7CISA ADP v3.10.2%2026-06-26Fix
CVE-2026-13434Virt-controller-rhel9: Kubevirt: Kubevirt: Multus default-network annotation injection4.9CNA v3.10.2%2026-06-26
CVE-2026-13426Mattermost github.com/mattermost/mattermost/server/public client4 fails to validate path parameters5.4CNA v3.10.3%2026-06-26Fix
CVE-2026-13372Devolutions Remote Desktop Manager incorrectly resolved name or reference7.2CISA ADP v3.10.5%2026-06-26Fix
CVE-2026-13322KubeVirt virt-handler downward metrics server denial of service3.8CNA v3.10.1%2026-06-26
CVE-2026-13318Virt-api-rhel9: Kubevirt: Kubevirt: Ssrf in virt-api port-forward6.4CNA v3.10.2%2026-06-26
CVE-2026-13226Groundhogg WordPress plugin authenticated (Custom+) SQL injection via after parameter6.5CNA v3.10.5%2026-06-26Fix
CVE-2026-13218KubeVirt virt-handler network cache handling symlink following4.2CNA v3.10.1%2026-06-26
CVE-2026-13083Red Hat Pen Drive Powered by Red Hat Lightspeed Pen-drive: Pen-drive: Stored XSS6.9CNA v3.10.3%2026-06-26
CVE-2026-12411Broken access control in Canonical LXD DevLXD API8.4CNA v3.10.3%2026-06-26Fix
CVE-2026-11779PayloadCMS Authenticated account lockout bypass through default unlock access5.3CNA v4.00.4%2026-06-26
CVE-2026-11702Bytes::Random::Secure::Tiny versions for Perl share internal state across forked processes7.5CISA ADP v3.10.5%2026-06-26
CVE-2026-11625Bytes::Random::Secure versions for Perl share internal state across forked processes7.5CISA ADP v3.10.5%2026-06-26Fix
CVE-2026-10835SALESmanago and Leadoo WordPress plugin Subscriber+ SQL injection7.7CISA ADP v3.10.4%2026-06-26Fix
CVE-2026-10823YMC Smart Filter WordPress plugin unauthenticated Private/Draft post disclosure7.5CISA ADP v3.11.5%2026-06-26NucleiFix
CVE-2026-9699Mattermost Agents plugin logs unsanitized OpenAI API keys on authentication errors6.8CNA v3.10.5%2026-06-26Fix
CVE-2026-9640LXD Snapshot Import privilege escalation7.2CNA v3.10.6%2026-06-26Fix
CVE-2026-9639Authenticated denial of service via Malicious Backup Tarball in LXD6.5CNA v3.10.5%2026-06-26Fix
CVE-2026-8797NEC ExpressUpdate Agent exposed IOCTL without access control8.5CNA v4.00.1%2026-06-26
CVE-2026-8661Server-Side cross-site scripting and SSRF in Rapid7 InsightConnect Markdown to PDF Plugin4.8CNA v3.10.4%2026-06-26Fix
CVE-2026-8380Frontend File Manager WordPress plugin Author+ arbitrary post deletion6.5CISA ADP v3.10.5%2026-06-26Exploit code
CVE-2026-6658Cross-site scripting (XSS) in jupyter/nbconvert5.4CNA v3.00.2%2026-06-26Fix
CVE-2026-5757Ollama AI Ollama Unauthenticated remote information disclosure7.5CISA ADP v3.10.7%2026-06-26
CVE-2026-4339SSRF via unvalidated attachment URLs in Mattermost Agents plugin MCP server6.5CNA v3.10.1%2026-06-26Fix
CVE-2026-3472Markdown image rendering bypass in AI bot tool result posts in Mattermost3.5CNA v3.10.3%2026-06-26Fix
CVE-2026-2053Unauthenticated server-side request forgery via WS-Addressing in WSO2 API Manager8.3CNA v3.10.4%2026-06-26Fix
CVE-2026-1869User Registration and Membership WordPress plugin unauthorized access6.5CNA v3.10.3%2026-06-26Fix
CVE-2026-0828Kernel driver vulnerability in Safetica Endpoint Client7.5CISA ADP v3.10.4%2026-06-26Exploit code
CVE-2026-0685Server side template inject (SSTI) in Edgewall Genshi Template Engine9.8CISA ADP v3.10.9%2026-06-26
CVE-2026-57700OMGF Pro WordPress plugin arbitrary file upload10.0CNA v3.10.5%2026-06-25Fix
CVE-2026-57619Elementor Website Builder WordPress plugin sensitive data exposure6.5CNA v3.10.4%2026-06-25Fix
CVE-2026-57589OpenBSD use-after-free7.8v3.10.2%2026-06-25
CVE-2026-57588SQL injection in Nessus via Malicious Scan result File Import1.6CNA v4.00.3%2026-06-25Exploit code
CVE-2026-57587SQL injection in Nessus via Reverse DNS Lookup2.1CNA v4.00.4%2026-06-25
CVE-2026-57536Insufficient validation of payment status in pretix-mollie6.3CNA v4.00.3%2026-06-25Fix
CVE-2026-57535pretix cross-site scripting2.1CNA v4.00.4%2026-06-25Fix
CVE-2026-57534Stored XSS in pretix-pages2.1CNA v4.00.4%2026-06-25Fix
CVE-2026-57533pretix cross-site scripting2.1CNA v4.00.3%2026-06-25Fix
CVE-2026-57532pretix cross-site scripting8.8CNA v4.00.4%2026-06-25Fix
CVE-2026-57522Bitwarden Server JSON injection via Webhook templates5.0v3.10.5%2026-06-25Fix
CVE-2026-57521Bitwarden Server broken access control via PreviewInvoiceController5.3CNA v4.00.4%2026-06-25Fix
CVE-2026-57520Bitwarden Server privilege escalation via Bulk User Remove endpoint7.1CNA v4.00.6%2026-06-25Fix
CVE-2026-57456Vim: Arbitrary code execution via Python Omni-Completion Docstrings8.4CNA v4.00.1%2026-06-25Fix
CVE-2026-57455Vim: Stack out-of-bounds write in `spell_soundfold_sofo` via an over-length `soundfold` argument4.0CNA v4.00.1%2026-06-25Fix
CVE-2026-57454Vim: Out-of-bounds read with Text Properties6.8CNA v4.00.2%2026-06-25Fix
CVE-2026-57453Vim: PowerShell command injection via Unescaped Filename in zip.Vim Extraction6.5CNA v3.10.2%2026-06-25Fix
CVE-2026-57452Vim: Out-of-bounds read with libsodium-encrypted files5.5CNA v3.10.2%2026-06-25Fix
CVE-2026-57451Vim: Out-of-bounds read in Text Property Count5.3CNA v3.10.2%2026-06-25Fix
CVE-2026-57438Nokogiri: Possible use-after-free in XInclude Processing2.2CNA v4.00.1%2026-06-25Fix
CVE-2026-57437Nokogiri: Possible use-after-free when directly1.7CNA v4.00.4%2026-06-25Fix
CVE-2026-57436Nokogiri: Possible use-after-free when setting `Document#root=` to an invalid node type1.7CNA v4.00.4%2026-06-25Fix
CVE-2026-57435Nokogiri: Possible use-after-free when setting an attribute value1.7CNA v4.00.5%2026-06-25Fix
CVE-2026-57434Nokogiri: Null pointer dereference calling methods on uninitialized wrapper classes1.7CNA v4.00.5%2026-06-25Fix
CVE-2026-57429Slim SEO WordPress plugin broken access control6.5CNA v3.10.3%2026-06-25Fix
CVE-2026-57236Nokogiri: Possible use-after-free when `Nokogiri::XML::Document#encoding=` raises an exception1.7CNA v4.00.4%2026-06-25Fix
CVE-2026-57235Nokogiri: Possible out-of-bounds read in `Nokogiri::XML::NodeSet#[]`6.3CNA v4.00.4%2026-06-25Fix
CVE-2026-57234Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing2.6CNA v3.10.2%2026-06-25Fix
CVE-2026-56790CANBoat off-by-one global buffer overflow in searchForPgn7.0CNA v4.00.3%2026-06-25
CVE-2026-56789Rtklib heap buffer overflow and Stack Read via Oversized RINEX Epoch Satellite Count7.1CNA v4.00.4%2026-06-25
CVE-2026-56788Rtklib out-of-bounds read via Negative Array Index in getcodepri7.1v3.10.2%2026-06-25
CVE-2026-56787Rtklib off-by-one out-of-bounds read in decode_ssr3 via RTCM3 SSR message7.5v3.10.6%2026-06-25
CVE-2026-56786Rtklib out-of-bounds write in decode_type1033 via Crafted RTCM3 message9.3CNA v4.00.7%2026-06-25
CVE-2026-56779MaxKB server-side request forgery via downloadCallbackUrl and download_url parameters5.3CNA v4.00.3%2026-06-25Fix
CVE-2026-56774Kanboard Cross-User Deletion of Persistent Login Sessions via Unvalidated Session ID5.3CNA v4.00.5%2026-06-25
CVE-2026-56772NewsBlur insecure direct object reference in Social Interactions endpoint5.3CNA v4.00.3%2026-06-25Fix
CVE-2026-56771NewsBlur server-side request forgery via add_url endpoint6.3CNA v4.00.4%2026-06-25Fix
CVE-2026-56770libais Out-of-bounds Vector Access in VdmStream::AddLine via Invalid Sequential Message ID8.7CNA v4.00.6%2026-06-25
CVE-2026-56769hcengineering platform huly Platform server-side request forgery via /import endpoint6.3CNA v4.00.4%2026-06-25
CVE-2026-56768Seahub authentication bypass in ShareLinkZipTaskView GET method8.7CNA v4.00.7%2026-06-25Fix
CVE-2026-56767Maxun Cross-Tenant IDOR in Storage and Webhook API Handlers8.7CNA v4.00.6%2026-06-25Fix
CVE-2026-56766vanhauser-thc thc-hydra hydra stack buffer overflow in NTLM Authentication handler8.6CNA v4.02.4%2026-06-25Exploit codeFix
CVE-2026-56445pydicom pynetdicom Library path traversal8.8CNA v4.00.6%2026-06-25Fix
CVE-2026-56130Apache Shiro: Remember-me cookie isn't checked for expiry on the server2.0CNA v4.00.3%2026-06-25Fix
CVE-2026-56129Dynabook Generic IO and Memory Access driver exposed IOCTL without access control6.8CNA v4.00.2%2026-06-25Exploit code
CVE-2026-56123socat heap buffer overflow via SOCKS5 Reply parser9.8v3.10.5%2026-06-25Fix
CVE-2026-56122Winstone Servlet Engine path traversal via HTTP Request Paths8.7CNA v4.00.6%2026-06-25
CVE-2026-56091Apache Shiro: Authentication bypass in Guice-Web integration8.2CNA v4.00.7%2026-06-25Fix
CVE-2026-56071Forminator WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-25Fix
CVE-2026-56054JS Help Desk WordPress plugin arbitrary file deletion7.7CNA v3.10.5%2026-06-25Fix
CVE-2026-56053EventPrime WordPress plugin PHP object injection8.8CNA v3.10.5%2026-06-25Fix
CVE-2026-56051TablePress WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-25Fix
CVE-2026-56050PPOM for WooCommerce WordPress plugin broken access control6.5CNA v3.10.3%2026-06-25Fix
CVE-2026-56049Post Snippets WordPress plugin remote code execution (RCE)8.5CNA v3.10.6%2026-06-25Fix
CVE-2026-56042Advanced Order Export For WooCommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-25Fix
CVE-2026-56023UPI QR Code Payment Gateway for WooCommerce WordPress plugin broken access control5.4CNA v3.10.3%2026-06-25Fix
CVE-2026-56014Master Slider WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-25
CVE-2026-56013License Manager for WooCommerce WordPress plugin insecure direct object references (IDOR)6.5CNA v3.10.3%2026-06-25Fix
CVE-2026-56006H5P WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-25Fix
CVE-2026-56005WP Activity Log WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-25Reported exploitedFix
CVE-2026-55967wolfSSL AES-GCM streaming API nonce reuse2.0CNA v4.00.2%2026-06-25Fix
CVE-2026-55964wolfSSL chain intermediate CA:TRUE without keyCertSign accepted as a signing CA6.3CNA v4.00.2%2026-06-25Fix
CVE-2026-55962wolfSSL TLS 1.3 post-handshake authentication authentication bypass6.0CNA v4.00.2%2026-06-25Fix
CVE-2026-55961wolfSSL wolfSSL_PKCS7_verify reports success for degenerate (certs-only) PKCS#7 with no signer8.2CNA v4.00.1%2026-06-25Fix
CVE-2026-55960wolfSSL un-negotiated Raw Public Key accepted in place of X.509, bypassing chain validation8.2CNA v4.00.2%2026-06-25Fix
CVE-2026-55958wolfSSL renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage8.3CNA v4.00.4%2026-06-25Fix
CVE-2026-55895Vim: Vimscript code injection in netrw NetrwLocalRmFile via crafted filename5.7CNA v4.00.2%2026-06-25Fix
CVE-2026-55892Vim: Out-of-bounds write in Spell File Prefix Dump5.5CNA v3.10.2%2026-06-25Fix
CVE-2026-55700pnpm stage download path traversal7.1CNA v3.10.4%2026-06-25Fix
CVE-2026-55699pnpm global bin removal path traversal6.5CNA v3.10.5%2026-06-25Fix
