CVE-2026 list

CVE-2026 records published in June 2026

Page three of eight: records 2,001 to 3,000 of the 7,316 published in June 2026, newest first. The first page carries the figures for June 2026.

CVE-2026 records published in June 2026, newest first: records 2,001 to 3,000 of 7,316
CVE Summary CVSS EPSS Published Signals
CVE-2026-52926Linux kernel batman-adv gateway selection vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-52925Linux kernel VRF driver null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-52924Linux kernel SCTP COOKIE-ECHO handling use-after-free9.8CNA v3.10.5%2026-06-24Exploit codeFix
CVE-2026-52923Linux kernel SysV IPC ID allocation memory leak7.8CNA v3.10.2%2026-06-24Fix
CVE-2026-52922Linux kernel dat null pointer dereference7.5CNA v3.10.7%2026-06-24Fix
CVE-2026-52921Linux kernel netfilter ipset hash sets infinite loop5.5v3.10.1%2026-06-24Fix
CVE-2026-52920In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_policy: fix strict mode inbound policy matching match_policy_in() walks sec_path entries from the last transform to the first one, but strict policy matching needs to consume info->pol[] in the same forward order as8.3CNA v3.10.3%2026-06-24Fix
CVE-2026-52919Linux kernel batman-adv throughput meter integer underflow7.8CNA v3.10.2%2026-06-24Fix
CVE-2026-52918Linux kernel Bluetooth socket accept queue vulnerability8.8CNA v3.10.2%2026-06-24Fix
CVE-2026-52917Linux kernel SCTP socket diagnostics out-of-bounds read7.1CNA v3.10.1%2026-06-24Fix
CVE-2026-52916Linux kernel batman-adv unicast fragmentation vulnerability5.5v3.10.1%2026-06-24Fix
CVE-2026-52915Linux kernel netfilter IPv6 hop-by-hop options match vulnerability7.1CNA v3.10.1%2026-06-24Fix
CVE-2026-52914Linux kernel batman-adv fragment reassembly denial of service9.8CNA v3.10.5%2026-06-24Fix
CVE-2026-52913Linux kernel batman-adv OGMv2 protocol null pointer dereference5.5v3.10.1%2026-06-24Fix
CVE-2026-52912Linux kernel netfilter NFQUEUE bridge handling use-after-free7.8CNA v3.10.2%2026-06-24Fix
CVE-2026-52816Gogs: Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS5.4CNA v4.00.7%2026-06-24Fix
CVE-2026-52815Gogs: Unauthenticated Organization Teams information disclosure via API5.5CNA v4.01.5%2026-06-24NucleiFix
CVE-2026-52814Gogs: Unauthenticated Asymmetric denial of service5.5CNA v4.00.5%2026-06-24Fix
CVE-2026-52813Gogs: Path traversal in organization name results in RCE through Git hooks10.0CNA v3.11.1%2026-06-24Fix
CVE-2026-52812Gogs: LFS dedupe path leaks private repo content across tenants7.1CNA v4.00.2%2026-06-24Fix
CVE-2026-52811Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym9.0CNA v4.00.5%2026-06-24Fix
CVE-2026-52810Gogs: Write to readonly repositories using receive-pack + service=git-upload-pack confusion7.1CNA v4.00.4%2026-06-24Fix
CVE-2026-52809Gogs: Password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVES6.8CNA v3.10.2%2026-06-24Fix
CVE-2026-52808Gogs: Write-level collaborators can mutate admin-only repository settings via API7.1CNA v3.10.5%2026-06-24Fix
CVE-2026-52807Gogs: DOM-based XSS via Milestone Name on New issue page4.8CNA v4.00.5%2026-06-24Fix
CVE-2026-52806Gogs: RCE via git rebase --exec argument injection in pull request merge9.9CNA v3.17.9%2026-06-24NucleiMetasploitExploit codeFix
CVE-2026-52805Gogs: Migration Redirect Bypass leads to Internal Repository Theft8.7CNA v3.10.4%2026-06-24Fix
CVE-2026-52804Gogs: Privilege escalation via Collaboration Access Mode Validation5.5CNA v4.00.5%2026-06-24Fix
CVE-2026-52802Gogs: Open redirect via redirect_to in Gogs5.4CNA v3.10.6%2026-06-24Fix
CVE-2026-52801Gogs: Ability to import local repositories via Mirror settings8.1CNA v3.10.6%2026-06-24Fix
CVE-2026-52800Gogs: CSRF leading to Organization Owner takeover8.8CNA v3.10.2%2026-06-24Fix
CVE-2026-52799Gogs: Missing authorization in Attachment Download7.5CNA v3.10.4%2026-06-24Fix
CVE-2026-52798Gogs: Stored XSS in `.ipynb` Preview8.9CNA v3.10.4%2026-06-24Fix
CVE-2026-52797Gogs: Overwriting critical files results in a denial of service8.5CNA v3.10.5%2026-06-24Fix
CVE-2026-52796Gogs: DoS in rendering issue index pattern3.5CNA v3.10.3%2026-06-24Fix
CVE-2026-52795Gogs: Authorization bypass in Watch API allows any user to monitor private repository activity4.3CNA v3.10.3%2026-06-24
CVE-2026-52794Sentry: Inefficient regular expression complexity in Sentry7.5CNA v3.10.5%2026-06-24Fix
CVE-2026-50712Frappe Framework stored XSS in Tree view node label rendering4.8CNA v4.00.4%2026-06-24
CVE-2026-50711Frappe Framework stored XSS in Number Card filter fields rendering4.6CNA v4.00.4%2026-06-24
CVE-2026-50710Frappe Framework stored XSS via eval in Number Card filters_config4.6CNA v4.00.4%2026-06-24
CVE-2026-50709Frappe Framework stored XSS in Notifications Events color rendering4.8CNA v4.00.4%2026-06-24
CVE-2026-50708Frappe Framework stored XSS in Multi Select dialog result rendering4.8CNA v4.00.4%2026-06-24
CVE-2026-50705Frappe Framework stored XSS in Form Dashboard headline rendering4.6CNA v4.00.4%2026-06-24
CVE-2026-50704Frappe Framework Reflected/stored XSS in file view breadcrumbs rendering4.6CNA v4.00.4%2026-06-24
CVE-2026-50703Frappe Framework stored XSS in Desktop Icon label rendering4.8CNA v4.00.4%2026-06-24
CVE-2026-50701Frappe Framework Reflected DOM XSS in dashboard-view breadcrumb rendering5.1CNA v4.00.5%2026-06-24
CVE-2026-50700Frappe Framework stored XSS in frappe.get_avatar image rendering4.6CNA v4.00.4%2026-06-24
CVE-2026-50699Frappe Framework stored XSS in Auto Repeat dashboard schedule rendering4.6CNA v4.00.5%2026-06-24
CVE-2026-50698Frappe Framework stored XSS in Audit Trail template rendering4.6CNA v4.00.4%2026-06-24
CVE-2026-50551SiYuan: Stored XSS to RCE via Unsanitized attribute View Asset Cell Content9.9CNA v3.10.8%2026-06-24Fix
CVE-2026-50189Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy route8.9CNA v4.00.5%2026-06-24Fix
CVE-2026-50129Mastodon: Persistent anonymous DoS via unhandled NoMethodError in MATH_TRANSFORMER7.5CNA v3.10.5%2026-06-24Fix
CVE-2026-50128Mastodon: Spoofing of attribution domains5.3CNA v3.10.2%2026-06-24Fix
CVE-2026-49980Rclone: Unauthenticated command execution in `rclone rcd --rc-serve`9.8CNA v3.10.8%2026-06-24Fix
CVE-2026-49979Appsmith: SSRF via `POST /API/v1/admin/send-test-email` JavaMail Bypasses WebClient IP Filter5.1CNA v4.00.4%2026-06-24Fix
CVE-2026-49851Mistune: Potential DoS via quadratic-time parsing in parse_link_text8.7CNA v4.00.6%2026-06-24Fix
CVE-2026-49278Rocket.Chat Livechat visitor info endpoint information disclosure6.7CNA v3.10.4%2026-06-24Fix
CVE-2026-49277Rocket.Chat: OAuth access and refresh tokens remain valid after account deactivation2.3CNA v4.00.3%2026-06-24Fix
CVE-2026-49269Apple M1 GPU register file information disclosure8.6CISA ADP v3.10.4%2026-06-24
CVE-2026-49247Jellyfin: Potential Authenticated path traversal in /ClientLog/Document8.8CNA v3.10.5%2026-06-24Fix
CVE-2026-49246Jellyfin: Potential MKV attachment filename path traversal to RCE1.7CNA v4.00.4%2026-06-24Fix
CVE-2026-49220Jellyfin: Potential XSS in user management5.7CNA v3.10.3%2026-06-24Fix
CVE-2026-48793Jellyfin: Potential FFmpeg argument injection via unescaped subtitle file path8.8CNA v3.10.7%2026-06-24Fix
CVE-2026-48789mintplex-labs anything-llm AnythingLLM: Windows path containment bypass in document folder route4.3CNA v3.10.3%2026-06-24Fix
CVE-2026-48732Warp: Remote SSH cwd can lead to unauthorized remote command execution8.8CNA v3.11.4%2026-06-24Fix
CVE-2026-48731Warp: Linux external editor command injection7.8CNA v3.10.9%2026-06-24Fix
CVE-2026-48725Warp may allow terminal output to access the local clipboard through OSC 528.1CNA v3.10.4%2026-06-24
CVE-2026-48721Warp: Env-var prefixes can lead to denylisted command autoexecution8.6CNA v3.10.2%2026-06-24Fix
CVE-2026-48720Warp: SSH remote output can lead to local file overwrite and persistence8.8CNA v3.10.4%2026-06-24Fix
CVE-2026-48719Warp branch selector command injection via Git branch names8.0CNA v3.11.3%2026-06-24Fix
CVE-2026-48704Warp Markdown notebook links may open executable local files8.8CNA v3.10.4%2026-06-24Fix
CVE-2026-48703Warp: Command injection via Warp code search tool arguments7.8CNA v3.10.3%2026-06-24Fix
CVE-2026-48028Mastodon: Removal of integrity-protected JSON entries from signed activities6.5CNA v3.10.2%2026-06-24Fix
CVE-2026-47733Rocket.Chat ImageElement markdown rendering cross-site scripting4.4CNA v3.10.2%2026-06-24Fix
CVE-2026-47389Mastodon: SSRF protection bypass on older Ruby versions8.6CNA v3.10.4%2026-06-24Fix