CVE-2026-55698pnpm package manager resolution insufficient verification of data authenticity8.8CNA v3.10.3%2026-06-25Fix
CVE-2026-55697pnpm configDependencies install engine OS command injection7.5CNA v3.10.2%2026-06-25Fix
CVE-2026-55693Vim: Out-of-bounds write in Spell File Word Count5.7CNA v4.00.1%2026-06-25Fix
CVE-2026-55667filebrowser file Browser: Out-of-scope file deletion by a Create-only scoped user8.2CNA v3.10.5%2026-06-25Fix
CVE-2026-55487pnpm peer suffix locator normalization origin validation error7.5CNA v3.10.2%2026-06-25Fix
CVE-2026-55477MHSanaei 3x-ui authenticated arbitrary file write via Database Import and Xray Log Path Manipulation7.2CNA v3.10.6%2026-06-25Fix
CVE-2026-55439Halo: Path traversal in Backup Download leads to arbitrary file read5.5CNA v3.10.5%2026-06-25Fix
CVE-2026-55413ToolJet Marketplace Plugin Poisoning enables Instance-Wide remote code execution9.4CNA v4.00.4%2026-06-25Fix
CVE-2026-55412ToolJet Cloud SSRF to Azure Cloud Infrastructure Compromise8.3CNA v3.10.3%2026-06-25Fix
CVE-2026-55411ToolJet data source credential decryption endpoint insecure direct object reference6.8CNA v3.10.2%2026-06-25Fix
CVE-2026-55180pnpm registry config variable expansion information disclosure6.5CNA v3.10.4%2026-06-25Fix
CVE-2026-55092Trivy: Path traversal via a crafted vulnerability database or other downloaded artifacts7.0CNA v4.00.4%2026-06-25Fix
CVE-2026-54917SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access7.8CNA v4.01.6%2026-06-25NucleiExploit codeFix
CVE-2026-54849Premmerce Wishlist for WooCommerce WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-25Fix
CVE-2026-54848APIExperts Square for WooCommerce WordPress plugin sensitive data exposure8.3CNA v3.10.3%2026-06-25Fix
CVE-2026-54845MDTF WordPress plugin local file inclusion8.1CNA v3.10.5%2026-06-25Fix
CVE-2026-54844CheckView Automated Testing WordPress plugin broken access control7.5CNA v3.10.3%2026-06-25Fix
CVE-2026-54843MDTF WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-25Fix
CVE-2026-54842Royal MCP WordPress plugin broken access control8.1CNA v3.10.4%2026-06-25Fix
CVE-2026-54841Vitepos WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-25Fix
CVE-2026-54838WC Vendors Marketplace WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-25Fix
CVE-2026-54836Filter and Grids WordPress plugin SQL injection9.3CNA v3.11.3%2026-06-25NucleiFix
CVE-2026-54830Five Star Restaurant Reservations WordPress plugin broken access control7.5CNA v3.10.3%2026-06-25Fix
CVE-2026-54829WP Photo Album Plus WordPress plugin SQL injection7.5CNA v3.10.3%2026-06-25Fix
CVE-2026-54828Motors WordPress plugin broken access control7.5CNA v3.10.3%2026-06-25Fix
CVE-2026-54823Widget Options WordPress plugin remote code execution (RCE)9.9CNA v3.10.8%2026-06-25Fix
CVE-2026-54822SALESmanago and Leadoo WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-25Fix
CVE-2026-54821Visual Link Preview WordPress plugin sensitive data exposure7.4CNA v3.10.3%2026-06-25Fix
CVE-2026-54679jq string append function integer overflow6.9CNA v4.00.1%2026-06-25Fix
CVE-2026-54573outline authorization bypass in API Key/OAuth Scopes via Path Parsing Discrepancy5.3CNA v4.00.5%2026-06-25Fix
CVE-2026-54479EVoke Systems EVoke CSMS insufficient session expiration6.9CNA v4.00.4%2026-06-25Fix
CVE-2026-54448Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser6.9CNA v4.00.4%2026-06-25Fix
CVE-2026-54250K3s: ZIP Archive path traversal vulnerability in etcd Snapshot Decompression5.8CNA v3.10.2%2026-06-25Fix
CVE-2026-54226Apache Kvrocks: RESTORE IntSet integer overflow leads to remote DoS6.4CNA v4.00.4%2026-06-25Fix
CVE-2026-54097File Browser share-link deletion insecure direct object reference7.2CNA v4.00.5%2026-06-25Fix
CVE-2026-54096filebrowser File Browser: Improper access control Occurs8.4CNA v3.10.2%2026-06-25Fix
CVE-2026-54094File Browser HTTP file handlers symlink following7.5CNA v3.10.5%2026-06-25Fix
CVE-2026-54093filebrowser file Browser: Path traversal in download-as-zip/tar6.8CNA v4.00.2%2026-06-25Fix
CVE-2026-54092filebrowser File Browser: DoS vulnerability on Public Login API6.5CNA v3.10.5%2026-06-25Fix
CVE-2026-54091filebrowser file Browser: Incorrect access control in public directory shares via rule path rebasing7.5CNA v3.10.5%2026-06-25Fix
CVE-2026-54090filebrowser File Browser: Command Allowlist Bypass via Shell Metacharacter injection8.7CNA v4.00.4%2026-06-25Fix
CVE-2026-54089filebrowser File Browser: Authentication bypass via Proxy Auth Header Forgery9.1CNA v3.10.6%2026-06-25
CVE-2026-54088filebrowser File Browser: Command injection9.3CNA v4.00.8%2026-06-25Exploit codeFix
CVE-2026-54040LibreChat: 2FA Backup Code Regeneration without OTP Verification allows 2FA Bypass5.9CNA v3.10.3%2026-06-25Fix
CVE-2026-54037LibreChat: Incomplete Fix for /API/convos/duplicate lacks Rate Limiting Applied to /API/convos/fork6.5CNA v3.10.5%2026-06-25Fix
CVE-2026-54036LibreChat: 2FA Re-enrollment allows Full Account 2FA takeover without OTP Verification5.3CNA v3.10.4%2026-06-25Fix
CVE-2026-54033LibreChat custom API endpoint server-side request forgery7.7CNA v3.10.4%2026-06-25Fix
CVE-2026-54030LibreChat: Missing Resource Parameter Validation in MCP OAuth Flow8.0CNA v3.10.2%2026-06-25Fix
CVE-2026-54029LibreChat: IDOR in Message Deletion Incomplete Fix for Leaves deleteMessages without User Filter5.3CNA v3.10.3%2026-06-25Fix
CVE-2026-54027LibreChat image upload endpoint missing authorization6.5CNA v3.10.3%2026-06-25Fix
CVE-2026-54025LibreChat: Stored XSS via unescaped image alt text in markdown artifact preview5.4CNA v3.10.2%2026-06-25Fix
CVE-2026-54024LibreChat: Incomplete Fix for Conversation Import Multer Instance Missing File Size Limits6.5CNA v3.10.4%2026-06-25Fix
CVE-2026-53925Glances: Arbitrary file write and command execution7.8CNA v3.10.2%2026-06-25Fix
CVE-2026-53277Linux kernel KVM arm64 page table walker improper synchronization8.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53276Linux kernel Bluetooth ISO hci_conn handling use-after-free7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53275Linux kernel IPv6 MLD query processing use-after-free8.8CNA v3.10.3%2026-06-25Fix
CVE-2026-53274Linux kernel SMC socket option handling denial of service5.5v3.10.2%2026-06-25Fix
CVE-2026-53273Linux kernel OP-TEE supplicant request handling use-after-free7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53272Linux kernel EROFS decompression use-after-free7.8NVD v3.10.1%2026-06-25Fix
CVE-2026-53271Linux kernel ksmbd oplock and lease break notifiers null pointer dereference5.5v3.10.2%2026-06-25Fix
CVE-2026-53270Linux kernel IPVS scheduler binding vulnerability7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53269Linux kernel netfilter SYNPROXY race condition5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53268Linux kernel netfilter IRC connection tracking helper out-of-bounds read8.2CNA v3.10.4%2026-06-25Fix
CVE-2026-53267Linux kernel netfilter nft_ct expression vulnerability7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53266Linux Kernel out-of-bounds write8.8CNA v3.10.8%2026-06-25KEVExploit codeFix
CVE-2026-53265Linux kernel device mapper cache SMQ policy race condition7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53264Linux kernel act_api use-after-free7.8CNA v3.10.2%2026-06-25Fix
CVE-2026-53263Linux kernel 6LoWPAN multicast address compression off-by-one error5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53262Linux kernel L2TP PPPoL2TP ioctl handling use-after-free7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53261Linux kernel devlink memory leak5.5v3.10.2%2026-06-25Fix
CVE-2026-53260Linux kernel TCP request socket queue use-after-free9.8CNA v3.10.3%2026-06-25Fix
CVE-2026-53259Linux kernel IPv6 anycast address handling use-after-free7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53258Linux kernel cfg80211 6 GHz scan handling memory leak5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53257Linux kernel cfg80211 HE/EHT capability handling vulnerability5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53256Linux kernel Bluetooth RFCOMM listener socket use-after-free8.0CNA v3.10.3%2026-06-25Fix
CVE-2026-53255Linux kernel Bluetooth MGMT advertising data parser out-of-bounds read7.1NVD v3.10.1%2026-06-25Fix
CVE-2026-53254Linux kernel Bluetooth RFCOMM MCC handlers out-of-bounds read8.1CNA v3.10.3%2026-06-25Fix
CVE-2026-53253Linux kernel Bluetooth BNEP out-of-bounds read7.1CNA v3.10.3%2026-06-25Fix
CVE-2026-53252Linux kernel Bluetooth HCI device allocation memory leak5.5v3.10.1%2026-06-25Fix
CVE-2026-53251Linux kernel Bluetooth ISO hdev reference handling vulnerability5.5v3.10.2%2026-06-25Fix
CVE-2026-53250Linux kernel xsk time-of-check time-of-use race condition7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53249Linux kernel IPv4 source route options vulnerability5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53248Linux kernel Airoha Ethernet driver use-after-free8.8CNA v3.10.4%2026-06-25Fix
CVE-2026-53247Linux kernel mtk_eth_soc use-after-free9.8CNA v3.10.7%2026-06-25Fix
CVE-2026-53246Linux kernel SCTP COOKIE_ECHO processing out-of-bounds write9.8CNA v3.10.4%2026-06-25Fix
CVE-2026-53245Linux kernel MRP vector attribute parser vulnerability5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53244In the Linux kernel, the following vulnerability has been resolved: VFS: fix possible failure to unlock in nfsd4_create_file() atomic_create() in fs/namei.c drops the reference to the dentry when it returns an error. This behaviour was imported into dentry_create() so that it will drop the referen7.5CNA v3.10.3%2026-06-25Fix
CVE-2026-53243Linux kernel rseq exit path information disclosure5.5v3.10.1%2026-06-25Fix
CVE-2026-53242Linux kernel ALSA PCM drain wait queue null pointer dereference7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53241Linux kernel ALSA sequencer dummy client vulnerability5.5v3.10.2%2026-06-25Fix
CVE-2026-53240Linux kernel XFRM IP-TFS reassembly use-after-free8.8CNA v3.10.4%2026-06-25Fix
CVE-2026-53239Linux kernel XFRM policy inexact bin use-after-free7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53238Linux kernel NetLabel unlabeled address handling vulnerability5.5v3.10.2%2026-06-25Fix
CVE-2026-53237Linux kernel mvebu GPIO PWM suspend/resume null pointer dereference5.5v3.10.2%2026-06-25Fix
CVE-2026-53236Linux kernel TCP socket filter attachment information disclosure5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53235Linux kernel GRO skb list receive path denial of service7.5CNA v3.10.4%2026-06-25Fix