CVE-2026-47267Gogs: SSRF in webhook deliveries8.3CNA v3.10.4%2026-06-24Fix
CVE-2026-47110ueberdosis tiptap-php tiptap for PHP DoS via Malformed href attribute7.1CNA v4.00.5%2026-06-24Fix
CVE-2026-46423Rocket.Chat: SAML signature validation skipped when IdP certificate field is empty9.3CNA v4.00.2%2026-06-24Fix
CVE-2026-46349Mastodon: LD-Signature Bypass via JSON-LD Named-Graph Restructuring5.3CNA v3.10.2%2026-06-24Fix
CVE-2026-46348Mastodon: SSRF Bypass via IPv6 Unspecified Address (::)8.7CNA v4.00.4%2026-06-24Fix
CVE-2026-45757Rocket.Chat: Users.deactivateIdle` deactivates accounts without revoking existing login tokens2.3CNA v4.00.3%2026-06-24Fix
CVE-2026-45689Rocket.Chat: Pre-Auth NoSQL injection in OAuth2 Token endpoint leading to arbitrary User ATO9.1CNA v3.10.5%2026-06-24Fix
CVE-2026-45688Rocket.Chat CAS login handler NoSQL injection9.1CNA v3.10.5%2026-06-24Fix
CVE-2026-45687Rocket.Chat: Authenticated arbitrary Data Export Theft via mass assignment in sendFileMessage8.5CNA v3.10.3%2026-06-24Fix
CVE-2026-45677Rocket.Chat: Lack of SAML Signature Check during Logout could lead to DoS8.7CNA v4.00.7%2026-06-24Fix
CVE-2026-44022Docling: Potential path traversal via LaTeX \includegraphics and \input commands5.5CNA v3.10.2%2026-06-24Fix
CVE-2026-44020Docling: Unsafe XML entity expansion in USPTO Patent Backend7.5CNA v3.10.6%2026-06-24Fix
CVE-2026-44017Docling: Unsafe Zip Extraction in EasyOCR Model Download7.5CNA v3.10.7%2026-06-24Fix
CVE-2026-44016Docling: Unsafe Playwright-based HTML Rendering8.2CNA v3.10.6%2026-06-24Fix
CVE-2026-42450OpenColorIO vulnerable to stack buffer overflow8.4CNA v4.00.2%2026-06-24Fix
CVE-2026-39955Cacti has Pre-authentication SQL injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php9.8CNA v3.10.6%2026-06-24Fix
CVE-2026-39948Cacti has SQL injection via rfilter parameter in RLIKE clauses9.3CNA v4.00.8%2026-06-24Fix
CVE-2026-39938Cacti: Unauthenticated RCE on Graph Image9.8CNA v3.10.7%2026-06-24Exploit codeFix
CVE-2026-39900Cacti: Reflected XSS via tab parameter in auth_profile.php JavaScript context5.3CNA v4.00.3%2026-06-24Fix
CVE-2026-39899Cacti: Path traversal via filename parameter in package_import.php6.9CNA v4.00.4%2026-06-24Fix
CVE-2026-39897Cacti has a reflected XSS vulnerability via html_auth_footer5.3CNA v4.00.3%2026-06-24Fix
CVE-2026-39894Cacti: RRDtool metric shift via LC_NUMERIC locale comma decimal formatting2.9CNA v3.10.1%2026-06-24Fix
CVE-2026-39893Cacti: Pre-authentication SQL injection via rfilter RLIKE clause in graph_view.php9.8CNA v3.10.7%2026-06-24Fix
CVE-2026-35025ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR8.6CNA v4.00.5%2026-06-24
CVE-2026-33543FOSSBilling: Authentication bypass allows unauthenticated administrator creation9.3CNA v4.00.4%2026-06-24Fix
CVE-2026-33235AutoGPT: Denial of service (DoS) via resource exhaustion in text templating features7.7CNA v3.10.5%2026-06-24Fix
CVE-2026-32315motionEye: World-Readable Configuration file exposes Admin Password Hash5.5CNA v3.12.9%2026-06-24Fix
CVE-2026-31978motionEye: Arbitrary file read via path traversal in Picture/Movie Preview endpoint6.5CNA v3.10.4%2026-06-24Fix
CVE-2026-27708FOSSBilling: IDOR in Servicecustom Client API allows cross-client data access7.1CNA v4.00.4%2026-06-24Fix
CVE-2026-25119Gogs: Authentication bypass via Unvalidated Reverse Proxy headers7.7CNA v4.00.9%2026-06-24Fix
CVE-2026-23879py7zr symbolic link extraction arbitrary file write8.0CNA v3.10.6%2026-06-24Fix
CVE-2026-13208KubeVirt virt-handler notify server improper authentication6.5CNA v3.10.1%2026-06-24Fix
CVE-2026-13201kubevirt symlink following7.3CNA v3.10.3%2026-06-24Fix
CVE-2026-13164Unauthenticated self-registration in MailerUp allows access to stored email data8.8CNA v4.00.7%2026-06-24Fix
CVE-2026-13163Lack of input validation in Mailerup input parameter leads to open redirect5.3CNA v4.00.5%2026-06-24Fix
CVE-2026-13150SSRF in Pentestify PDF generation endpoint via host header6.9CNA v4.00.5%2026-06-24Fix
CVE-2026-13140Thinkst Applied Research Canarytokens stored cross-site scripting in Canarytokens.org1.1CNA v4.00.3%2026-06-24Fix
CVE-2026-13038Google Chrome Autofill use-after-free8.8CISA ADP v3.10.4%2026-06-24Fix
CVE-2026-13037Google Chrome WebView use-after-free7.8CISA ADP v3.10.1%2026-06-24Fix
CVE-2026-13036Google Chrome Blink use-after-free8.8CISA ADP v3.10.4%2026-06-24Fix
CVE-2026-13035Google Chrome Bluetooth use-after-free8.8CISA ADP v3.10.4%2026-06-24Fix
CVE-2026-13034Google Chrome Passwords inappropriate implementation4.7CISA ADP v3.10.2%2026-06-24Fix
CVE-2026-13033Google Chrome out-of-bounds read8.8CISA ADP v3.10.4%2026-06-24Fix
CVE-2026-13032Google Chrome WebGL use-after-free9.6CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-13031Google Chrome Blink use-after-free8.8CISA ADP v3.10.4%2026-06-24Fix
CVE-2026-13030Google Chrome uninitialized variable use5.3CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-13029Google Chrome Web Authentication use-after-free7.5CISA ADP v3.10.2%2026-06-24Fix
CVE-2026-13028Google Chrome WebGL use-after-free9.6CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-13027Google Chrome FileSystem use-after-free8.8CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-13026Google Chrome Digital Credentials use-after-free8.8CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-13025Google Chrome sandbox escape8.3CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-13024Google Chrome improper input validation4.2CISA ADP v3.10.2%2026-06-24Fix
CVE-2026-13023Google Chrome uninitialized variable use5.3CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-13022Google Chrome Autofill inappropriate implementation6.5v3.10.2%2026-06-24Fix
CVE-2026-13021Google Chrome DeviceBoundSessionCredentials inappropriate implementation4.3CISA ADP v3.10.2%2026-06-24Fix
CVE-2026-13006QOS.CH Sarl Logback-core incomplete protection against7.0CNA v4.00.2%2026-06-24Fix
CVE-2026-12986Payara Server Full has a cross-site request forgery7.3CNA v4.00.3%2026-06-24Fix
CVE-2026-12851GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection9.1CNA v3.12.7%2026-06-24Fix
CVE-2026-12850GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection9.1CNA v3.12.7%2026-06-24Fix
CVE-2026-12849GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection9.1CNA v3.12.7%2026-06-24Fix
CVE-2026-12848GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD_IP_SET command10.0CNA v3.10.6%2026-06-24Fix
CVE-2026-12847GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD_IP_SET command10.0CNA v3.10.6%2026-06-24Fix
CVE-2026-12846GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD_IP_SET command10.0CNA v3.10.6%2026-06-24Fix
CVE-2026-12760Denial of service vulnerability via Malformed IPv4 Fragmentation Handling in TP-Link Tapo C2007.1CNA v4.00.4%2026-06-24Fix
CVE-2026-12681Google Go-Attestation: Hash injection into trusted measurement list8.9CNA v4.00.3%2026-06-24Fix
CVE-2026-12537Unauthenticated remote code execution in Gemini CLI CI/CD Workflows10.0CNA v4.00.2%2026-06-24Fix
CVE-2026-12488GeoVision GV-VMS V20 GV-Cloud memory corruption6.2CNA v3.10.3%2026-06-24Fix
CVE-2026-12486GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection9.1CNA v3.12.7%2026-06-24Fix
CVE-2026-12485GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD_IP_SET command10.0CNA v3.10.6%2026-06-24Exploit codeFix
CVE-2026-12417SignUp and SignIn WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.8%2026-06-24
CVE-2026-12416Invoice Generator WordPress plugin unauthenticated account takeover9.8CNA v3.10.7%2026-06-24Exploit code
CVE-2026-12242AdRotate Banner Manager WordPress plugin PHP code injection8.8CNA v3.10.9%2026-06-24Fix
CVE-2026-12100URL Preview WordPress plugin unauthenticated server-side request forgery via URL parameter7.2CNA v3.10.4%2026-06-24
CVE-2026-12095Kargo Takip WordPress plugin unauthenticated server-side request forgery via api_url parameter7.2CNA v3.10.4%2026-06-24
CVE-2026-12094Advanced Contact Form 7 contact form submission deletion handler missing authorization5.3CNA v3.10.4%2026-06-24
CVE-2026-11998Google AngularJS XSS via SCE resource URL sanitization bypass7.6CNA v3.10.5%2026-06-24
CVE-2026-11997Bulk SEO Image WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2026-06-24
CVE-2026-11968Improper neutralization of argument delimiters in a command (argument injection) in TortoiseGit5.5CNA v3.10.2%2026-06-24Fix
CVE-2026-11878Reflected cross-site scripting vulnerability in OpenText Access Manager8.2CNA v4.00.2%2026-06-24Fix
CVE-2026-11877Missing authorization vulnerability in OpenText Access Manager6.3CNA v4.00.3%2026-06-24Fix
CVE-2026-11614Xpro Addons WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-06-24Fix
CVE-2026-11370WP Meta SEO WordPress plugin server-side request forgery6.4CNA v3.10.3%2026-06-24
CVE-2026-10753Site Kit by Google WordPress plugin Editor+ email Reporting settings update2.7CISA ADP v3.10.3%2026-06-24Fix
CVE-2026-10749Post Duplicator WordPress plugin Contributor+ PHP object injection via customMetaData7.2CISA ADP v3.10.5%2026-06-24Fix
CVE-2026-10745upKeeper Solutions upKeeper Instant Privilege Access log injection7.9CNA v4.00.4%2026-06-24
CVE-2026-10735smart-post-show-pro WordPress plugin ShapedPlugin multiple Pro plugins backdoor7.5CISA ADP v3.10.4%2026-06-24Fix
CVE-2026-10642Unbounded TX busy-loop DoS in Zephyr PL011 UART driver under CTS hardware flow control4.6CNA v3.10.2%2026-06-24Fix
CVE-2026-10552Blue Captcha WordPress plugin cross-site request forgery via blcap_action parameter4.3CNA v3.10.2%2026-06-24Fix
CVE-2026-10531AI Share and Summarize WordPress plugin Contributor+ stored XSS via title_style shortcode attribute5.4CISA ADP v3.10.2%2026-06-24Fix
CVE-2026-10092Cincopa video and media plug-in WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-06-24Fix
CVE-2026-10091Email JavaScript Cloak WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-06-24
CVE-2026-10043MosaicML Composer deserialization of untrusted data remote code execution7.8CNA v3.00.5%2026-06-24
CVE-2026-9779ATEN Unizon updateWar method improper signature verification7.2CNA v3.00.7%2026-06-24Fix
CVE-2026-9778ATEN Unizon ImportDeviceList directory traversal remote code execution7.2CNA v3.02.2%2026-06-24Fix
CVE-2026-9777ATEN Unizon restoreDB directory traversal remote code execution7.2CNA v3.02.2%2026-06-24Fix
CVE-2026-9776ATEN Unizon writeFileToHttpServletResponse directory traversal information disclosure7.5CNA v3.01.9%2026-06-24Fix
CVE-2026-9775ATEN Unizon uploadSSL directory traversal arbitrary file deletion6.5v3.11.5%2026-06-24Fix
CVE-2026-9774ATEN Unizon updateLicense directory traversal arbitrary file deletion6.5v3.11.5%2026-06-24Fix
CVE-2026-9773Unraid Web Server ToggleState command injection remote code execution8.8CNA v3.01.9%2026-06-24
CVE-2026-9772Unraid Web Server FileUpload command injection remote code execution8.8CNA v3.01.9%2026-06-24
CVE-2026-9724MotorDesk WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2026-06-24Fix
CVE-2026-9721Book a Room Event Calendar WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.1%2026-06-24
CVE-2026-9710Themeco Cornerstone Subscriber+ arbitrary user password hash disclosure7.7CISA ADP v3.10.4%2026-06-24Fix
CVE-2026-9709Themeco Cornerstone (Premium, bundled with X Theme) Subscriber+ arbitrary User Meta Disclosure7.7CISA ADP v3.10.4%2026-06-24Fix
CVE-2026-9643WP Meta SEO WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-06-24
CVE-2026-9620WP Latest Posts WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-06-24
CVE-2026-9619Reviews and Rating WordPress plugin missing authorization authenticated arbitrary modification4.3CNA v3.10.4%2026-06-24
CVE-2026-9616Generate Security.txt WordPress plugin missing authorization authenticated Security.txt deletion4.3CNA v3.10.4%2026-06-24Fix
CVE-2026-9612WhatsOrder WordPress plugin unauthenticated sensitive information exposure5.3CNA v3.10.5%2026-06-24
CVE-2026-9539libslirp TCP URG OOB read information leak6.5CNA v3.10.2%2026-06-24Fix
CVE-2026-918424liveblog WordPress plugin missing authorization authenticated settings modification4.3CNA v3.10.4%2026-06-24
CVE-2026-918324liveblog WordPress plugin exposure of sensitive information4.3CNA v3.10.4%2026-06-24
CVE-2026-9179WP Forms Connector WordPress plugin unauthenticated SQL injection via order parameter7.5CNA v3.10.5%2026-06-24
CVE-2026-9178WP Forms Connector WordPress plugin missing authorization unauthenticated information exposure7.5CNA v3.10.6%2026-06-24
CVE-2026-9175Devs Accounting WordPress plugin missing authorization5.3CNA v3.10.5%2026-06-24Fix
CVE-2026-9172Devs Accounting WordPress plugin missing authorization unauthenticated account deletion5.3CNA v3.10.4%2026-06-24Fix
CVE-2026-8905Osiris Signature Banner WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2026-06-24
CVE-2026-8896MIR blocks and shortcodes WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-24
CVE-2026-8865Avalon23 Products Filter for WooCommerce WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-24Fix
CVE-2026-8705ClearSale Total WordPress plugin unauthenticated SQL injection7.5CNA v3.10.7%2026-06-24
CVE-2026-8690RentMy Real-Time Rental Management Plugin WordPress plugin authorization bypass5.3CNA v3.10.4%2026-06-24
CVE-2026-8688Advance Nav Menu Manager WordPress plugin authorization bypass4.3CNA v3.10.4%2026-06-24
CVE-2026-8628EntreDroppers WordPress plugin reflected cross-site scripting via PHP_SELF parameter6.1CNA v3.10.3%2026-06-24
CVE-2026-8622Image Sizes on Demand WordPress plugin reflected cross-site scripting via PHP_SELF server Variable6.1CNA v3.10.3%2026-06-24
CVE-2026-8617SearchPlus WordPress plugin missing authorization unauthenticated settings modification and deletion5.3CNA v3.10.4%2026-06-24Fix
CVE-2026-8614Assistio WordPress plugin missing authorization authenticated plugin settings deletion4.3CNA v3.10.3%2026-06-24
CVE-2026-7761Ultimate Member WordPress plugin account takeover8.8CNA v3.10.7%2026-06-24Fix
CVE-2026-7617Secufor_OAuth WordPress plugin missing authorization unauthenticated account Logout5.3CNA v3.10.4%2026-06-24
CVE-2026-7574Anthropic Claude Desktop Cowork VM Image Contents not Validated before Use8.7CNA v3.10.1%2026-06-24Exploit code
CVE-2026-7539HP Dock Accessory WMI Provider Installer Security Update7.3CNA v4.00.1%2026-06-24Fix
CVE-2026-6458Caliptra Core Runtime Firmware missing cryptographic step5.1CNA v4.00.2%2026-06-24
CVE-2026-6292MP Customize Login Page WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.3%2026-06-24
CVE-2026-5818MCU firmware update authentication bypass on Caliptra Core7.2CNA v4.00.2%2026-06-24
CVE-2026-4297Welcome Software Publishing WordPress plugin arbitrary options update to privilege escalation8.8CNA v3.10.7%2026-06-24
CVE-2026-3652ARForms WordPress plugin unauthenticated stored cross-site scripting via value parameter7.2CNA v3.10.3%2026-06-24Fix
CVE-2026-2050GIMP HDR File Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.6%2026-06-24Fix
CVE-2026-1840Missing authentication for critical function in Hubbell Aclara Metrum Cellular Web Interface8.7CNA v4.00.7%2026-06-24Fix
CVE-2026-57062GnuPG improper quantity validation2.9CNA v3.10.1%2026-06-23Exploit codeFix
CVE-2026-57053GNU libidn improper quantity validation2.5NVD v3.10.1%2026-06-23Fix
CVE-2026-56968GNU SASL NTLM client vulnerability5.3v3.10.3%2026-06-23Fix
CVE-2026-56815rasta-mouse pwnlift symlink following7.4CNA v3.10.2%2026-06-23
CVE-2026-56785FlatPress stored cross-site scripting via Unescaped Comment and Contact form fields8.4CNA v4.00.4%2026-06-23Fix
CVE-2026-56784OpenRemote IDOR via Bulk Alarm Deletion endpoint8.6CNA v4.00.3%2026-06-23Fix
CVE-2026-56762Hono Missing Cookie Name Validation in setCookie6.9CNA v4.00.4%2026-06-23Fix
CVE-2026-56701Grav XML external entity injection via SVG upload7.1CNA v4.00.3%2026-06-23Fix
CVE-2026-56696OpenHarness prompt injection via /issue and /pr_comments Slash commands5.3CNA v4.00.4%2026-06-23
CVE-2026-56695OpenHarness Cross-session disclosure via /resume and /summary commands7.1CNA v4.00.4%2026-06-23
CVE-2026-56694NanoClaw privilege escalation via Forged Channel Approval Callback5.3CNA v4.00.3%2026-06-23Fix
CVE-2026-56693NanoClaw privilege escalation via Unauthorized create_agent System action6.8CNA v4.00.2%2026-06-23Fix
CVE-2026-56692NanoClaw arbitrary file read via symlink following in forwardAttachedFiles6.8CNA v4.00.2%2026-06-23Fix
CVE-2026-56402NanoClaw privilege escalation via Unverified Approval Response handler7.1CNA v4.00.4%2026-06-23Fix
CVE-2026-56379ImageMagick command injection via SVG Decoder5.5NVD v3.11.6%2026-06-23Fix
CVE-2026-56376ImageMagick heap use-after-free in Meta Coder3.3NVD v3.10.3%2026-06-23Fix
CVE-2026-56371ImageMagick memory leak in TXT File Processing via Texture attribute5.3v3.10.4%2026-06-23Fix
CVE-2026-56322Capgo information disclosure via Unauthenticated /updates defaultChannel parameter8.7CNA v4.00.5%2026-06-23Fix
CVE-2026-56315picklescan remote code execution via Unblocked Standard library modules9.3CNA v4.01.1%2026-06-23Fix