CVE-2026-53234Linux kernel IBM EMAC network driver use-after-free7.8v3.10.2%2026-06-25Fix
CVE-2026-53233Linux kernel netdev genetlink RX queue binding double free7.8v3.10.2%2026-06-25Fix
CVE-2026-53232Linux kernel PHY SFP upstream cleanup vulnerability8.8CNA v3.10.3%2026-06-25Fix
CVE-2026-53231Linux kernel PHY SFP cage setup deadlock5.5v3.10.1%2026-06-25Fix
CVE-2026-53230Linux kernel mlx5 vport MAC list query out-of-bounds read8.7CNA v3.10.1%2026-06-25Fix
CVE-2026-53229Linux kernel mlx5e XSK zero-copy driver memory leak7.5CNA v3.10.4%2026-06-25Fix
CVE-2026-53228In the Linux kernel, the following vulnerability has been resolved: ipv6: sit: reload inner IPv6 header after GSO offloads ipip6_tunnel_xmit() caches the inner IPv6 header pointer at function entry and continues using it after iptunnel_handle_offloads(). For GSO skbs, iptunnel_handle_offloads() c9.8CNA v3.10.6%2026-06-25Fix
CVE-2026-53227Linux kernel openvswitch memory leak5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53226Linux kernel Rockchip GPIO driver IRQ chip memory leak5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53225Linux kernel SCTP ASCONF chunk lookup vulnerability9.1CNA v3.10.6%2026-06-25Fix
CVE-2026-53224Linux kernel SCTP cookie echo handling out-of-bounds read9.1CNA v3.10.5%2026-06-25Fix
CVE-2026-53223Linux kernel socket timestamp control message handling vulnerability7.1CNA v3.10.1%2026-06-25Fix
CVE-2026-53222Linux kernel PTP OCP driver use-after-free5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53221Linux kernel IPv6 VTI tunnel lookup vulnerability9.8CNA v3.10.6%2026-06-25Fix
CVE-2026-53220Linux kernel netfilter kernel panic5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53219Linux kernel x_tables rule counter interface information disclosure5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53218Linux kernel nft_exthdr uninitialized memory use5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53217Linux kernel mvpp2 Ethernet driver DMA buffer sync vulnerability8.6CNA v3.10.4%2026-06-25Fix
CVE-2026-53216Linux kernel mvpp2 Ethernet driver XDP buffer handling vulnerability9.8CNA v3.10.5%2026-06-25Fix
CVE-2026-53215Linux kernel mvpp2 Ethernet driver RX buffer pool vulnerability9.8CNA v3.10.5%2026-06-25Fix
CVE-2026-53214Linux kernel ipv6 null pointer dereference5.5v3.10.2%2026-06-25Fix
CVE-2026-53213Linux kernel vc4 GPU driver memory leak5.5v3.10.1%2026-06-25Fix
CVE-2026-53212Linux kernel nft_tunnel use-after-free7.8CNA v3.10.2%2026-06-25Fix
CVE-2026-53211Linux kernel nftables bridge meta expression vulnerability5.5v3.10.2%2026-06-25Fix
CVE-2026-53210Linux kernel shm memory leak5.5v3.10.2%2026-06-25Fix
CVE-2026-53209Linux kernel Bluetooth extended advertising data buffer out-of-bounds write7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53208Linux kernel Bluetooth L2CAP signaling channel vulnerability5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53207Linux kernel hugetlb hwpoison handler deadlock5.5v3.10.1%2026-06-25Fix
CVE-2026-53206In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds check for firmware runtime memory Validate that the firmware runtime memory specified in the image header is properly aligned and sized to hold the firmware image. This prevents errors during memory allocati5.5v3.10.1%2026-06-25Fix
CVE-2026-53205Linux kernel accel/ivpu out-of-bounds write7.1CNA v3.10.1%2026-06-25Fix
CVE-2026-53204Linux kernel Stratix10 RSU firmware driver null pointer dereference5.5v3.10.1%2026-06-25Fix
CVE-2026-53203Linux kernel accel/ivpu buffer overflow7.1CNA v3.10.1%2026-06-25Fix
CVE-2026-53202Linux kernel accel/ivpu buffer overflow7.8CNA v3.10.2%2026-06-25Fix
CVE-2026-53201Linux kernel Xe GPU exec queue suspend vulnerability7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53200Linux kernel KVM arm64 nested virtualization vulnerability8.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53199Linux kernel Hyper-V netvsc send buffer vulnerability7.5CNA v3.10.5%2026-06-25Fix
CVE-2026-53198Linux kernel ksmbd SMB2 lock cancellation use-after-free8.8CNA v3.10.4%2026-06-25Fix
CVE-2026-53197Linux kernel iptfs deadlock5.5v3.10.1%2026-06-25Fix
CVE-2026-53196Linux kernel io_ti USB serial EEPROM reader out-of-bounds write6.8v3.10.3%2026-06-25Fix
CVE-2026-53195Linux kernel io_ti USB serial firmware loader out-of-bounds write7.8v3.10.2%2026-06-25Fix
CVE-2026-53194Linux kernel kl5kusb105 USB serial driver out-of-bounds write7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53193Linux kernel ALSA timer instance teardown use-after-free7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53192Linux kernel ALSA sequencer timer ioctl use-after-free7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53191Linux kernel io_uring bundle receive vulnerability7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53190Linux kernel virtio GPU fence wait memory leak5.5v3.10.2%2026-06-25Fix
CVE-2026-53189Linux kernel transparent huge page split vulnerability7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53188Linux kernel RDMA user capability device vulnerability8.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53187Linux kernel RDMA DMAH allocation out-of-bounds write7.1CNA v3.10.1%2026-06-25Fix
CVE-2026-53186Linux kernel SRP initiator response handling vulnerability9.1CNA v3.10.5%2026-06-25Fix
CVE-2026-53185Linux kernel zram write path use-after-free7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53184Linux kernel UDP sockmap receive path vulnerability7.5CNA v3.10.5%2026-06-25Fix
CVE-2026-53183Linux kernel MPTCP subflow receive window vulnerability7.5CNA v3.10.5%2026-06-25Fix
CVE-2026-53182Linux kernel nl80211 EMA RNR parser vulnerability7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53181Linux kernel VMCI vsock transport memory leak5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53180Linux kernel timer migration subsystem vulnerability7.5CNA v3.10.3%2026-06-25Fix
CVE-2026-53179Linux kernel rtl8723bs Wi-Fi driver out-of-bounds read7.1NVD v3.10.1%2026-06-25Fix
CVE-2026-53178Linux kernel rtl8723bs Wi-Fi driver integer underflow8.1CNA v3.10.3%2026-06-25Fix
CVE-2026-53177Linux kernel bnxt_en Ethernet driver null pointer dereference5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53176Linux kernel IB/isert integer underflow9.8CNA v3.10.8%2026-06-25Fix
CVE-2026-53175Linux kernel IP fragment reassembly teardown use-after-free9.8CNA v3.10.5%2026-06-25Fix
CVE-2026-53174In the Linux kernel, the following vulnerability has been resolved: ovl: keep err zero after successful ovl_cache_get() ovl_iterate_merged() stores PTR_ERR(cache) in err before checking IS_ERR(cache). On success err holds the truncated cache pointer and can be returned as a bogus non-zero error.7.8CNA v3.10.2%2026-06-25Fix
CVE-2026-53173Linux kernel ethosu command stream copy and validate out-of-bounds write7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53172Linux kernel ethosu command stream IFM region parsing out-of-bounds read7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53171Linux kernel ethosu DMA region size calculation vulnerability8.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53170Linux kernel ethosu DMA command length validation vulnerability8.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53169Linux kernel ethosu NPU_OP_RESIZE command handling denial of service5.5v3.10.1%2026-06-25Fix
CVE-2026-53168Linux kernel FUSE directory pagecache operations vulnerability5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53167Linux kernel FUSE page cache retrieval vulnerability5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53165Linux kernel iomap buffered read error reporting null pointer dereference7.5CNA v3.10.3%2026-06-25Fix
CVE-2026-53164Linux kernel IOMMU DMA swiotlb mapping vulnerability5.5v3.10.2%2026-06-25Fix
CVE-2026-53163Linux kernel rtmutex futex requeue null pointer dereference5.5v3.10.1%2026-06-25Fix
CVE-2026-53162Linux kernel memcg stock draining vulnerability7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53161Linux kernel fastrpc device release workqueue use-after-free7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53160Linux kernel fastrpc map creation use-after-free7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53159Linux kernel fastrpc DMA address calculation integer underflow8.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53158Linux kernel fastrpc rpmsg callback null pointer dereference5.5v3.10.1%2026-06-25Fix
CVE-2026-53157Linux kernel phonet device teardown use-after-free7.8v3.10.1%2026-06-25Fix
CVE-2026-53156Linux kernel nvmem core error paths use-after-free7.8NVD v3.10.1%2026-06-25Fix
CVE-2026-53155Linux kernel device-private PMD migration entries vulnerability5.5v3.10.1%2026-06-25Fix
CVE-2026-53154Linux kernel hugetlb folio copy path missing resource release5.5v3.10.2%2026-06-25Fix
CVE-2026-53153Linux kernel memcg list_lru reparenting vulnerability7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53152Linux kernel dw_mmc-rockchip driver null pointer dereference5.5v3.10.2%2026-06-25Fix
CVE-2026-53151Linux kernel rxrpc ACK parser vulnerability9.8CNA v3.10.7%2026-06-25Fix
CVE-2026-53150Linux kernel XDomain property entry validation integer underflow5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53149Linux kernel thunderbolt out-of-bounds read7.1NVD v3.10.1%2026-06-25Fix
CVE-2026-53148Linux kernel XDomain properties response handling out-of-bounds write7.8NVD v3.10.1%2026-06-25Fix
CVE-2026-53147Linux kernel XDomain request packet handling out-of-bounds read8.1CNA v3.10.3%2026-06-25Fix
CVE-2026-53146Linux kernel XDomain response handling vulnerability7.1CNA v3.10.3%2026-06-25Fix
CVE-2026-53145Linux kernel GEM handle change ioctl race condition7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53144Linux kernel debug trap queue ID handling null pointer dereference5.5v3.10.2%2026-06-25Fix
CVE-2026-53143Linux kernel SDMA queue checkpoint and restore out-of-bounds write7.8v3.10.2%2026-06-25Fix
CVE-2026-53142Linux kernel display suspend and shutdown handling null pointer dereference5.5v3.10.2%2026-06-25Fix
CVE-2026-53141Linux kernel global performance monitor reference counting memory leak5.5v3.10.2%2026-06-25Fix
CVE-2026-53140Linux kernel indirect compute shader dispatch buffer mapping memory leak5.5v3.10.2%2026-06-25Fix
CVE-2026-53139Linux kernel compute shader dispatch workgroup validation vulnerability5.5v3.10.1%2026-06-25Fix
CVE-2026-53138Linux kernel VBIOS record-chain parsing out-of-bounds read7.1v3.10.1%2026-06-25Fix