CVE-2026-56301Nuxt arbitrary file read via World-Connectable vite-node IPC Socket on Linux6.8CNA v4.00.1%2026-06-23Fix
CVE-2026-56275Flowise server-side request forgery via Execute Flow Base URL7.1v3.10.3%2026-06-23Fix
CVE-2026-56274Flowise remote code execution8.7CNA v4.07.5%2026-06-23MetasploitExploit codeFix
CVE-2026-56263Crawl4AI stored cross-site scripting in Monitor Dashboard5.3CNA v4.00.3%2026-06-23Fix
CVE-2026-56258Crawl4AI arbitrary file write via output_path Symlink and TOCTOU9.2CNA v4.00.9%2026-06-23Fix
CVE-2026-56248Capgo unauthenticated denial of service via audit_logs RLS Policy8.7CNA v4.00.5%2026-06-23Fix
CVE-2026-56243Capgo Hashed API Key Enforcement Bypass via PostgREST/RLS Plane8.6CNA v4.00.4%2026-06-23Fix
CVE-2026-56234Capgo Password Spraying via Public-Key Accessible Credential Validation endpoint6.9CNA v4.00.4%2026-06-23Fix
CVE-2026-56225Capgo authorization bypass in API Key Management via App-Limited Keys8.7CNA v4.00.4%2026-06-23Fix
CVE-2026-56222Capgo Cross-Organization App takeover via Mismatched org_id and app_id in /private/role_bindings8.6CNA v4.00.5%2026-06-23Fix
CVE-2026-56117dhcpcd heap use-after-free via Control Socket Handling5.5v3.10.1%2026-06-23Fix
CVE-2026-56116dhcpcd memory leak DoS via IPv6 Router Advertisement Handling7.1CNA v4.00.3%2026-06-23Fix
CVE-2026-56115Bootimus broken access control via JWTMiddleware authorization bypass8.7CNA v4.00.5%2026-06-23Fix
CVE-2026-56114dhcpcd stack out-of-bounds write in dhcp6_makemessage6.5v3.10.3%2026-06-23Fix
CVE-2026-56113dhcpcd heap use-after-free in dhcp6_deprecateaddrs via DHCPv6 RENEW6.5v3.10.3%2026-06-23Fix
CVE-2026-55767Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle5.8CNA v3.10.2%2026-06-23Fix
CVE-2026-55766Guzzlehttp/psr7: CRLF injection in HTTP Start-Line Serialization4.8CNA v3.10.2%2026-06-23Fix
CVE-2026-55736Private action arguments can be set by user input in Ash5.9CNA v4.00.4%2026-06-23Fix
CVE-2026-55655OpenBSD OpenSSH improper channel restriction6.1NVD v3.10.1%2026-06-23Fix
CVE-2026-55654OpenBSD OpenSSH GSSAPI indicator cleanup out-of-bounds read3.7CNA v3.10.7%2026-06-23Fix
CVE-2026-55653OpenBSD OpenSSH double free6.5NVD v3.10.7%2026-06-23Fix
CVE-2026-55568Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext5.9CNA v3.10.1%2026-06-23Fix
CVE-2026-55517Deno: Denial of service via non-ASCII bytes in WebSocket response headers4.3CNA v3.10.3%2026-06-23Fix
CVE-2026-55450Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak9.3CNA v3.11.2%2026-06-23NucleiFix
CVE-2026-55447Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit9.6CNA v3.10.7%2026-06-23Fix
CVE-2026-55446Langflow: Unauthenticated DoS through multipart form boundary file upload7.5CNA v3.10.6%2026-06-23Fix
CVE-2026-55423Langflow: Logout button does not clear session6.1CNA v3.10.2%2026-06-23Fix
CVE-2026-55255Langflow authorization bypass through user-controlled key8.4CNA v3.10.9%2026-06-23KEVKCVFix
CVE-2026-55249@rtk-ai/Rtk-rewrite: OpenClaw Rewrite plugin command injection via execSync Template String6.3CNA v3.10.6%2026-06-23
CVE-2026-54892Plug: Quadratic-time decoding of nested query/body parameters enables denial of service8.7CNA v4.00.9%2026-06-23Fix
CVE-2026-54762Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails5.9CNA v4.00.4%2026-06-23Fix
CVE-2026-54761Traefik Kubernetes Gateway provider improper access control6.0CNA v4.00.4%2026-06-23Fix
CVE-2026-54588Poweradmin OIDC and SAML redirect URL construction open redirect9.6CNA v3.10.5%2026-06-23Fix
CVE-2026-54555rtk permission splitter incorrect authorization7.8CNA v3.10.2%2026-06-23Fix
CVE-2026-54518jackson-databind has a @JsonView bypass for unwrapped creator parameters6.5CNA v3.10.4%2026-06-23Fix
CVE-2026-54517jackson-databind has @JsonView bypass for setterless creator properties5.3CNA v3.10.4%2026-06-23Fix
CVE-2026-54516Jackson-databind's renamed @JsonIgnore'd setters can deserialize via private fields5.3CNA v3.10.4%2026-06-23Fix
CVE-2026-54515jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnoreProperties5.3CNA v3.10.4%2026-06-23Fix
CVE-2026-54514FasterXML jackson-databind InetSocketAddress deserializer server-side request forgery5.3CNA v3.10.4%2026-06-23Fix
CVE-2026-54513jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator8.1CNA v3.11.2%2026-06-23Fix
CVE-2026-54512FasterXML jackson-databind PolymorphicTypeValidator insecure deserialization8.1CNA v3.10.9%2026-06-23Fix
CVE-2026-54328Pi temporary extension install path insecure temporary file7.3CNA v3.10.2%2026-06-23Fix
CVE-2026-54327Pi: Race condition in auth.json writes could expose stored credentials2.2CNA v3.10.1%2026-06-23Fix
CVE-2026-54326Pi: Potential XSS in HTML session exports via Markdown URL sanitization bypass2.5CNA v3.10.2%2026-06-23Fix
CVE-2026-54325Pi loads project-local extensions without approval4.4CNA v3.10.2%2026-06-23Fix
CVE-2026-54324Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join6.5CNA v3.10.5%2026-06-23Fix
CVE-2026-54323Daytona: Git credential leak via git clone with TLS verification disabled5.9CNA v3.10.2%2026-06-23Fix
CVE-2026-54322Daytona organization role management insecure direct object reference7.7CNA v3.10.3%2026-06-23Fix
CVE-2026-54321Daytona: Public sandbox previews remain accessible for up to one hour after being made private7.0CNA v3.10.4%2026-06-23Fix
CVE-2026-54320Daytona: Cross-tenant organization takeover via invitation acceptance with an unverified email8.4CNA v3.10.4%2026-06-23Fix
CVE-2026-54319Daytona sandbox volume mount path traversal4.2CNA v3.10.2%2026-06-23Fix
CVE-2026-54318Home Assistant: Exported BroadcastReceiver allows local apps to spoof device location7.1CNA v3.10.2%2026-06-23Fix
CVE-2026-54317Home Assistant Core Konnected integration missing authentication7.6CNA v3.10.3%2026-06-23Fix
CVE-2026-54316Anthropic Claude Code WebFetch tool information disclosure6.0CNA v4.00.5%2026-06-23Exploit codeFix
CVE-2026-54314n8n Compression node denial of service6.3CNA v4.00.5%2026-06-23Fix
CVE-2026-54313n8n MongoDB node find and replace operation NoSQL injection6.5CNA v4.00.3%2026-06-23Fix
CVE-2026-54312n8n Microsoft SQL node prototype pollution7.2CNA v4.00.4%2026-06-23Fix
CVE-2026-54311n8n Merge node SQL Query mode prototype pollution6.0CNA v4.00.4%2026-06-23Fix
CVE-2026-54310n8n Postgres and TimescaleDB nodes SQL injection6.5CNA v4.00.5%2026-06-23Fix
CVE-2026-54309n8n MCP Browser HTTP transport missing authentication8.8CNA v4.00.5%2026-06-23Fix
CVE-2026-54308n8n-io n8n authentication bypass by spoofing6.3CNA v4.00.3%2026-06-23Fix
CVE-2026-54307n8n credential permission checks incorrect authorization8.5CNA v4.00.4%2026-06-23Fix
CVE-2026-54306n8n public webhook payload handling prototype pollution6.3CNA v4.00.3%2026-06-23Fix
CVE-2026-54305n8n Dynamic Credentials endpoints improper access control8.9CNA v4.00.4%2026-06-23Fix
CVE-2026-54304n8n SecurityScorecard node information disclosure7.1CNA v4.00.4%2026-06-23Fix
CVE-2026-54303n8n webhook verification endpoint reflected cross-site scripting6.8CNA v4.00.2%2026-06-23Fix
CVE-2026-54302n8n Chat Trigger node stored cross-site scripting7.0CNA v4.00.2%2026-06-23Fix
CVE-2026-54301n8n Respond to Webhook node cross-site scripting7.0CNA v4.00.2%2026-06-23Fix
CVE-2026-54257Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow9.3CNA v4.00.4%2026-06-23Fix
CVE-2026-54157LobeHub: Unauthenticated SSRF in `/webapi/proxy`9.0CNA v3.11.8%2026-06-23NucleiFix
CVE-2026-54022open-webui open WebUI: Any authenticated user can read other users' private notes via Socket.IO5.3CNA v3.10.3%2026-06-23Fix
CVE-2026-54021Open WebUI Ollama backend proxy routes incorrect authorization6.3CNA v3.10.3%2026-06-23Fix
CVE-2026-54019open-webui Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode6.5CNA v3.10.4%2026-06-23Fix
CVE-2026-54018open-webui Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects7.7CNA v3.10.4%2026-06-23Fix
CVE-2026-54016Open WebUI search_knowledge_files tool insecure direct object reference4.3CNA v3.10.3%2026-06-23Fix
CVE-2026-54015open-webui open WebUI: Prompt history IDOR: Unbound history_id allows cross-prompt read and deletion6.4CNA v3.10.3%2026-06-23Fix
CVE-2026-54014Open WebUI cache file serving endpoint path traversal4.3CNA v3.10.4%2026-06-23Fix
CVE-2026-54013open-webui Open WebUI: Stored XSS to account takeover via Model Profile Images in Open WebUI7.6CNA v3.10.3%2026-06-23Fix
CVE-2026-54012open-webui open WebUI: Forged model meta.knowledge allows cross-user file read and deletion7.1CNA v3.10.3%2026-06-23Fix
CVE-2026-54011open-webui Open WebUI: Stored XSS in Mermaid Markdown Preview8.7CNA v3.10.3%2026-06-23Fix
CVE-2026-54010open-webui open WebUI: Forged chat-file link allows cross-user file read and deletion8.3CNA v3.10.4%2026-06-23Fix
CVE-2026-54009open-webui open WebUI: Cross-user file disclosure via /API/chat/completions image_url field6.5CNA v3.10.4%2026-06-23Fix
CVE-2026-54008open-webui open WebUI: Redirect-bypass SSRF in OAuth `_process_picture_url`8.5CNA v3.10.3%2026-06-23Fix
CVE-2026-54007open-webui open WebUI: Cross-origin postMessage confirmation bypass via action:submit7.1CNA v4.00.2%2026-06-23Fix
CVE-2026-54006Open WebUI calendar event API insecure direct object reference4.3CNA v3.10.3%2026-06-23Fix
CVE-2026-53931NocoDB: Server-side request forgery via Spreadsheet Import endpoint6.9CNA v4.00.4%2026-06-23Fix
CVE-2026-53930NocoDB: Server-side request forgery via Base Migration URL5.1CNA v4.00.4%2026-06-23Fix
CVE-2026-53929NocoDB: Stored cross-site scripting via Secure Attachment5.1CNA v4.00.4%2026-06-23Fix
CVE-2026-53928NocoDB: Refresh Tokens Persist through Password Recovery6.3CNA v4.00.3%2026-06-23Fix
CVE-2026-53927NocoDB: Server-side request forgery via Spreadsheet Fetch URL5.1CNA v4.00.4%2026-06-23Fix
CVE-2026-53926NocoDB: OAuth Tokens Persist through Security Events6.3CNA v4.00.4%2026-06-23Fix
CVE-2026-53755Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check8.6CNA v3.11.6%2026-06-23NucleiFix
CVE-2026-53754Crawl4AI: SSRF filter bypass in Docker server7.5CNA v3.10.4%2026-06-23Fix
CVE-2026-53753Crawl4AI: AST sandbox escape via gi_frame.f_back Chain Pre-Auth RCE in Docker API9.8CNA v3.12.9%2026-06-23NucleiExploit codeFix
CVE-2026-53662immich login page redirect handling reflected cross-site scripting9.6CNA v3.10.4%2026-06-23
CVE-2026-53622Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts7.8CNA v4.00.6%2026-06-23Fix
CVE-2026-52846Caddy: StripHTML template function bypass4.2CNA v3.10.2%2026-06-23Fix
CVE-2026-52845Caddy: FastCGI header normalization bypass in `forward_auth copy_headers`8.1CNA v3.10.4%2026-06-23Fix
CVE-2026-52844Caddy: Windows `file_server` path authorization bypass via encoded backslash7.5CNA v3.10.6%2026-06-23Fix
CVE-2026-52673Cboard v.0.4.2 and SQL injection6.5CISA ADP v3.10.6%2026-06-23
CVE-2026-50574yt-dlp aria2c manifest downloader injection8.3CNA v3.10.5%2026-06-23Fix
CVE-2026-50221OpenStack Swift vulnerable to authenticated server-side request forgery5.4v3.10.2%2026-06-23Fix
CVE-2026-50193FasterXML jackson-databind JsonNode serialization resource exhaustion6.3CNA v4.00.6%2026-06-23Fix
CVE-2026-50023yt-dlp downloaded file extension allowlist vulnerability8.3CNA v3.10.7%2026-06-23Fix
CVE-2026-50019yt-dlp curl external downloader information disclosure6.1CNA v3.10.3%2026-06-23Fix
CVE-2026-49983Deno process.loadEnvFile incorrect authorization5.2CNA v3.10.1%2026-06-23Fix
CVE-2026-49860Deno: WebSocket API sandbox bypass via missing post-DNS check5.2CNA v3.10.1%2026-06-23Fix
CVE-2026-49859Deno: `fetch` API sandbox bypass via missing DNS resolution check5.2CNA v3.10.1%2026-06-23Fix
CVE-2026-49465n8n Git node file sandbox path traversal6.0CNA v4.00.5%2026-06-23Fix
CVE-2026-49444n8n Python Code node sandbox sandbox escape7.1CNA v4.00.4%2026-06-23Fix
CVE-2026-49440Deno: Miller-Rabin Primality Test allows Zero Rounds7.4CNA v3.10.2%2026-06-23Fix
CVE-2026-49411Deno Node TCPWrap numeric hostname aliases bypass --deny-net resolved-IP deny checks6.5CNA v3.10.2%2026-06-23Fix
CVE-2026-49406Deno BYONM module resolution path traversal5.5CNA v3.10.2%2026-06-23Fix
CVE-2026-49402Deno: Command injection via spawnSync and spawn on Windows8.1CNA v3.10.4%2026-06-23Fix
CVE-2026-49401Deno permission bypass via Unicode Normalization Mismatch on macOS (APFS)7.3CNA v3.10.2%2026-06-23Fix
CVE-2026-48520Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read6.1CNA v3.10.4%2026-06-23Fix
CVE-2026-48519Langflow: Unauthenticated RCE in Shareable Playgrounds9.6CNA v3.10.8%2026-06-23Exploit codeFix
CVE-2026-48493Snipe-IT vulnerable to privilege escalation for self via API Permissions Assignment5.5CNA v3.10.3%2026-06-23Fix
CVE-2026-48491Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass7.8CNA v4.00.4%2026-06-23Fix
CVE-2026-48020Traefik StripPrefix Route-Level Auth Bypass via Path Normalization7.8CNA v4.00.8%2026-06-23Fix
CVE-2026-47693Poweradmin log export CSV injection6.9CNA v3.10.4%2026-06-23Fix
CVE-2026-47388NocoDB: Missing Ownership Check in MCP Attachment Read2.3CNA v4.00.3%2026-06-23Fix
CVE-2026-47387NocoDB: Stored cross-site scripting via form View Redirect URL8.4CNA v4.00.4%2026-06-23Fix
CVE-2026-47386NocoDB: OAuth authorization code race condition6.3CNA v4.00.3%2026-06-23Fix
CVE-2026-47385NocoDB: Path traversal via SQLite Source Filename5.3CNA v4.00.4%2026-06-23Fix
CVE-2026-47384NocoDB: SQL injection via Column Title in Bulk GroupBy5.3CNA v4.00.4%2026-06-23Fix
CVE-2026-47383NocoDB: Stored cross-site scripting via Row Comments7.4CNA v4.00.4%2026-06-23Fix
CVE-2026-47382NocoDB: Server-side request forgery via Database Connection host5.3CNA v4.00.4%2026-06-23Fix
CVE-2026-47381NocoDB: Cross-Workspace Integration Use in Connection Test6.9CNA v4.00.4%2026-06-23Fix
CVE-2026-47380NocoDB: User Enumeration via Sign-In Timing6.3CNA v4.00.3%2026-06-23Fix
CVE-2026-47379NocoDB: Plaintext password Comparison in Shared Views6.9CNA v4.00.4%2026-06-23Fix
CVE-2026-47378NocoDB: Hidden Column Exposure in Public Shared view endpoints6.9CNA v4.00.4%2026-06-23Fix
CVE-2026-47377NocoDB: Open redirect via Hash Fragment in hashRedirect plugin5.1CNA v4.00.4%2026-06-23Fix
CVE-2026-47376NocoDB: Reflected cross-site scripting via Password Reset Token5.1CNA v4.00.4%2026-06-23Fix
CVE-2026-47375NocoDB: Postgres SQL injection in Formula `ARRAYSORT`6.0CNA v3.10.4%2026-06-23Fix
CVE-2026-47279NocoDB: Hidden LTAR Column Exposure in Public Shared-View Relation endpoints6.9CNA v4.00.4%2026-06-23Fix
CVE-2026-46554NocoDB: Stale Auth Cache after API Token Deletion2.3CNA v4.00.3%2026-06-23Fix
CVE-2026-46553NocoDB: Attachment Size Limit Bypass via Upload-by-URL2.1CNA v4.00.4%2026-06-23Fix
CVE-2026-46552NocoDB: Shared-base link access can invite arbitrary users as persistent base members5.8CNA v3.10.3%2026-06-23Exploit codeFix
CVE-2026-46551NocoDB: Missing File Size Enforcement in Upload-by-URL allows denial of service via Disk Exhaustion6.5CNA v3.10.4%2026-06-23Fix
CVE-2026-46550NocoDB: Refresh Token Cookie Set without `Secure` and `SameSite` Flags5.4CNA v3.10.2%2026-06-23Fix
CVE-2026-46549NocoDB: OAuth Token Scope not Enforced at ACL Layer allows Scope Escalation2.0CNA v3.10.2%2026-06-23Fix
CVE-2026-46548NocoDB: SSRF Protection Bypass in Notification Webhook Plugins (Slack, Discord, Mattermost, Teams)4.3CNA v3.10.3%2026-06-23Fix
CVE-2026-46547NocoDB: Reflected cross-site scripting via Page Leaving Redirect URL6.1CNA v3.10.3%2026-06-23Fix
CVE-2026-45792RTK project filter configuration loading insufficient verification of data authenticity6.9CNA v4.00.1%2026-06-23Fix
CVE-2026-45732n8n has a Cross-user authorization bypass in Dynamic Credential OAuth endpoints8.3CNA v4.00.4%2026-06-23Fix
CVE-2026-45692Caddy: Remote admin authorization bypass in `/config` API via Array Index Normalization5.4CNA v3.10.2%2026-06-23Fix
CVE-2026-45135Caddy: Unsafe Unicode Handling in FastCGI splitPos allows Execution of Non-PHP files8.1CNA v3.10.7%2026-06-23Fix
CVE-2026-44961Revive Adserver improper authentication0.0CNA v3.00.4%2026-06-23
CVE-2026-44960Revive Adserver cross-site scripting0.0CNA v3.00.4%2026-06-23
CVE-2026-44959Revive Adserver code injection8.8CNA v3.00.6%2026-06-23
CVE-2026-44958Revive Adserver improper access control5.4CNA v3.00.3%2026-06-23
CVE-2026-44957Revive Adserver missing authorization4.3CNA v3.00.3%2026-06-23
CVE-2026-44956Revive Adserver cross-site scripting0.0CNA v3.00.4%2026-06-23
CVE-2026-44792n8n has a Source Control Pull SQL injection8.9CNA v4.00.4%2026-06-23Fix
CVE-2026-44791n8n has an XML Node prototype pollution Patch Bypass9.4CNA v4.00.5%2026-06-23Fix
CVE-2026-44790n8n has an arbitrary file read via Git Node9.4CNA v4.00.5%2026-06-23Fix
CVE-2026-44789n8n HTTP Request node pagination prototype pollution9.4CNA v4.00.5%2026-06-23Exploit codeFix
CVE-2026-44726Deno: TLS retry copies stale upgrade hook, risking plaintext traffic7.4CNA v3.10.2%2026-06-23Fix
CVE-2026-44089Buffer overflow in Totolink EX1200L router9.4CNA v4.00.3%2026-06-23
CVE-2026-42867Langflow: Path traversal in Knowledge Bases API via Creation endpoint6.5CNA v3.10.5%2026-06-23Fix
CVE-2026-41862Spring Statemachine deserialization of untrusted data8.8CNA v3.10.8%2026-06-23Fix