CVE-2026-53137Linux kernel HDMI HDCP2 receiver ID list handling out-of-bounds write7.8v3.10.2%2026-06-25Fix
CVE-2026-53136Linux kernel VBIOS HDMI retimer register parsing out-of-bounds write7.8v3.10.1%2026-06-25Fix
CVE-2026-53135Linux kernel SDP message debugfs interface null pointer dereference5.5v3.10.2%2026-06-25Fix
CVE-2026-53134Linux kernel nft_fib OIFNAME register vulnerability5.5NVD v3.10.1%2026-06-25Fix
CVE-2026-53133Linux kernel block iterator incorrect numeric conversion7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-53132Linux kernel virtio vsock receive queue memory leak7.1CNA v3.10.1%2026-06-25Fix
CVE-2026-53131Linux kernel Ethernet header access in netfilter matches vulnerability9.4CNA v3.10.4%2026-06-25Fix
CVE-2026-52690PowerDNS Recursor spoofed answers can mark an authoritative non-EDNS capable5.9CNA v3.10.4%2026-06-25Fix
CVE-2026-50573pnpm lockfile integrity check insufficient verification of data authenticity6.8CNA v3.10.2%2026-06-25Fix
CVE-2026-50549Cursor Desktop sandbox escape via symlink and failed path canonicalization9.3CNA v4.01.0%2026-06-25Fix
CVE-2026-50548Cursor Desktop sandbox escape via agent-controlled working directory9.3CNA v4.01.0%2026-06-25Fix
CVE-2026-50176EVoke Systems EVoke CSMS improper restriction of excessive authentication attempts8.7CNA v4.00.7%2026-06-25Fix
CVE-2026-50021pnpm has an Integrity Check Bypass via Missing Lockfile Integrity field6.8CNA v3.10.2%2026-06-25Fix
CVE-2026-50017pnpm binds unscoped user-level npm auth credentials to a repository-selected registry6.9CNA v4.00.4%2026-06-25Fix
CVE-2026-50016pnpm dependency alias path handling path traversal8.8CNA v3.10.5%2026-06-25Fix
CVE-2026-50015pnpm vulnerable to arbitrary file write/Delete via Malicious Patch file (path traversal)7.3CNA v3.10.4%2026-06-25Fix
CVE-2026-50014pnpm git fetch commit resolution argument injection6.4CNA v3.10.3%2026-06-25Fix
CVE-2026-49839jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow7.1CNA v3.10.2%2026-06-25Fix
CVE-2026-49506Dell Wyse Management Suite path traversal7.2CNA v3.10.9%2026-06-25Fix
CVE-2026-49319Alps Electric Co., Ltd. R53R0 Remote Keyless Entry System (RKES) Replay Attack6.9CNA v4.00.3%2026-06-25
CVE-2026-48995pnpm GitHub git dependency lockfile missing integrity check4.8CNA v4.00.2%2026-06-25Fix
CVE-2026-48946Joomla extension getk2.org Privileged RCE vulnerability in K2 extension for Joomla6.3CISA ADP v3.10.3%2026-06-25
CVE-2026-48945Joomla extension getk2.org Privileged RCE vulnerability in K2 extension for Joomla5.3CISA ADP v3.10.3%2026-06-25
CVE-2026-48944K2 attachment copy handler path traversal6.5CISA ADP v3.10.4%2026-06-25
CVE-2026-48943Joomla extension getk2.org Authenticated user property mass-assignment in K2 extension for Joomla6.5CISA ADP v3.10.3%2026-06-25
CVE-2026-48942Joomla extension getk2.org Stored-XSS in K2 extension for Joomla6.1CISA ADP v3.10.3%2026-06-25
CVE-2026-48941Joomla extension getk2.org Unauthenticated folder delete in K2 extension for Joomla6.5CISA ADP v3.10.3%2026-06-25
CVE-2026-48940Joomla extension getk2.org Stored-XSS in K2 extension for Joomla3.4CISA ADP v3.10.3%2026-06-25
CVE-2026-47770jq structural equality comparison stack exhaustion6.8CNA v4.00.2%2026-06-25Fix
CVE-2026-47154Simple Metering GetProfileResponse interval-bounds bug in EmberZNet7.1CNA v4.00.4%2026-06-25Fix
CVE-2026-47153Level Control Step with On/Off divide-by-zero in EmberZNet7.1CNA v4.00.4%2026-06-25Fix
CVE-2026-47152Level Control Move divide-by-zero in EmberZNet7.1CNA v4.00.4%2026-06-25Fix
CVE-2026-47151Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet7.1CNA v4.00.4%2026-06-25Fix
CVE-2026-47150IAS Zone enroll invalid table index and write in EmberZNet7.1CNA v4.00.4%2026-06-25Fix
CVE-2026-47149Door Lock GetUserType invalid table index in EmberZNet7.1CNA v4.00.4%2026-06-25Fix
CVE-2026-47148Groups GetGroupMembership count/list-length mismatch in EmberZNet7.1CNA v4.00.4%2026-06-25Fix
CVE-2026-47147OTA server raw parser missing per-field bounds validation in EmberZNet7.1CNA v4.00.4%2026-06-25Fix
CVE-2026-47146Color Control color-temperature assertion abort in EmberZNet7.1CNA v4.00.4%2026-06-25Fix
CVE-2026-47145Color Control hue/saturation assertion abort in EmberZNet7.1CNA v4.00.4%2026-06-25Fix
CVE-2026-46752Apache Kvrocks: Stack buffer overflow in Lua bit.tohex10.0CNA v4.00.5%2026-06-25Fix
CVE-2026-46751Apache Kvrocks Lua sandbox denial of service5.5CNA v4.00.3%2026-06-25Fix
CVE-2026-46735Dell Display and Peripheral Manager OS command injection7.8CNA v3.10.8%2026-06-25Fix
CVE-2026-46734Dell Display and Peripheral Manager improper certificate validation7.3CNA v3.10.1%2026-06-25Fix
CVE-2026-46733Dell Display and Peripheral Manager improper access control7.8CNA v3.10.1%2026-06-25Fix
CVE-2026-46732Dell Display and Peripheral Manager race condition6.7CNA v3.10.1%2026-06-25Fix
CVE-2026-46611Glances: XML-RPC Server Missing host Header Validation enables DNS Rebinding Attack5.3CNA v3.10.2%2026-06-25Fix
CVE-2026-46608Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard7.4CNA v3.10.4%2026-06-25Fix
CVE-2026-46607Glances: Insecure Pickle deserialization in Version Cache leads to arbitrary code execution7.8CNA v3.10.4%2026-06-25Fix
CVE-2026-46606Glances: Command injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py7.8CNA v3.10.2%2026-06-25Fix
CVE-2026-46602Lack of limit on tile sizes in x/image/tiff in golang.org/x/image7.5CISA ADP v3.10.6%2026-06-25Fix
CVE-2026-46601Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image7.5CISA ADP v3.10.6%2026-06-25Fix
CVE-2026-45233HTMLy CMS path traversal via oldfile parameter in Autosave7.2CNA v4.00.9%2026-06-25
CVE-2026-45188Apache Kvrocks: Replication Fullsync path traversal via Unvalidated Filename Handling2.4CNA v4.00.2%2026-06-25Fix
CVE-2026-44622EVoke Systems EVoke CSMS insufficiently protected credentials6.9CNA v4.00.4%2026-06-25Fix
CVE-2026-42390PowerDNS Recursor ZONEMD validation can be bypassed5.3CNA v3.10.3%2026-06-25Fix
CVE-2026-42389PowerDNS Recursor reject more queries with invalid header values5.3CNA v3.10.3%2026-06-25Fix
CVE-2026-42388PowerDNS Recursor missing input validation for catalog zones5.9CNA v3.10.5%2026-06-25Fix
CVE-2026-42387PowerDNS Recursor insufficient input validation in ZoneToCache5.9CNA v3.10.5%2026-06-25Fix
CVE-2026-42005PowerDNS Authoritative insufficient input validation of internal web server4.3CNA v3.10.6%2026-06-25Fix
CVE-2026-42004PowerDNS DNSdist EDNS options smuggling3.7CNA v3.10.2%2026-06-25Fix
CVE-2026-41566Apache Kvrocks: Improper permission for the APPLYBATCH command9.4CNA v4.00.4%2026-06-25Fix
CVE-2026-41120Dell Wyse Management Suite acceptance of untrusted data9.8CNA v3.10.4%2026-06-25Fix
CVE-2026-40941Cacti: Package Import signature validation Bypass allows Self-Signed Packages7.1CNA v4.00.3%2026-06-25Fix
CVE-2026-40702EVoke Systems EVoke CSMS missing authentication for critical function9.3CNA v4.00.6%2026-06-25Fix
CVE-2026-40211PowerDNS DNSdist denial of service via crafted DoH3 queries5.3CNA v3.10.7%2026-06-25Fix
CVE-2026-40210PowerDNS DNSdist out-of-bounds read in SetMacAddrAction4.8CNA v3.10.7%2026-06-25Fix
CVE-2026-40209PowerDNS DNSdist denial of service via IXFR queries5.3CNA v3.10.7%2026-06-25Fix
CVE-2026-40208PowerDNS DNSdist denial of service via DoH3 queries3.7CNA v3.10.4%2026-06-25Fix
CVE-2026-40084Cacti: Arbitrary file read via path traversal in Report `format_file` parameter6.5CNA v3.10.5%2026-06-25Fix
CVE-2026-40083Cacti: SQL injection in managers.php7.2CNA v3.10.5%2026-06-25Exploit codeFix
CVE-2026-40082Cacti: Session fixation via missing session_regenerate_id after login5.4CNA v3.10.3%2026-06-25Fix
CVE-2026-40080Cacti: Open redirect via HTTP_REFERER substring check in auth_login_redirect6.1CNA v3.10.3%2026-06-25Fix
CVE-2026-40079Cacti: Command injection via escape_command no-op in RRDtool execution8.6CNA v4.01.7%2026-06-25Fix
CVE-2026-40012PowerDNS Recursor packet cache vulnerability5.3CNA v3.10.5%2026-06-25Fix
CVE-2026-40011PowerDNS DNSdist prometheus denial of service via crafted DNS queries3.7CNA v3.10.2%2026-06-25Fix
CVE-2026-39951Cacti: Stored SQL injection via graph_name_regexp in Reports feature7.6CNA v3.10.4%2026-06-25Fix
CVE-2026-38640relibc assert failure handler denial of service7.5CISA ADP v3.10.6%2026-06-25
CVE-2026-38637relibc pthread rwlock attribute handling denial of service7.5CISA ADP v3.10.6%2026-06-25
CVE-2026-37454MSI Center insecure permissions7.5CISA ADP v3.10.3%2026-06-25Fix
CVE-2026-37453MSI Center insecure permissions7.5CISA ADP v3.10.5%2026-06-25Fix
CVE-2026-37452MSI NBFoundation Service v.2.0.2506.1201 insecure permissions7.5CISA ADP v3.10.5%2026-06-25
CVE-2026-37149Grocery Store Management System product search page SQL injection7.7CISA ADP v3.10.2%2026-06-25Exploit code
CVE-2026-33612PowerDNS Recursor ZoneToCache can poison the cache7.5CNA v3.10.1%2026-06-25Fix
CVE-2026-28898Apple swift-nio-http2 improper output encoding5.3CISA ADP v3.10.3%2026-06-25Fix
CVE-2026-27366MainWP Child WordPress plugin broken access control7.5CNA v3.10.3%2026-06-25Fix
CVE-2026-22879vtk A heap-based buffer overflow8.1CNA v3.10.5%2026-06-25Fix
CVE-2026-13351Zephyr IPv6 fragment reassembly denial of service7.5CNA v3.10.5%2026-06-25
CVE-2026-13350pretix Venueless insecure direct object reference2.3CNA v4.00.3%2026-06-25
CVE-2026-13314Stored XSS in pretix-digital2.0CNA v4.00.4%2026-06-25Fix
CVE-2026-13311shell-quote parse is quadratic in token count, enabling denial of service8.7CNA v4.00.6%2026-06-25Fix
CVE-2026-13283Google Chrome AdFilter use-after-free7.5CISA ADP v3.10.3%2026-06-25Fix
CVE-2026-13282Google Chrome Payments use-after-free6.8CISA ADP v3.10.2%2026-06-25Fix
CVE-2026-13281Google Chrome Mojo integer overflow8.3CISA ADP v3.10.3%2026-06-25Fix
CVE-2026-13225pretix ticket confirmation page stored cross-site scripting5.3CNA v4.00.4%2026-06-25Fix
CVE-2026-13223Insufficient validation of payment status in pretix-computop6.3CNA v4.00.3%2026-06-25Fix
CVE-2026-13222Insufficient validation of payment status in pretix-oppwa6.3CNA v4.00.3%2026-06-25Fix
CVE-2026-12993Apicurio/apicurio-registry: Apicurio-registry: Xml entity-expansion denial of service6.5CNA v3.10.5%2026-06-25Fix
CVE-2026-12992Apicurio/apicurio-registry: Apicurio-registry: Ssrf7.4CNA v3.10.3%2026-06-25Fix
CVE-2026-12975Apicurio Registry content-type detection XML external entity injection8.5CNA v3.10.4%2026-06-25Fix
CVE-2026-12937Tourfic WordPress plugin unauthenticated SQL injection via post_id parameter7.5CNA v3.10.5%2026-06-25Fix
CVE-2026-12921AzeoTech DAQFactory .ctl file parser use-after-free7.8v3.10.2%2026-06-25
CVE-2026-12897Out-of-bounds read in Horner Automation Cscape8.4CNA v4.00.2%2026-06-25Fix
CVE-2026-12844List::SomeUtils::XS versions for Perl have a heap buffer overflow in the pairwise function7.5CISA ADP v3.10.7%2026-06-25Fix
CVE-2026-12755Devolutions Server PAM AD discovery endpoints improper input validation2.7CISA ADP v3.10.4%2026-06-25Fix
CVE-2026-12635Reliance on Reverse DNS Resolution for a Security-Critical action in GitLab0.0CNA v3.10.2%2026-06-25Fix
CVE-2026-12490NLnet Labs NSD bypass of client certificate verification with transfer over TLS8.2CNA v4.00.2%2026-06-25Fix
CVE-2026-12473OHIF Viewers DICOM server-side request forgery8.3CNA v4.00.4%2026-06-25Fix
CVE-2026-12340wolfSSL out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation6.3CNA v4.00.3%2026-06-25Fix
CVE-2026-12246NLnet Labs NSD out-of-bounds stack write with crafted APL RR7.2CNA v4.00.4%2026-06-25Fix
CVE-2026-12245NLnet Labs NSD denial of DNS over TLS service by any DoT client8.7CNA v4.00.5%2026-06-25Fix
CVE-2026-12244NLnet Labs NSD heap overflow and crash with crafted SVCB RR8.7CNA v4.00.5%2026-06-25Fix
CVE-2026-12079Dokan Pro WordPress plugin authenticated (Subscriber+) SQL injection via orderby parameter6.5CNA v3.10.4%2026-06-25Fix
CVE-2026-12077Dokan Pro WordPress plugin unauthenticated SQL injection via latitude and longitude parameters7.5CNA v3.10.5%2026-06-25Fix
CVE-2026-12053Insertion of sensitive information into log file in GitLab8.6CNA v3.10.6%2026-06-25Fix
CVE-2026-11999wolfSSL X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert8.2CNA v4.00.2%2026-06-25Fix
CVE-2026-11800Org.keycloak:keycloak-services: Keycloak: Authentication bypass via JWT algorithm confusion8.1CNA v3.10.3%2026-06-25Fix
CVE-2026-11703wolfSSL missing SNI/ALPN binding on stateful (session-ID) TLS session resumption6.0CNA v4.00.4%2026-06-25Fix
CVE-2026-11379Incorrect authorization in GitLab5.3CNA v3.10.3%2026-06-25Fix
CVE-2026-11310wolfSSL X.509 trust-chain bypass in wolfSSL_X509_verify_cert via untrusted intermediate anchoring8.7CNA v4.00.2%2026-06-25Fix
CVE-2026-10833Gutenberg Essential Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-25Fix
CVE-2026-10824Masteriyo LMS WordPress plugin unauthenticated Course Progress disclosure and deletion6.5CISA ADP v3.10.3%2026-06-25Fix
CVE-2026-10712Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.0CNA v3.10.4%2026-06-25Fix
CVE-2026-10592wolfSSL wildcard DNS SAN bypasses CA name-constraint checks6.3CNA v4.00.2%2026-06-25Fix
CVE-2026-10512wolfSSL X25519 x86_64 assembly final reduction leaves non-canonical field element2.3CNA v4.00.5%2026-06-25Fix
CVE-2026-10098wolfSSL OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status6.3CNA v4.00.2%2026-06-25Fix
CVE-2026-10097wolfSSL ML-KEM-1024 AVX2 decapsulation incorrect comparison8.3CNA v4.00.3%2026-06-25Fix
CVE-2026-10086Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.3%2026-06-25Fix
CVE-2026-9800Keycloak-policy-enforcer: Keycloak policy enforcer: Authorization bypass8.1CNA v3.10.7%2026-06-25Fix
CVE-2026-9799Red Hat Keycloak UMA authorization service insecure direct object reference4.6CNA v3.10.3%2026-06-25Fix
CVE-2026-9787Quest NetVault Backup NVBULogDaemon command injection remote code execution8.8CNA v3.05.5%2026-06-25Fix
CVE-2026-9786Quest NetVault Backup NVBUDashboard SQL injection remote code execution8.8CNA v3.00.9%2026-06-25Fix
CVE-2026-9785Quest NetVault Backup NVBULibrarySlot SQL injection remote code execution8.8CNA v3.00.9%2026-06-25Fix
CVE-2026-9784Quest NetVault Backup NVBULibraryPort SQL injection remote code execution8.8CNA v3.00.9%2026-06-25Fix
CVE-2026-9783Quest NetVault Backup NVBURemovableMedia SQL injection remote code execution8.8CNA v3.00.9%2026-06-25Fix
CVE-2026-9782Quest NetVault Backup NVBUDeviceDrive SQL injection remote code execution8.8CNA v3.00.9%2026-06-25Fix
CVE-2026-9781Quest NetVault Backup NVBURASDevice SQL injection remote code execution8.8CNA v3.00.9%2026-06-25Fix
CVE-2026-9780Quest NetVault Backup addclient3 cross-site scripting authentication bypass8.8CNA v3.00.9%2026-06-25Fix
CVE-2026-9718Schneider Electric PowerLogic™ P7 reachable assertion6.9CNA v4.00.4%2026-06-25Fix
CVE-2026-9717Schneider Electric PowerLogic™ P7 OS command injection8.6CNA v4.01.7%2026-06-25Fix
CVE-2026-9716Schneider Electric PowerLogic™ P7 null pointer dereference8.7CNA v4.00.5%2026-06-25Fix
CVE-2026-9705Red Hat Keycloak client registration service insufficient session expiration6.5CNA v3.10.5%2026-06-25Fix
CVE-2026-9702InPost PL WordPress plugin unauthenticated WooCommerce order Parcel-Locker Hijacking7.5CISA ADP v3.10.4%2026-06-25Fix
CVE-2026-9651Schneider Electric EasyLogic T150 and Saitel DP system files incorrect permission assignment6.7CNA v4.00.2%2026-06-25Fix
CVE-2026-9650Schneider Electric EasyLogic T150 and Saitel DP firmware vulnerability8.7CNA v4.00.4%2026-06-25Fix
CVE-2026-9222Shenzhen i365-Tech Setracker2 Parental Control App improper authentication9.2CNA v4.00.4%2026-06-25Fix
CVE-2026-9221Setracker2 Children's Smartwatch Ecosystem use of a broken or risky cryptographic algorithm8.7CNA v4.00.3%2026-06-25Fix
CVE-2026-9220Setracker2 Children's Smartwatch Ecosystem use of hard-coded cryptographic key8.7CNA v4.00.4%2026-06-25Fix
CVE-2026-9219Setracker2 Children's Smartwatch Ecosystem generation of predictable numbers or identifiers8.3CNA v4.00.3%2026-06-25Fix
CVE-2026-9155OS command injection in Rapid7 InsightConnect Sed Plugin via expression parameter8.8CNA v3.11.6%2026-06-25Fix
CVE-2026-9154Arbitrary file write in Rapid7 InsightConnect Sed Plugin7.1CNA v3.10.4%2026-06-25Fix
CVE-2026-9153Arbitrary file read in Rapid7 InsightConnect Sed Plugin6.5CNA v3.10.5%2026-06-25Fix
CVE-2026-9099Keycloak: Group-admin escalation to realm-admin7.7CNA v3.10.5%2026-06-25Fix
CVE-2026-9086Keycloak: Keycloak: Cross-site scripting (XSS) via case-insensitive uri validation bypass7.3CNA v3.10.8%2026-06-25Exploit codeFix
CVE-2026-9083Keycloak: Keycloak: Information disclosure through arbitrary filesystem path probing4.9CNA v3.10.8%2026-06-25Fix
CVE-2026-8720wolfSSL HMAC-BLAKE2 final discards message when key length exceeds block size5.9CNA v4.00.2%2026-06-25Fix
CVE-2026-8666OS command injection in Rapid7 InsightConnect Traceroute Plugin7.7CNA v3.11.2%2026-06-25Fix
CVE-2026-8665OS command injection in Rapid7 InsightConnect Translate Plugin7.7CNA v3.11.2%2026-06-25Fix
CVE-2026-8664OS command injection in Rapid7 InsightConnect Finger Plugin6.0CNA v3.11.3%2026-06-25Fix
CVE-2026-8663OS command injection in Rapid7 InsightConnect RPM Plugin6.0CNA v3.11.3%2026-06-25Fix
CVE-2026-8662Path traversal in Rapid7 InsightConnect Compression Plugin3.3CNA v3.10.3%2026-06-25Fix
CVE-2026-8660OS command injection in Rapid7 InsightConnect Ping Plugin7.7CNA v3.11.2%2026-06-25Fix
CVE-2026-8659OS command injection in Rapid7 InsightConnect SQLmap Plugin6.0CNA v3.11.3%2026-06-25Fix
CVE-2026-8658OS command injection in Rapid7 InsightConnect Tcpdump Plugin6.0CNA v3.11.3%2026-06-25Fix
CVE-2026-8592OS command injection in Rapid7 InsightConnect AWK Plugin7.7CNA v3.11.2%2026-06-25Fix
CVE-2026-8330Insertion of sensitive information into log file in GitLab4.4CNA v3.10.2%2026-06-25Fix
CVE-2026-7570Quest NetVault Backup NVBUDashboard SQL injection remote code execution8.8CNA v3.00.9%2026-06-25Fix
CVE-2026-7569Quest NetVault Backup viewclient cross-site scripting authentication bypass8.8CNA v3.00.9%2026-06-25Fix
CVE-2026-7532wolfSSL iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined5.7CNA v4.00.3%2026-06-25Fix
CVE-2026-7531wolfSSL use-after-free in PQC hybrid key-share handling2.3CNA v4.00.5%2026-06-25Fix
CVE-2026-7511wolfSSL PKCS7_verify signer confusion allows forged signatures to be accepted5.9CNA v4.00.3%2026-06-25Fix
CVE-2026-6731wolfSSL X.509 name constraint bypass via Subject CN treated as a DNS name6.0CNA v4.00.1%2026-06-25Fix
CVE-2026-6681wolfSSL PKCS#7 decode ignores caller output buffer size, writing past buffer bounds1.0CNA v4.00.4%2026-06-25Fix
CVE-2026-6679wolfSSL DTLS 1.3 ACK serialization heap buffer overflow via integer truncation8.8CNA v4.00.5%2026-06-25Fix
CVE-2026-6678wolfSSL integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info1.0CNA v4.00.3%2026-06-25Fix
CVE-2026-6450wolfSSL CRL critical extension bypass in ParseCRL_Extensions1.0CNA v4.00.3%2026-06-25Fix
CVE-2026-6432Improper bounds validation in EmberZNet SDK5.3CNA v4.00.6%2026-06-25
CVE-2026-6412wolfSSL continued acceptance of SHA-1/MD5 digests in certificate processing2.3CNA v4.00.1%2026-06-25Fix
CVE-2026-6331wolfSSL HMAC zero-length tag forgery in EVP_DigestVerifyFinal2.1CNA v4.00.2%2026-06-25Fix
CVE-2026-6330wolfSSL ML-KEM ARM64 NEON ciphertext comparison only compares half of the input6.3CNA v4.00.2%2026-06-25Exploit codeFix
CVE-2026-6329wolfSSL PKCS#12 MAC verification uses attacker-controlled comparison length6.0CNA v4.00.2%2026-06-25Fix
CVE-2026-6325wolfSSL out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list2.0CNA v4.00.3%2026-06-25Fix
CVE-2026-6291wolfSSL bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 decryption6.0CNA v4.00.2%2026-06-25Fix
CVE-2026-6094wolfSSL heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData6.3CNA v4.00.5%2026-06-25Fix
CVE-2026-6092wolfSSL Encrypt-then-MAC vulnerability2.1CNA v4.00.4%2026-06-25Fix
CVE-2026-6091wolfSSL partial-chain verification accepts untrusted intermediate as trust anchor6.0CNA v4.00.2%2026-06-25Fix
CVE-2026-5952Incorrect authorization in GitLab4.3CNA v3.10.3%2026-06-25Fix
CVE-2026-5796Incorrect authorization in GitLab4.3CNA v3.10.4%2026-06-25Fix
CVE-2026-5309Authorization bypass through user-controlled key in GitLab5.4CNA v3.10.3%2026-06-25Fix
CVE-2026-5305Email Address Encoder email replacement handling stored cross-site scripting8.8CISA ADP v3.10.5%2026-06-25Fix
CVE-2026-4930silabs.com Simplicity SDK DPA Countermeasures weakening on Series 3 devices7.1CNA v4.00.1%2026-06-25
CVE-2026-4526Global ZCL command parser missing minimum-length validation in EmberZNet7.1CNA v4.00.4%2026-06-25Fix
CVE-2026-4522HYPR Passwordless missing authentication6.7CNA v4.00.2%2026-06-25Fix
CVE-2026-3176Missing authorization in GitLab3.1CNA v3.10.3%2026-06-25Fix
CVE-2026-2815Silicon Labs SiSDK EFR32xG27 PUF key generation vulnerability8.4CNA v4.00.3%2026-06-25Fix
CVE-2026-2508Gravity Forms Booking WordPress plugin time-based SQL injection6.5CNA v3.10.4%2026-06-25Fix
CVE-2026-2299Improper access control in Mattermost Google Drive Plugin File Creation endpoint4.2CNA v3.10.2%2026-06-25Fix
CVE-2026-2238Missing authorization in GitLab5.3CNA v3.10.5%2026-06-25Fix
CVE-2026-1606Improper control of generation of code (code injection) in GitLab4.3CNA v3.10.4%2026-06-25Fix