CVE-2026-39253An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivotal.Core.Common.dll and Pivotal.Engine.Client.Services.Conversion.dll components.8.1CISA ADP v3.10.7%2026-06-23
CVE-2026-35019NetComm NF20MESH session cookie encryption authentication bypass9.2CNA v4.00.8%2026-06-23Fix
CVE-2026-35018NetComm NF20MESH user account management OS command injection8.7CNA v4.01.3%2026-06-23Fix
CVE-2026-34917Revive Adserver improper authentication4.3CNA v3.00.4%2026-06-23
CVE-2026-34916Revive Adserver code injection8.8CNA v3.00.6%2026-06-23
CVE-2026-34915Revive Adserver cross-site scripting6.1CNA v3.00.3%2026-06-23
CVE-2026-34914Revive Adserver SQL injection8.3CNA v3.00.4%2026-06-23
CVE-2026-34913Revive Adserver missing authorization4.3CNA v3.00.3%2026-06-23
CVE-2026-34912Revive Adserver missing authorization4.3CNA v3.00.3%2026-06-23
CVE-2026-33760Langflow: IDOR/BOLA in Monitor API Missing Ownership Enforcement on 7 endpoints8.8CNA v3.10.5%2026-06-23Fix
CVE-2026-28496FOSSBilling Twig template rendering server-side template injection9.4CNA v4.01.9%2026-06-23Reported exploitedNucleiExploit codeKCVFix
CVE-2026-27604FOSSBilling API role validation missing authentication10.0CNA v4.00.5%2026-06-23NucleiKCVFix
CVE-2026-23513FOSSBilling: Broken Authorization in Client Transaction and Order Listings7.1CNA v4.00.4%2026-06-23Fix
CVE-2026-13007Insecure Public Caching on REST API endpoints in Tenable Identity Exposure8.5CNA v4.00.6%2026-06-23Fix
CVE-2026-12969Dnsmasq: Dnsmasq: Out-of-bounds read in find_soa due to missing extrabytes validation5.3CNA v3.10.4%2026-06-23Fix
CVE-2026-12958Arbitrary file write in Language Servers for AWS8.5CNA v4.00.2%2026-06-23Fix
CVE-2026-12957Arbitrary code execution in Language Servers for AWS8.5CNA v4.00.2%2026-06-23Fix
CVE-2026-12892GStreamer out-of-bounds read4.4CNA v3.10.2%2026-06-23Fix
CVE-2026-12891GStreamer out-of-bounds read4.3CNA v3.10.4%2026-06-23Fix
CVE-2026-12866expr-eval vulnerable to code execution9.2CNA v4.00.9%2026-06-23
CVE-2026-12164Privilege escalation in Fortra File Integrity Monitoring (FIM)4.4CNA v3.10.1%2026-06-23Fix
CVE-2026-12163Stored XSS in Fortra File Integrity Monitoring (FIM)5.5CNA v3.10.2%2026-06-23Fix
CVE-2026-12112The Foreman Foreman foreman-mcp-server: Mcp server: Active session hijacking7.8CNA v3.10.2%2026-06-23Fix
CVE-2026-11972Python CPython tarfile opened in streaming mode mishandles EOF8.2CNA v4.00.7%2026-06-23Fix
CVE-2026-11940Python CPython tarfile extraction filter bypass allows escaping the destination directory7.8CNA v4.00.8%2026-06-23Fix
CVE-2026-11833Yokogawa Electric FAST/TOOLS cleartext transmission of sensitive information8.2CNA v4.00.3%2026-06-23Fix
CVE-2026-11820Red Hat Enterprise Linux 10 sensitive information in log files6.5CNA v3.10.4%2026-06-23
CVE-2026-11819Red Hat Enterprise Linux 10 sensitive information in log files5.5CNA v3.10.2%2026-06-23
CVE-2026-11807Red Hat Ansible Automation Platform Event-Driven Ansible websocket API missing authorization9.6CNA v3.10.5%2026-06-23Fix
CVE-2026-11772Reflected XSS in DRIMO CMS5.1CNA v4.00.6%2026-06-23
CVE-2026-11374Zoho ManageEngine single sign-on ticket generation insufficient randomness9.0CNA v3.12.5%2026-06-23Fix
CVE-2026-10857Reflected XSS in Akinsoft's e-Commerce6.1CNA v3.10.3%2026-06-23Fix
CVE-2026-10711RCE in Akınsoft's CafePlus8.8CNA v3.10.4%2026-06-23Fix
CVE-2026-10609OpenShift Cluster Logging Operator missing authorization flaw6.8CNA v3.10.4%2026-06-23Fix
CVE-2026-10521MB connect line mbCONNECT24 authenticated unintended access to critical program parameters8.6CNA v4.00.6%2026-06-23Fix
CVE-2026-9733Mojolicious::Plugin::Web::Auth::OAuth2 versions for Perl have an insecure default state parameter9.1CISA ADP v3.10.5%2026-06-23
CVE-2026-9073The Foreman Foreman foreman-mcp-server: Mcp server: Insecure sensitive HTTP header sanitization6.2CNA v3.10.2%2026-06-23Fix
CVE-2026-8379Frontend File Manager WordPress plugin unauthenticated arbitrary file download7.5CISA ADP v3.10.4%2026-06-23
CVE-2026-8378Frontend File Manager WordPress plugin Subscriber+ stored cross-site scripting via file Rename5.4CISA ADP v3.10.2%2026-06-23
CVE-2026-8172Simple Basic Contact Form WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2026-06-23
CVE-2026-8163Infility Global WordPress plugin Subscriber+ SQL injection via order parameter8.8CISA ADP v3.10.4%2026-06-23Fix
CVE-2026-7842Infility Global WordPress plugin Editor+ SQL injection via orderby parameter6.8CISA ADP v3.10.4%2026-06-23Fix
CVE-2026-4983Eclipse Open VSX cross-site scripting4.1CNA v3.10.3%2026-06-23Fix
CVE-2026-4610ProfileGrid WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-23Fix
CVE-2026-0864Python CPython configuration injection via Carriage Return (\r) in write method4.1CNA v4.00.1%2026-06-23Fix
CVE-2026-56698Nuxt cross-site scripting via navigateTo open option5.3CNA v4.00.4%2026-06-22Fix
CVE-2026-56697Nuxt open redirect via Protocol-Relative Paths in reloadNuxtApp5.3CNA v4.00.3%2026-06-22Fix
CVE-2026-56450AIL framework two-factor authentication verification vulnerability5.1CNA v4.00.6%2026-06-22
CVE-2026-56448Authenticated path traversal in AIL Framework Investigation Downloads allows arbitrary file read8.3CNA v4.00.4%2026-06-22
CVE-2026-56447MISP remote code execution via arbitrary rdkafka configuration path7.2NVD v3.10.6%2026-06-22
CVE-2026-56446Authenticated remote code execution via arbitrary NDJSON Error Log Path in MISP7.2v3.10.7%2026-06-22
CVE-2026-56425MISP Azure AD authentication plugin session fixation8.8NVD v3.10.5%2026-06-22
CVE-2026-56424MISP incorrect authorization8.8v3.10.5%2026-06-22
CVE-2026-56423MISP bulk deletion endpoints missing authorization8.8NVD v3.10.5%2026-06-22Exploit code
CVE-2026-56422MISP Core: Mass assignment and Object Re-ownership via Unvalidated request fields9.4CNA v4.00.6%2026-06-22
CVE-2026-56357n8n Webhook Forgery via Missing HMAC-SHA256 signature verification in GitHub Webhook Trigger5.3v3.10.3%2026-06-22Fix
CVE-2026-56348n8n dynamic node parameters endpoint server-side request forgery9.9v3.10.5%2026-06-22Fix
CVE-2026-56326Nuxt Server-Side open redirect via Path-Normalization Bypass in navigateTo5.3CNA v4.00.4%2026-06-22Fix
CVE-2026-56324Capgo Rate Limit Bypass via User-Controlled device_id parameter8.8CNA v4.00.5%2026-06-22Fix
CVE-2026-56323Capgo Unauthenticated Channel Enumeration and App Oracle via GET /channel_self8.7CNA v4.00.6%2026-06-22Fix
CVE-2026-56321Capgo missing authentication Middleware on GET /private/role_bindings endpoint6.9CNA v4.00.5%2026-06-22Fix
CVE-2026-56314Capgo Deleted Bundle Selection via Missing Deletion Filter in /updates endpoint7.1CNA v4.00.4%2026-06-22Fix
CVE-2026-56311Capgo Unauthenticated Cross-Tenant Disclosure via get_current_plan_max_org RPC6.9CNA v4.00.4%2026-06-22Fix
CVE-2026-56306Capgo Subkey Enforcement Bypass via x-limited-key-id Header Parsing5.3CNA v4.00.3%2026-06-22Fix
CVE-2026-56280Capgo Cap-go Privilege Inversion in Build Log Stream via SSE Disconnect7.1CNA v4.00.4%2026-06-22Fix
CVE-2026-56268Flowise Cross-Workspace information disclosure via chatflows/apikey endpoint5.3CNA v4.00.4%2026-06-22Fix
CVE-2026-56266Crawl4AI server-side request forgery via Direct Crawl endpoints8.6NVD v3.10.5%2026-06-22Fix
CVE-2026-56255Capgo denial of service via Unlimited Demo App Creation5.3CNA v4.00.4%2026-06-22Fix
CVE-2026-56221Capgo Cap-go SQL injection in Cloudflare Analytics Engine Queries via cloudflare.ts7.1CNA v4.00.4%2026-06-22Fix
CVE-2026-56109ALSA library double free via parse_def in conf.c7.0CNA v4.00.2%2026-06-22Fix
CVE-2026-56104Chainlit session hijacking via WebSocket Session Restoration8.8CNA v4.00.4%2026-06-22Fix
CVE-2026-55603chimurai http-proxy-middleware fixRequestBody multipart form rebuilding CRLF injection7.5CNA v3.10.3%2026-06-22Fix
CVE-2026-55602chimurai http-proxy-middleware router host and path matching improper input validation6.9CNA v4.00.4%2026-06-22Fix
CVE-2026-55599phpseclib X.509 Authority Information Access handling server-side request forgery5.8CNA v3.10.2%2026-06-22Fix
CVE-2026-55443LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders5.1CNA v3.10.2%2026-06-22Fix
CVE-2026-55409Filament: Disabled RichEditor field state can be used for XSS7.6CNA v3.10.3%2026-06-22Fix
CVE-2026-55388piscinajs piscina worker filename option prototype pollution8.1CNA v3.10.5%2026-06-22Fix
CVE-2026-54911UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps6.5CNA v3.10.4%2026-06-22Fix
CVE-2026-54665Apache NiFi: Missing Validation for Proxy host headers6.3CNA v4.00.3%2026-06-22Fix