CVE-2026-0934Incorrect authorization in GitLab3.8CNA v3.10.3%2026-06-25Fix
CVE-2026-57307Jenkins Zowe zDevOps Plugin has a missing permission check4.2CISA ADP v3.10.2%2026-06-24Fix
CVE-2026-57306Jenkins Zowe zDevOps Plugin has a CSRF4.2v3.10.2%2026-06-24Fix
CVE-2026-57305Jenkins Assembla Plugin has a cross-site request forgery (CSRF)5.4CISA ADP v3.10.2%2026-06-24Fix
CVE-2026-57304Jenkins Assembla Plugin has a missing permission check5.4CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-57303Jenkins Assembla Plugin has an XXE7.1CISA ADP v3.10.4%2026-06-24Fix
CVE-2026-57302Jenkins FitNesse Plugin stores passwords unencrypted4.3CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-57301Jenkins OWASP ZAP Plugin: Builds executed on the Jenkins controller can lead to RCE8.8CISA ADP v3.10.6%2026-06-24Fix
CVE-2026-57300Jenkins MCP Server Plugin missing a permission check4.3CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-57299Jenkins Contrast Continuous Application Security Plugin missing permission checks4.3v3.10.3%2026-06-24Fix
CVE-2026-57298Jenkins Contrast Continuous Application Security Plugin has a CSRF5.4CISA ADP v3.10.1%2026-06-24Fix
CVE-2026-57297Jenkins Contrast Continuous Application Security Plugin has a missing permission check4.3v3.10.3%2026-06-24Fix
CVE-2026-57296Jenkins External Workspace Manager Plugin has a path traversal8.8CISA ADP v3.10.8%2026-06-24Fix
CVE-2026-57295Jenkins EC2 Fleet Plugin has a cross-site request forgery (CSRF)5.4CISA ADP v3.10.2%2026-06-24Fix
CVE-2026-57294Jenkins EC2 Fleet Plugin has a missing permission check5.4CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-57293Jenkins Gitee Plugin has an incorrect permission check that allows enumerating credentials IDs4.3CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-57292Jenkins Gitee Plugin has a cross-site request forgery5.4CISA ADP v3.10.1%2026-06-24Fix
CVE-2026-57291Jenkins Gitee Plugin missing permission checks5.4CISA ADP v3.10.2%2026-06-24Fix
CVE-2026-57290Jenkins Priority Sorter Plugin has a CSRF4.3CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-57289Jenkins Bitbucket Push and Pull Request Plugin improper certificate validation4.8CISA ADP v3.10.2%2026-06-24Fix
CVE-2026-57288Jenkins Active Directory Plugin has an LDAP injection3.7CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-57287Jenkins Job Configuration History Plugin cleartext storage of sensitive information4.3CISA ADP v3.10.2%2026-06-24Fix
CVE-2026-57286Jenkins Git Parameter Plugin missing authorization4.3CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-57285Jenkins GitHub Branch Source Plugin missing authorization4.3CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-57284Jenkins Pipeline: Groovy Plugin vulnerable to unrestricted instantiation of types4.3CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-57283Jenkins Pipeline: Groovy Plugin has a CSRF4.3CISA ADP v3.10.2%2026-06-24Fix
CVE-2026-57282Jenkins Git Client Plugin has an OS command injection vulnerability on agents5.0CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-57281Jenkins Script Security Plugin expression language injection7.5CISA ADP v3.10.9%2026-06-24Fix
CVE-2026-57280Jenkins Script Security Plugin sandbox bypass8.8CISA ADP v3.10.5%2026-06-24Fix
CVE-2026-56761Hono HTML injection via Improper JSX Attribute Name Handling in SSR5.3CNA v4.00.3%2026-06-24Fix
CVE-2026-56370ImageMagick out-of-bounds access in ConnectedComponentsImage via connected-components Artifact7.8v3.10.2%2026-06-24Fix
CVE-2026-56368ImageMagick memory leak in Raw Pixel Data Coders7.5v3.10.5%2026-06-24Fix
CVE-2026-56358n8n stored cross-site scripting in Form Trigger Node5.1CNA v4.00.2%2026-06-24Fix
CVE-2026-56351n8n SQL injection in MySQL, PostgreSQL, and Microsoft SQL Nodes9.6v3.10.4%2026-06-24Fix
CVE-2026-56338Capgo denial of service in 2FA Email Verification via /auth/v1/otp endpoint6.9CNA v4.00.5%2026-06-24Fix
CVE-2026-56337Capgo information disclosure via Unauthenticated RPC function exist_app_v26.9CNA v4.00.4%2026-06-24Fix
CVE-2026-56310Capgo Cap-go authorization bypass in Organization Members endpoint via API Key Scope Bypass5.3CNA v4.00.3%2026-06-24Fix
CVE-2026-56302Capgo Unsecured Supabase Images Bucket via Missing Row Level Security6.9CNA v4.00.3%2026-06-24Fix
CVE-2026-56272Flowise Insufficient Password Salt Rounds in Bcrypt Hashing5.6CNA v4.00.1%2026-06-24Fix
CVE-2026-56270Flowise Unauthenticated OAuth secrets disclosure via /API/v1/loginmethod endpoint8.7CNA v4.02.0%2026-06-24NucleiEmerging ThreatsFix
CVE-2026-56269Flowise Weak Default Token Hash Secret in JWT Token Encryption4.3CNA v4.00.1%2026-06-24Fix
CVE-2026-56262Crawl4AI unauthenticated access to Monitor endpoints via Docker API Server6.9CNA v4.00.8%2026-06-24Fix
CVE-2026-56257Capgo authorization bypass in App Ownership Transfer via Direct PostgREST Update7.1CNA v4.00.3%2026-06-24Fix
CVE-2026-56256Capgo Two-Factor authentication bypass via Organization Management API7.1CNA v4.00.4%2026-06-24Fix
CVE-2026-56245Capgo record_build_time RPC authorization bypass8.8CNA v4.00.5%2026-06-24Fix
CVE-2026-56244Capgo Webhook Signing secret disclosure via Non-Admin API Key7.1CNA v4.00.3%2026-06-24Fix
CVE-2026-56237Capgo Unauthenticated API Key Generation via Client-Side Parameter Manipulation9.3CNA v4.00.5%2026-06-24Fix
CVE-2026-56232Capgo Subkey Scope Bypass in middlewareKey via x-limited-key-id header8.7CNA v4.00.5%2026-06-24Fix
CVE-2026-56231Capgo Broken Object Level Authorization in Build Job Control via jobId parameter7.2CNA v4.00.3%2026-06-24Fix
CVE-2026-56223Capgo account takeover via Cross-Domain SSO Email Assertion in provision-user9.3CNA v4.00.4%2026-06-24Fix
CVE-2026-56121Feast Unauthenticated RCE via ApplyFeatureView gRPC deserialization9.3CNA v4.01.4%2026-06-24Exploit codeFix
CVE-2026-56111Marlin firmware out-of-bounds write via M421 G-code handler8.3CNA v4.00.6%2026-06-24Exploit code
CVE-2026-56052Funnel Builder by FunnelKit WordPress plugin SQL injection7.6CNA v3.10.4%2026-06-24Fix
CVE-2026-55762Rocket.Chat fingerprint API endpoint missing authorization8.1CNA v3.10.5%2026-06-24Fix
CVE-2026-55759Rocket.Chat Apple Sign-In authentication bypass by replay7.4CNA v3.10.3%2026-06-24Fix
CVE-2026-55666Rocket.Chat: Email Parameter Fallback leads to account takeover within Apple OAuth9.3CNA v4.00.4%2026-06-24Fix
CVE-2026-55611mintplex-labs AnythingLLM embed parsed file deletion endpoint insecure direct object reference0.0CNA v3.10.4%2026-06-24Fix
CVE-2026-55583Twenty: Cross-workspace IDOR in AgentTurnResolver7.6CNA v3.10.3%2026-06-24Fix
CVE-2026-55570SiYuan: Stored XSS results to Electron RCE in SiYuan marketplace9.0CNA v3.10.6%2026-06-24Fix
CVE-2026-55488MotionEye's absolute path traversal in Media File Handlers allows arbitrary file read7.7CNA v4.00.6%2026-06-24Fix
CVE-2026-55455Appsmith: SSRF in REST API / GraphQL datasource plugins via insufficient host denylist5.3CNA v4.00.4%2026-06-24Fix
CVE-2026-55454Appsmith: Caddy admin API exposed without authentication9.9CNA v3.10.6%2026-06-24Fix
CVE-2026-54906ruby-concurrency concurrent-ruby ReadWriteLock improper locking2.1CNA v4.00.3%2026-06-24Fix
CVE-2026-54905ruby-concurrency concurrent-ruby ReentrantReadWriteLock vulnerability2.0CNA v4.00.2%2026-06-24Fix
CVE-2026-54904concurrent-ruby AtomicReference update method infinite loop8.2CNA v4.00.7%2026-06-24Fix
CVE-2026-54759SiYuan Lute HTML sanitizer cross-site scripting8.7CNA v4.00.4%2026-06-24Fix
CVE-2026-54699Warp: OS command injection when opening terminal links from WSL7.7CNA v3.10.7%2026-06-24Fix
CVE-2026-54686Warp: DCS lifecycle hook spoofing can alter terminal session metadata4.3CNA v3.10.4%2026-06-24Fix
CVE-2026-54639style-dictionary style Dictionary prototype pollution in convertTokenData utility function8.8CNA v3.10.4%2026-06-24Fix
CVE-2026-54297Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS7.5CNA v3.10.8%2026-06-24Fix
CVE-2026-54158SiYuan: Stored XSS to RCE via attribute-view cell rendering in genAVValueHTML9.9CNA v3.10.5%2026-06-24Fix
CVE-2026-54070SiYuan: Stored XSS in Bazaar marketplace via package README event handlers7.1CNA v3.10.3%2026-06-24Fix
CVE-2026-54069SiYuan: Unauthenticated Admin API Access via Blanket chrome-extension:// Origin Allowlist9.2CNA v4.00.6%2026-06-24NucleiFix
CVE-2026-54068SiYuan: Unauthenticated SQLite Data Exfiltration via template injection in /API/icon/getDynamicIcon5.9CNA v3.10.4%2026-06-24Fix
CVE-2026-54067SiYuan CSS snippet renderer stored cross-site scripting9.9CNA v3.10.5%2026-06-24Fix
CVE-2026-54066SiYuan: Path traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)7.5CNA v3.12.4%2026-06-24NucleiFix
CVE-2026-53950@TryGhost/activitypub: XSS in Ghost's ActivityPub client7.5CNA v3.10.4%2026-06-24Fix
CVE-2026-53949Ghost Content API filter bypass reveals private fields5.3CNA v3.10.4%2026-06-24Fix
CVE-2026-53948Ghost: File upload Content-type spoofing5.4CNA v3.10.2%2026-06-24Fix
CVE-2026-53947Ghost: Member existence leak via magic link sign-in response5.3CNA v3.10.3%2026-06-24Fix
CVE-2026-53946Ghost: Mobiledoc image-size fetch SSRF5.4CNA v3.10.2%2026-06-24Fix
CVE-2026-53945Ghost: Server-side request forgery via DNS rebinding in external request handling4.0CNA v3.10.2%2026-06-24Fix
CVE-2026-53944Ghost: Private IP filtering bypass to make server-side requests to internal services5.8CNA v3.10.3%2026-06-24Fix
CVE-2026-53943Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header9.6CNA v3.10.4%2026-06-24Fix
CVE-2026-53766Google chrome-devtools-mcp path validation path traversal6.1CNA v3.10.1%2026-06-24Fix
CVE-2026-53765Google chrome-devtools-mcp daemon PID file handling link following6.1CNA v3.10.1%2026-06-24Fix
CVE-2026-53130Linux kernel superblock block size validation vulnerability7.8CNA v3.10.2%2026-06-24Fix
CVE-2026-53129Linux kernel mbcache shrinker use-after-free7.8NVD v3.10.1%2026-06-24Fix
CVE-2026-53128Linux kernel DRBD device dump vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53127Linux kernel zoned block device revalidation memory leak5.5v3.10.1%2026-06-24Fix
CVE-2026-53126Linux kernel block cgroup throttling memory leak5.5v3.10.1%2026-06-24Fix
CVE-2026-53125Linux kernel md array_state sysfs handling deadlock5.5v3.10.1%2026-06-24Fix
CVE-2026-53124Linux kernel ublk driver vulnerability5.5NVD v3.10.2%2026-06-24Fix
CVE-2026-53123Linux kernel md raid456 reshape deadlock5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-53122Linux kernel Btrfs reflink deadlock5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-53121Linux kernel amd-pstate driver memory leak5.5v3.10.1%2026-06-24Fix
CVE-2026-53120Linux kernel PCI bus driver use-after-free7.8NVD v3.10.2%2026-06-24Fix
CVE-2026-53119Linux kernel WMI platform driver use-after-free7.8v3.10.1%2026-06-24Fix
CVE-2026-53118Linux kernel vDPA bus driver use-after-free7.8NVD v3.10.1%2026-06-24Fix
CVE-2026-53117Linux kernel s390 CIO bus driver use-after-free7.8v3.10.1%2026-06-24Fix
CVE-2026-53116Linux kernel s390 AP bus driver use-after-free7.8v3.10.1%2026-06-24Fix
CVE-2026-53115Linux kernel fsl-mc bus driver use-after-free7.8NVD v3.10.2%2026-06-24Fix
CVE-2026-53114Linux kernel AMD IBS NMI handler vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53113Linux kernel ath11k Wi-Fi driver memory leak5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-53112Linux kernel rtlwifi PCI driver use-after-free7.8v3.10.1%2026-06-24Fix
CVE-2026-53111Linux kernel BPF test_run infrastructure null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-53110Linux kernel s390 BPF JIT vulnerability7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53109Linux kernel powerpc page table fragment allocator use-after-free7.8NVD v3.10.1%2026-06-24Fix
CVE-2026-53108Linux kernel powerpc/64s race condition4.7NVD v3.10.1%2026-06-24Fix
CVE-2026-53107Linux kernel libertas Wi-Fi driver vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53106Linux kernel bpf deadlock5.5v3.10.1%2026-06-24Fix
CVE-2026-53105Linux kernel mt7925 Wi-Fi driver null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-53104Linux kernel mt76 Wi-Fi driver memory leak5.5NVD v3.10.2%2026-06-24Fix
CVE-2026-53103Linux kernel mt7925 Wi-Fi driver deadlock5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-53102Linux kernel mt76 Wi-Fi driver memory leak5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-53101Linux kernel mt7921 Wi-Fi driver deadlock5.5v3.10.1%2026-06-24Fix
CVE-2026-53100Linux kernel mt76 Wi-Fi driver remain-on-channel handling deadlock5.5v3.10.1%2026-06-24Fix
CVE-2026-53099Linux kernel BPF kernel control-flow integrity configuration vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53098Linux kernel mt7915 Wi-Fi driver coredump work use-after-free7.8v3.10.1%2026-06-24Fix
CVE-2026-53097Linux kernel mt7996 Wi-Fi driver coredump work use-after-free7.8NVD v3.10.2%2026-06-24Fix
CVE-2026-53096Linux kernel BPF devmap hash redirect null pointer dereference7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53095Linux kernel BPF kprobe and freplace program attachment vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53094Linux kernel BPF offloaded program constant blinding vulnerability7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53093Linux kernel brcmfmac Wi-Fi driver chip recognition null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-53092Linux kernel BPF verifier linked register delta tracking vulnerability7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53091Linux kernel qdisc GSO header handling vulnerability8.4CNA v3.10.1%2026-06-24Fix
CVE-2026-53090Linux kernel BPF verifier ld_abs and ld_ind handling in subprograms vulnerability7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53089Linux kernel BPF offload info query use-after-free7.8v3.10.1%2026-06-24Fix
CVE-2026-53088Linux kernel bcmgenet off-by-one error9.8CNA v3.10.4%2026-06-24Fix
CVE-2026-53087Linux kernel bcmgenet Ethernet driver transmit queue memory leak7.5CNA v3.10.7%2026-06-24Fix
CVE-2026-53086Linux kernel bcmgenet Ethernet driver timeout handler race condition9.8CNA v3.10.3%2026-06-24Fix
CVE-2026-53085Linux kernel BPF task_vma iterator use-after-free7.8CNA v3.10.2%2026-06-24Fix
CVE-2026-53084Linux kernel BPF task_vma iterator vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53083Linux kernel BPF program array map clearing denial of service5.5v3.10.1%2026-06-24Fix
CVE-2026-53082Linux kernel 6pack amateur radio driver receive buffer vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53081Linux kernel BPF verifier state pruning vulnerability7.8CNA v3.10.2%2026-06-24Fix
CVE-2026-53080Linux kernel cls_fw null pointer dereference5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-53079Linux kernel qdisc deferred packet drop handling memory leak5.5v3.10.1%2026-06-24Fix
CVE-2026-53078Linux kernel BPF sock_ops context access out-of-bounds read7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53077In the Linux kernel, the following vulnerability has been resolved: net/rds: Restrict use of RDS/IB to the initial network namespace Prevent using RDS/IB in network namespaces other than the initial one. The existing RDS/IB code will not work properly in non-initial network namespaces.7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53076Linux kernel bpf out-of-bounds read7.1CNA v3.10.1%2026-06-24Fix
CVE-2026-53075Linux kernel PPP unattached ioctl handling vulnerability8.8CNA v3.10.2%2026-06-24Exploit codeFix
CVE-2026-53074Linux kernel BPF skb test run interface vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53073Linux kernel Bluetooth UART line discipline driver null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-53072Linux kernel Bluetooth HCI connection request handling improper locking8.8CNA v3.10.2%2026-06-24Fix
CVE-2026-53071Linux kernel Bluetooth L2CAP ECRED reconfiguration use-after-free8.8CNA v3.10.4%2026-06-24Fix
CVE-2026-53070Linux kernel SCTP UDP tunnel transmit path vulnerability7.5CNA v3.10.3%2026-06-24Fix
CVE-2026-53069Linux kernel bonding driver XDP redirect path null pointer dereference7.5CNA v3.10.4%2026-06-24Fix
CVE-2026-53068Linux kernel Komeda DRM AFBC buffer size check integer overflow7.1CNA v3.10.2%2026-06-24Fix
CVE-2026-53067Linux kernel PCI endpoint MSI doorbell allocation double free7.8v3.10.1%2026-06-24Fix
CVE-2026-53066Linux kernel sun4i DRM backend driver null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-53065Linux kernel STi ASoC audio driver memory leak5.5v3.10.1%2026-06-24Fix
CVE-2026-53064Linux kernel device-mapper cache passthrough mode null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-53063Linux kernel device-mapper cache passthrough mode denial of service5.5v3.10.1%2026-06-24Fix
CVE-2026-53062Linux kernel device-mapper cache smq policy improper locking7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53061Linux kernel device-mapper cache passthrough mode vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53060Linux kernel device-mapper cache metadata memory leak5.5v3.10.1%2026-06-24Fix
CVE-2026-53059Linux kernel device-mapper mirror log out-of-bounds write7.8v3.10.1%2026-06-24Fix
CVE-2026-53058Linux kernel cdns-mhdp8546-core null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-53057Linux kernel RISC-V IOMMU translation table invalidation vulnerability8.8CNA v3.10.2%2026-06-24Fix
CVE-2026-53056Linux kernel MSM DPU power management vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53055Linux kernel HiSilicon SEC2 crypto driver use-after-free9.8CNA v3.10.6%2026-06-24Fix
CVE-2026-53054Linux kernel MSM GPU VM_BIND unmap handling improper locking7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53053Linux kernel AMD IOMMU device table entries vulnerability8.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53052Linux kernel qdsp6 ASoC topology driver vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53051Linux kernel Tegra194 PCIe endpoint controller driver vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53050Linux kernel disk quota scanning race condition7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53049Linux kernel GFS2 log flushing improper locking9.8CNA v3.10.4%2026-06-24Fix
CVE-2026-53048Linux kernel GFS2 log flush null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-53047Linux kernel EFI capsule loader vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53046Linux kernel ksmbd server crypto handling use-after-free9.8CNA v3.10.7%2026-06-24Fix
CVE-2026-53045Linux kernel Tegra124 EMC memory controller driver vulnerability9.8CNA v3.10.8%2026-06-24Fix
CVE-2026-53044Linux kernel Tegra CBB fabric driver out-of-bounds read7.1CNA v3.10.2%2026-06-24Fix
CVE-2026-53043Linux kernel OCFS2 distributed lock manager region matching out-of-bounds write9.1CNA v3.10.7%2026-06-24Fix
CVE-2026-53042Linux kernel fwctl class registration null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-53041Linux kernel OCFS2 listxattr handling out-of-bounds write7.1CNA v3.10.2%2026-06-24Fix
CVE-2026-53040Linux kernel OCFS2 freefrag ioctl use-after-free7.1CNA v3.10.2%2026-06-24Fix
CVE-2026-53039Linux kernel OCFS2 group add ioctl reachable assertion5.5v3.10.1%2026-06-24Fix
CVE-2026-53038Linux kernel IMA securityfs interface out-of-bounds read5.5v3.10.1%2026-06-24Fix
CVE-2026-53037Linux kernel USB HID driver deadlock5.5v3.10.1%2026-06-24Fix
CVE-2026-53036Linux kernel arm64 BPF JIT off-by-one error7.8CNA v3.10.2%2026-06-24Fix
CVE-2026-53035Linux kernel AF_UNIX sockmap iterator deadlock5.5v3.10.1%2026-06-24Fix
CVE-2026-53034Linux kernel AF_UNIX sockmap proto update null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-53033Linux kernel AF_UNIX sockmap iterator use-after-free7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53032Linux kernel BPF kptr type matching null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-53031Linux kernel BPF arena allocator vulnerability7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53030Linux kernel Renesas I3C master driver memory leak5.5v3.10.1%2026-06-24Fix
CVE-2026-53029Linux kernel NTFS3 file system driver vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53028Linux kernel typec null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-53027Linux kernel NTFS3 attribute data block mapping vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53026In the Linux kernel, the following vulnerability has been resolved: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg In nfsd4_add_rdaccess_to_wrdeleg, if fp->fi_fds[O_RDONLY] is already set by another thread, __nfs4_file_get_access should not be called to increment the nfs4_7.5CNA v3.10.6%2026-06-24Fix
CVE-2026-53025Linux kernel Greybus raw character device use-after-free7.8CNA v3.10.2%2026-06-24Fix
CVE-2026-53024Linux kernel Greybus raw driver use-after-free7.8CNA v3.10.2%2026-06-24Fix
CVE-2026-53023Linux kernel NTFS3 volume label handling vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53022Linux kernel dell-wmi-sysman enumeration string handling vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-53021Linux kernel SCSI target UNMAP command handling integer overflow5.5v3.10.1%2026-06-24Fix