CVE-2026-54651pypdf thread and article processing in writer infinite loop6.9CNA v4.00.2%2026-06-22Fix
CVE-2026-54531pypdf outline processing in writer infinite loop6.9CNA v4.00.2%2026-06-22Fix
CVE-2026-54530pypdf layout-mode text extraction infinite loop6.9CNA v4.00.2%2026-06-22Fix
CVE-2026-54300@astrojs/netlify broadens Astro image.remotePatterns in Netlify Image CDN config5.3CNA v3.10.3%2026-06-22Fix
CVE-2026-54299Astro: Host-header full-read SSRF in core prerendered error-page fetch7.5CNA v3.10.3%2026-06-22Fix
CVE-2026-54298Astro: XSS via Unescaped Attribute Names in Spread Props4.2CNA v3.10.2%2026-06-22Fix
CVE-2026-54293NLTK: URL-Encoded path traversal in nltk.data.load allows arbitrary Local File Read7.5CNA v3.10.6%2026-06-22Fix
CVE-2026-54290Hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard7.1CNA v3.10.3%2026-06-22Fix
CVE-2026-54289Hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest4.8CNA v3.10.2%2026-06-22Fix
CVE-2026-54288Hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length`6.5CNA v3.10.1%2026-06-22Fix
CVE-2026-54287Hono AWS Lambda adapter improper output encoding5.3CNA v3.10.3%2026-06-22Fix
CVE-2026-54286Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)5.9CNA v3.10.4%2026-06-22Fix
CVE-2026-54285OpenTelemetry Core: Unbounded memory allocation in W3C Baggage propagation5.3CNA v3.10.4%2026-06-22Fix
CVE-2026-54283Starlette: Request.form limits silently ignored for application/x-www-form-urlencoded enable DoS7.5CNA v3.10.5%2026-06-22Fix
CVE-2026-54282Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname3.7CNA v3.10.3%2026-06-22Fix
CVE-2026-54281Nest: Middleware Bypass on Fastify via Trailing Slash8.7CNA v4.00.5%2026-06-22Fix
CVE-2026-54280Aiohttp: Payload Response Resources are not Closed after Mid-Body Disconnect1.7CNA v4.00.5%2026-06-22Fix
CVE-2026-54279Aiohttp: Host-Only Cookies Become Domain Cookies after CookieJar Persistence1.3CNA v4.00.5%2026-06-22Fix
CVE-2026-54278Aiohttp: Unread Compressed Request Bodies Bypass client_max_size during Cleanup6.6CNA v4.00.5%2026-06-22Fix
CVE-2026-54277Aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines6.6CNA v4.00.6%2026-06-22Fix
CVE-2026-54276Aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges6.3CNA v4.00.3%2026-06-22Fix
CVE-2026-54275Aiohttp: TLS Server Hostname Override is Ignored when Reusing HTTPS Connections2.7CNA v4.00.5%2026-06-22Fix
CVE-2026-54274Aiohttp: Incomplete websocket frame payloads bypass memory limits6.6CNA v4.00.5%2026-06-22Fix
CVE-2026-54273Aiohttp: HTTP/1 Pipelined Requests Queue without Limit6.6CNA v4.00.5%2026-06-22Fix
CVE-2026-54271protobufjs-cli pbjs static code generator code injection8.2CNA v3.10.3%2026-06-22Fix
CVE-2026-54270protobuf.js binary decoder resource exhaustion5.3CNA v3.10.4%2026-06-22Fix
CVE-2026-54269protobuf.js schema-derived property names vulnerability5.3CNA v3.10.4%2026-06-22Fix
CVE-2026-54268Angular: Denial of service (DoS) via OOM in Date Formatting (formatDate)8.2CNA v4.00.6%2026-06-22Fix
CVE-2026-54267Angular Client Hydration DOM Clobbering and Response-cache poisoning8.6CNA v4.00.3%2026-06-22Fix
CVE-2026-54266Angular HttpTransferCache vulnerability8.8CNA v4.00.1%2026-06-22Fix
CVE-2026-54265Angular: Two-Way Property Binding Sanitization Bypass (XSS)5.3CNA v4.00.3%2026-06-22Fix
CVE-2026-54264Angular: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker8.3CNA v4.00.4%2026-06-22Fix
CVE-2026-54236vLLM: Incomplete fix leaks PIL repr addresses via Anthropic router5.3CNA v3.10.9%2026-06-22NucleiFix
CVE-2026-54235vLLM: Temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels6.9CNA v4.00.5%2026-06-22Fix
CVE-2026-54233vLLM: OOM denial of service via Audio decompression bomb6.5CNA v3.10.4%2026-06-22Fix
CVE-2026-54232vLLM: Dependency Confusion vulnerability in vLLM Dockerfile8.8CNA v3.10.6%2026-06-22Fix
CVE-2026-54100Red Hat OpenShift improper certificate validation8.3CNA v3.10.3%2026-06-22Fix
CVE-2026-54099Red Hat OpenShift improper privilege management8.8CNA v3.10.1%2026-06-22Fix
CVE-2026-53923vLLM GGUF Kernels: Int64_t to int truncation of tensor dimensions causes GPU buffer overflow5.3CNA v4.00.5%2026-06-22Fix
CVE-2026-53779webp-sh webp_server_go WebP Server Go path traversal via Backslash Encoding on Windows8.7CNA v4.00.6%2026-06-22Fix
CVE-2026-53663remix-run react-router react Router: Potential CSRF via PUT/PATCH/delete document requests3.1CNA v3.10.1%2026-06-22Fix
CVE-2026-53655isaacs node-tar PAX header parsing interpretation conflict6.9CNA v4.00.2%2026-06-22Fix
CVE-2026-53632vitejs launch-editor NTLMv2 hash disclosure via UNC path handling on Windows5.5CNA v4.00.4%2026-06-22Fix
CVE-2026-53571Vite: `server.fs.deny` bypass on Windows alternate paths8.2CNA v4.00.6%2026-06-22Exploit codeFix
CVE-2026-53550JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases5.3CNA v3.10.4%2026-06-22Fix
CVE-2026-53540Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory3.7CNA v3.10.3%2026-06-22Fix
CVE-2026-53539python-multipart querystring parser denial of service7.5CNA v3.10.5%2026-06-22Fix
CVE-2026-53538Python-Multipart: Semicolon treated as querystring field separator enables parameter smuggling3.7CNA v3.10.3%2026-06-22Fix
CVE-2026-53537Python-Multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters3.7CNA v3.10.3%2026-06-22Fix
CVE-2026-52725Angular template and Dynamic Component Namespace Bypass leading to cross-site scripting (XSS)5.3CNA v4.00.4%2026-06-22Fix
CVE-2026-50557Angular: Template and Attribute Namespace Sanitization Bypass (XSS)5.3CNA v4.00.3%2026-06-22Fix
CVE-2026-50556Angular server-side rendering noscript serialization cross-site scripting8.6CNA v4.00.4%2026-06-22Fix
CVE-2026-50555Angular: Improper neutralization of input during web page generation in @angular/platform-server8.6CNA v4.00.3%2026-06-22Fix
CVE-2026-50269Aiohttp: CRLF injection in multipart headers2.7CNA v4.00.5%2026-06-22Fix
CVE-2026-50184Angular: Request Credential and Cache Policy Stripping in Angular Service Worker5.7CNA v4.00.2%2026-06-22Fix
CVE-2026-50178Angular: Remote code execution8.7CNA v4.00.5%2026-06-22Fix
CVE-2026-50171Angular: Denial of service (DoS) via OOM in Number Formatting (digitsInfo)8.2CNA v4.00.3%2026-06-22Fix
CVE-2026-50170Angular: Information leak via Default Caching of Credentialed requests in HttpTransferCache8.2CNA v4.00.4%2026-06-22Fix
CVE-2026-50169Angular Service Worker Policy-Bypass and Credential-Stripping vulnerabilities5.7CNA v4.00.2%2026-06-22Fix
CVE-2026-50168Angular: URL Parser Differential in @angular/platform-server leading to SSRF Allowlist Bypass8.8CNA v4.00.2%2026-06-22Fix
CVE-2026-50146Astro: Reflected XSS via unescaped slot name7.1CNA v3.10.3%2026-06-22Fix
CVE-2026-49468LiteLLM: Authentication bypass via host header injection9.5CNA v4.03.0%2026-06-22NucleiExploit codeFix
CVE-2026-49461pypdf form XObject text extraction denial of service6.9CNA v4.00.2%2026-06-22Fix
CVE-2026-49460pypdf FlateDecode PNG predictor decoding vulnerability5.1CNA v4.00.2%2026-06-22Fix
CVE-2026-49356Babel: Arbitrary file read via sourceMappingURL Comment in @babel/core3.2CNA v3.10.2%2026-06-22Fix
CVE-2026-49241Angular Language Service VS Code extension TypeScript SDK path handling remote code execution8.7CNA v4.00.2%2026-06-22Fix
CVE-2026-48931Node.js Node time-of-check time-of-use race condition3.7v3.10.3%2026-06-22Fix
CVE-2026-48746vLLM: OpenAI auth bypass9.1CNA v3.11.2%2026-06-22Fix
CVE-2026-48712protobuf.js JSON conversion uncontrolled recursion7.5CNA v3.10.5%2026-06-22Fix
CVE-2026-48517MessagePack-CSharp unsafe reflection6.3CNA v4.00.3%2026-06-22Fix
CVE-2026-48516MessagePack-CSharp: InterfaceLookupFormatter bypasses collision-resistant comparer settings6.3CNA v4.00.4%2026-06-22Fix
CVE-2026-48515MessagePack-CSharp: Multi-dimensional array formatters allocate from unchecked dimensions6.3CNA v4.00.4%2026-06-22Fix
CVE-2026-48514MessagePack-CSharp: Unity unsafe blit formatter allocates from unbounded byte length6.3CNA v4.00.4%2026-06-22Fix
CVE-2026-48513MessagePack-CSharp: DynamicUnionResolver generated deserializers miss depth enforcement6.3CNA v4.00.4%2026-06-22Fix
CVE-2026-48512MessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcement6.3CNA v4.00.4%2026-06-22Fix
CVE-2026-48511MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted maps6.3CNA v4.00.4%2026-06-22Fix
CVE-2026-48510MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengths6.3CNA v4.00.4%2026-06-22Fix
CVE-2026-48509MessagePack-CSharp insecure default initialization6.3CNA v4.00.4%2026-06-22Fix
CVE-2026-48506MessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depth7.5CNA v3.10.5%2026-06-22Fix