CVE-2026-53020Linux kernel TLB sync race condition7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53019Linux kernel spacemit clock driver denial of service5.5v3.10.1%2026-06-24Fix
CVE-2026-53018In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid reading already updated pages during GC We found the following issue during fuzz testing: page: refcount:3 mapcount:0 mapping:00000000b6e89c65 index:0x18b2dc pfn:0x161ba9 memcg:f8ffff800e269c00 aops:f2fs_meta_aops ino5.5NVD v3.10.2%2026-06-24Fix
CVE-2026-53017Linux kernel f2fs node address table vulnerability5.5NVD v3.10.2%2026-06-24Fix
CVE-2026-53016Linux kernel ccp AES cipher driver out-of-bounds write7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53015Linux kernel erofs logical cluster number handling vulnerability5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-53014In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir In tcf_blockcast_redir(), when iterating block ports to redirect packets to multiple devices, the mac_header_xmit flag is queried from the wr5.5v3.10.1%2026-06-24Fix
CVE-2026-53013Linux kernel macvlan netlink interface denial of service5.5v3.10.1%2026-06-24Fix
CVE-2026-53012Linux kernel IPv6 nexthop group handling null pointer dereference5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-53011Linux kernel taprio traffic scheduler use-after-free7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53010Linux kernel ksmbd durable handle reconnect use-after-free9.8CNA v3.10.4%2026-06-24Fix
CVE-2026-53009Linux kernel ice driver TX buffer handling double free7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53008Linux kernel ice driver TX timestamp ring race condition4.7NVD v3.10.1%2026-06-24Fix
CVE-2026-53007Linux kernel ice driver ring parameter configuration null pointer dereference5.5NVD v3.10.2%2026-06-24Fix
CVE-2026-53006Linux kernel ICMPv6 receive path use-after-free9.8CNA v3.10.4%2026-06-24Fix
CVE-2026-53005Linux kernel AF_UNIX SOCKMAP garbage collection use-after-free7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-53004Linux kernel SCTP peer auth chunks socket option out-of-bounds write7.8v3.10.1%2026-06-24Fix
CVE-2026-53003Linux kernel PPPoE driver vulnerability7.5CNA v3.10.7%2026-06-24Fix
CVE-2026-53002Linux kernel SIP connection tracking helper out-of-bounds write9.8CNA v3.10.4%2026-06-24Fix
CVE-2026-53001Linux kernel xtables mac, owner and physdev matches vulnerability5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-53000Linux kernel netfilter NAT hook operations vulnerability7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-52999Linux kernel netfilter OS fingerprint matching out-of-bounds read9.1CNA v3.10.6%2026-06-24Fix
CVE-2026-52998Linux kernel netfilter OS fingerprint matching null pointer dereference7.5CNA v3.10.6%2026-06-24Fix
CVE-2026-52997Linux kernel dualpi2 queue discipline null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-52996Linux kernel ksmbd durable handle reconnection memory leak5.5v3.10.1%2026-06-24Fix
CVE-2026-52995Linux kernel RDS connection info interface vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-52994Linux kernel virtio vsock zero-copy transmit vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-52993Linux kernel TIPC message reassembly double free9.8CNA v3.10.4%2026-06-24Exploit codeKCVFix
CVE-2026-52992Linux kernel ADFS boot block parser out-of-bounds write7.8v3.10.1%2026-06-24Fix
CVE-2026-52991Linux kernel PSI pressure interface race condition7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-52990Linux kernel fsnotify mark tracking vulnerability5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-52989Linux kernel nvmet-tcp uninitialized resource use9.8CNA v3.10.5%2026-06-24Fix
CVE-2026-52988Linux kernel nf_tables hook list handling vulnerability7.1CNA v3.10.1%2026-06-24Fix
CVE-2026-52987Linux kernel AMDGPU user queue validation vulnerability7.8CNA v3.10.2%2026-06-24Fix
CVE-2026-52986Linux kernel SIP connection tracking helper null pointer dereference9.8CNA v3.10.6%2026-06-24Fix
CVE-2026-52985Linux kernel netdevsim driver vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-52984Linux kernel netem queue discipline vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-52983Linux kernel Airoha Ethernet driver TX queue accounting vulnerability7.5CNA v3.10.6%2026-06-24Fix
CVE-2026-52982Linux kernel RTL8150 USB Ethernet driver use-after-free9.8CNA v3.10.5%2026-06-24Fix
CVE-2026-52981Linux kernel neighbor table transmit path memory leak7.5CNA v3.10.5%2026-06-24Fix
CVE-2026-52980Linux kernel scheduler entity initialization null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-52979Linux kernel PSP device association handling vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-52978Linux kernel PSP netlink interface vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-52977Linux kernel futex requeue-PI vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-52976Linux kernel Xe GPU exec queue creation use-after-free7.8CNA v3.10.2%2026-06-24Fix
CVE-2026-52975Linux kernel bonding 802.3ad driver race condition7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-52974Linux kernel TLS offload receive path memory leak7.5CNA v3.10.5%2026-06-24Fix
CVE-2026-52973Linux kernel futex private hash allocation use-after-free7.8CNA v3.10.2%2026-06-24Fix
CVE-2026-52972Linux kernel AF_ALG AEAD interface integer overflow5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-52971Linux kernel PHC use-after-free7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-52970In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: fix missing expect put in obj eval nft_ct_expect_obj_eval() allocates an expectation and may call nf_ct_expect_related(), but never drops its local reference. Add nf_ct_expect_put(exp) before return to balance5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-52969Linux kernel KVM dirty ring integer overflow7.8v3.10.2%2026-06-24Fix
CVE-2026-52968Linux kernel s390 PCI interrupt table out-of-bounds read8.8CNA v3.10.2%2026-06-24Fix
CVE-2026-52967Linux kernel SMB client symlink parsing out-of-bounds read8.1CNA v3.10.4%2026-06-24Fix
CVE-2026-52966Linux kernel DRM PRIME handle table vulnerability5.5v3.10.2%2026-06-24Fix
CVE-2026-52965Linux kernel drm/ttm infinite loop5.5NVD v3.10.2%2026-06-24Fix
CVE-2026-52964In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans The USB MIDI 2.0 endpoint parser has the same descriptor walking pattern as the legacy MIDI parser. It validates bLength against bNumGrpTrmBlock before reading baAssoGrpTrm5.5v3.10.1%2026-06-24Fix
CVE-2026-52963Linux kernel USB-audio MIDI driver vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-52962Linux kernel Ceph client extended attributes vulnerability7.8v3.10.1%2026-06-24Fix
CVE-2026-52961Linux kernel Ceph client extended attributes reachable assertion5.5v3.10.1%2026-06-24Fix
CVE-2026-52960Linux kernel Ceph client writeback vulnerability7.5CNA v3.10.6%2026-06-24Fix
CVE-2026-52959In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Do not use host-controlled page order in cleanup path When issuing an extended guest request (SVM_VMGEXIT_EXT_GUEST_REQUEST), get_ext_report() allocates a buffer to retrieve a certificate blob from the host, keepi7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-52958Linux kernel Ceph client OSD map decoding out-of-bounds read9.1CNA v3.10.7%2026-06-24Fix
CVE-2026-52957Linux kernel Ceph client CRUSH map decoding null pointer dereference7.5CNA v3.10.5%2026-06-24Fix
CVE-2026-52956Linux kernel Ceph client authentication out-of-bounds read7.5CNA v3.10.6%2026-06-24Fix
CVE-2026-52955Linux kernel Ceph client CRUSH map decoding out-of-bounds read9.8CNA v3.10.4%2026-06-24Fix
CVE-2026-52954Linux kernel Ceph client CRUSH map decoding reachable assertion7.5CNA v3.10.5%2026-06-24Fix
CVE-2026-52953Linux kernel iommu/vt-d out-of-bounds read7.1CNA v3.10.1%2026-06-24Fix
CVE-2026-52952Linux kernel IOMMU group domain reset reachable assertion8.8CNA v3.10.2%2026-06-24Fix
CVE-2026-52951Linux kernel Xe DMA-BUF export use-after-free7.8CNA v3.10.2%2026-06-24Fix
CVE-2026-52950Linux kernel drm/xe/dma-buf use-after-free7.8CNA v3.10.2%2026-06-24Fix
CVE-2026-52949Linux kernel TTM buffer object shrinker vulnerability5.5NVD v3.10.2%2026-06-24Fix
CVE-2026-52948Linux kernel I2C_TIMEOUT ioctl integer overflow5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-52947Linux kernel QRTR port removal use-after-free7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-52946Linux kernel fasync signal delivery deadlock7.5CNA v3.10.5%2026-06-24Fix
CVE-2026-52945Linux kernel WireGuard threaded NAPI denial of service7.5CNA v3.10.3%2026-06-24Fix
CVE-2026-52944Linux kernel ksmbd sparse file control vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-52943Linux kernel skbuff zerocopy handling use-after-free7.8CNA v3.10.2%2026-06-24Exploit codeFix
CVE-2026-52942Linux kernel netfilter packet logging out-of-bounds read7.1CNA v3.10.1%2026-06-24Fix
CVE-2026-52941Linux kernel SMC message event tracepoint null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-52940Linux kernel TUN virtio-net header handling vulnerability5.5v3.10.2%2026-06-24Fix
CVE-2026-52939Linux kernel net/rds null pointer dereference5.5v3.10.2%2026-06-24Fix
CVE-2026-52938Linux kernel BPF socket storage null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-52937Linux kernel tap device ioctl handling information disclosure5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-52936Linux kernel jitterentropy RNG denial of service5.5v3.10.1%2026-06-24Fix
CVE-2026-52935Linux kernel espintcp out-of-bounds write7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-52934Linux kernel batman-adv TVLV packet handling integer overflow8.8CNA v3.10.4%2026-06-24Fix
CVE-2026-52933Linux kernel io_uring poll ownership check infinite loop7.8CNA v3.10.1%2026-06-24Fix
CVE-2026-52932In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp errors Move the out_free_req label up by a couple of lines so that the allocated dst SG list gets freed on error as well as success.7.5CNA v3.10.6%2026-06-24Fix
CVE-2026-52931Linux kernel batman-adv throughput meter vulnerability9.8CNA v3.10.4%2026-06-24Fix
CVE-2026-52930Linux kernel shared memory orphan cleanup vulnerability5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-52929Linux kernel SCTP stream reconfiguration null pointer dereference7.5CNA v3.10.5%2026-06-24Fix
CVE-2026-52928Linux kernel AF_UNIX SIOCATMARK handling vulnerability5.5NVD v3.10.1%2026-06-24Fix
CVE-2026-52927Linux kernel netfilter ebtables compat layer out-of-bounds read7.8CNA v3.10.1%2026-06-24Fix