CVE-2026-48505Filament multi-factor authentication recovery codes race condition7.4CNA v3.10.3%2026-06-22Fix
CVE-2026-48502MessagePack-CSharp out-of-bounds read8.2CNA v4.00.4%2026-06-22Fix
CVE-2026-48500Filament: Unauthenticated temporary file upload on auth pages6.5CNA v3.10.3%2026-06-22Fix
CVE-2026-48167Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS6.4CNA v3.10.2%2026-06-22Fix
CVE-2026-48166Filament: Timing-based user enumeration on login page5.3CNA v3.10.3%2026-06-22Fix
CVE-2026-48109MessagePack-CSharp improper input validation8.2CNA v3.10.5%2026-06-22Fix
CVE-2026-48067Filament: Inconsistent scope enforcement for AttachAction and AssociateAction Select fields6.5CNA v3.10.3%2026-06-22Fix
CVE-2026-47242ruby net-imap Net::IMAP: Command injection via ID command argument5.8CNA v4.00.2%2026-06-22Fix
CVE-2026-47241ruby net-imap Net::IMAP: Denial of service via incomplete raw argument validation2.1CNA v4.00.4%2026-06-22Fix
CVE-2026-47240ruby net-imap Net::IMAP: Command injection via non-synchronizing literal in raw argument5.8CNA v4.00.8%2026-06-22Fix
CVE-2026-47155VLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors6.5CNA v3.10.2%2026-06-22Fix
CVE-2026-46417Angular: SSRF via Hostname Hijacking in @angular/platform-server8.8CNA v4.00.4%2026-06-22Fix
CVE-2026-45034PhpSpreadsheet: File::prohibitWrappers bypass9.2CNA v4.00.5%2026-06-22Fix
CVE-2026-44914Apache NiFi: Missing authorization of Restricted Permissions when Replacing Flow Contents7.5CNA v4.00.7%2026-06-22Fix
CVE-2026-44913Apache NiFi: Improper Escaping of Table Names in CaptureChangeMySQL5.2CNA v4.00.6%2026-06-22Fix
CVE-2026-44911Apache NiFi: Incorrect authorization for Configuration Verification requests2.3CNA v4.00.5%2026-06-22Fix
CVE-2026-44889WebOb: Location header normalization during redirect leads to open redirect6.1CNA v3.10.3%2026-06-22Fix
CVE-2026-44727Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler`9.3CNA v4.00.4%2026-06-22Fix
CVE-2026-44311Fabric.js: Improper escaping in fabric.Gradient colorStops leads to XSS in SVG serialization5.4CNA v3.10.3%2026-06-22Fix
CVE-2026-44274Dell Wyse Management Suite (WMS) link following7.8CNA v3.10.2%2026-06-22Fix
CVE-2026-44273Dell Wyse Management Suite (WMS) default credentials6.0CNA v3.10.2%2026-06-22Fix
CVE-2026-44272Dell Wyse Management Suite (WMS) SQL injection8.8CNA v3.10.4%2026-06-22Fix
CVE-2026-44271Dell Wyse Management Suite (WMS) SQL injection8.1CNA v3.10.4%2026-06-22Fix
CVE-2026-42129Path traversal in the Loki data source plugin7.7CNA v3.10.4%2026-06-22Fix
CVE-2026-42127Grafana Enterprise pre-authentication denial of service in the public dashboard query endpoint7.5CNA v3.10.4%2026-06-22Fix
CVE-2026-41523vLLM activation function loading code injection7.5CNA v3.10.9%2026-06-22Fix
CVE-2026-41479Authlib OAuth 2.0 authorization endpoint open redirect5.4CNA v3.10.3%2026-06-22Fix
CVE-2026-41049Caching of Authentication allows authentication bypass between users in qSnapper7.1NVD v3.10.2%2026-06-22Fix
CVE-2026-41048Caching of Authentication allows authentication bypass in qSnapper7.1NVD v3.10.2%2026-06-22Fix
CVE-2026-41047Information leak via diff methods in qSnapper5.5NVD v3.10.2%2026-06-22Fix
CVE-2026-41046Path traversal via `config` parameter in qSnapper7.3NVD v3.10.2%2026-06-22Fix
CVE-2026-41045Weak polkit authentication check in qSnapper7.0NVD v3.10.2%2026-06-22Fix
CVE-2026-39904Gophish denial of service via Office Document upload7.1CNA v4.00.4%2026-06-22
CVE-2026-28381Local File Read/Write to potential privilege escalation via Snowflake GET/PUT9.6CNA v3.10.4%2026-06-22
CVE-2026-12888Thinkst Applied Research Canarytokens HTML injection in the Canarytoken Google Chat notification2.0CNA v4.00.4%2026-06-22Fix
CVE-2026-12863pretix Venueless open redirect5.1CNA v4.00.4%2026-06-22
CVE-2026-12862pretix Venueless XLSX formula injection in exports5.1CNA v4.00.4%2026-06-22
CVE-2026-12823Browserbase Skills Autobrowse Trace Artifact default permission4.8CNA v4.00.2%2026-06-22
CVE-2026-12822langflow-ai Langflow Bundle URL Loader code injection7.8v3.10.3%2026-06-22
CVE-2026-12821FlowiseAI Flowise S3 Document Loader S3.ts path traversal5.3CNA v4.00.5%2026-06-22
CVE-2026-12815coollabsio coolify Image Name os command injection5.3CNA v4.02.0%2026-06-22
CVE-2026-12725Dnsmasq: Dnsmasq: Heap buffer overflow in log_query when logging unsupported ds/dnskey replies5.9CNA v3.10.5%2026-06-22Fix
CVE-2026-12628IBM Storage Protect Snapshot for Windows FlashCopy Manager authentication hard-coded credentials9.1CNA v3.10.6%2026-06-22Fix
CVE-2026-12602Incorrect permissions in ArubaSign by Aruba8.8CNA v4.00.2%2026-06-22Fix
CVE-2026-12581Digiwin｜EasyFlow .NET session fixation7.7CNA v4.00.5%2026-06-22Fix
CVE-2026-12580Digiwin｜EasyFlow .NET stored cross-site scripting5.1CNA v4.00.3%2026-06-22Fix
CVE-2026-12549GNOME libsoup SoupServer range header handling vulnerability4.8CNA v3.10.4%2026-06-22Fix
CVE-2026-12479Path traversal in keras-team/keras6.1CNA v3.00.4%2026-06-22Fix
CVE-2026-12249Canonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-Enrollment9.0CNA v4.00.1%2026-06-22Fix
CVE-2026-11994Akaunting authenticated stored XSS in report description rendering4.8CNA v4.00.4%2026-06-22
CVE-2026-11943Akaunting authenticated stored XSS in document timeline4.8CNA v4.00.4%2026-06-22
CVE-2026-11942Akaunting stored XSS in delete confirmation modal4.8CNA v4.00.4%2026-06-22
CVE-2026-11834Unauthenticated command injection via DHCP Option Handling in multiple TP-Link Routers8.7CNA v4.00.7%2026-06-22Exploit codeFix
CVE-2026-11748LY Central Dogma LDAP injection6.9CNA v4.00.6%2026-06-22Fix
CVE-2026-11746LY Central Dogma hard-coded credentials9.4CNA v4.00.2%2026-06-22Fix
CVE-2026-11745Central Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)8.8CNA v4.00.2%2026-06-22Fix
CVE-2026-11373Net::Statsite::Client versions for Perl allow metric injections9.1CISA ADP v3.10.6%2026-06-22
CVE-2026-11372IBM TRIRIGA cross-site scripting5.4CNA v3.10.2%2026-06-22Fix
CVE-2026-10852IBM WebSphere Application Server is affected by a denial of service5.9CNA v3.10.5%2026-06-22Fix
CVE-2026-10845IBM WebSphere Application Server is affected by an authentication bypass7.3CISA ADP v3.10.5%2026-06-22Fix
CVE-2026-10789MCP extension code injection vulnerability in Autodesk Fusion Desktop9.6CNA v3.10.7%2026-06-22Fix
CVE-2026-10658Zephyr Bluetooth ISO receive out-of-bounds write7.1CNA v3.10.3%2026-06-22Fix
CVE-2026-10651zephyrproject zephyr out-of-bounds read in Bluetooth Classic SDP attribute parsing7.1CNA v3.10.3%2026-06-22Fix
CVE-2026-10645Out-of-bounds read in Zephyr ext2 directory entry traversal from a crafted filesystem image4.9CNA v3.10.2%2026-06-22Fix
CVE-2026-10601Grafana OSS path traversal in the Tempo and Loki data source plugins5.4CNA v3.10.3%2026-06-22Fix
CVE-2026-10561IBM unauthenticated remote code execution in Langflow OSS PythonREPLComponent via Builtins injection10.0CNA v3.11.0%2026-06-22Fix
CVE-2026-10530Pie Register WordPress plugin unauthenticated email verification bypass via predictable token5.3CISA ADP v3.10.2%2026-06-22Fix
CVE-2026-9610IBM Datacap improper access control2.3CNA v3.10.3%2026-06-22Fix
CVE-2026-9320IBM WebSphere Application Server denial of service5.9CNA v3.10.6%2026-06-22Fix
CVE-2026-9162Mattermost global session revocation does not invalidate active WebSocket connections4.3CNA v3.10.3%2026-06-22Fix
CVE-2026-9072IBM WebSphere Application Server remote code execution8.1CNA v3.10.7%2026-06-22Fix
CVE-2026-9071IBM WebSphere Application Server denial of service7.5CNA v3.10.6%2026-06-22Fix
CVE-2026-9029Grafana OSS stored XSS in the Geomap panel tile-layer attribution7.3CNA v3.10.3%2026-06-22Fix
CVE-2026-9006IBM WebSphere Application Server is affected by server-side request forgery7.4CNA v3.10.4%2026-06-22Fix
CVE-2026-8934Cross-Project information leakage in Google App Engine UI6.9CNA v4.00.5%2026-06-22Fix
CVE-2026-8918ASUS Armoury Crate permissive allowlist7.1CNA v4.00.3%2026-06-22
CVE-2026-8858IBM WebSphere Application Server remote code execution7.5CNA v3.10.4%2026-06-22Fix
CVE-2026-8823Mattermost user Manager can demote bot accounts to guest without bot-management permission3.8CNA v3.10.3%2026-06-22Fix
CVE-2026-8646IBM WebSphere Application Server HTTP request smuggling7.4CNA v3.10.6%2026-06-22Fix
CVE-2026-8636IBM Datacap cleartext storage of sensitive information in memory5.5CNA v3.10.2%2026-06-22Fix
CVE-2026-8157Vitepos WordPress plugin Outlet Manager+ privilege escalation8.8CISA ADP v3.10.4%2026-06-22Fix
CVE-2026-8074Mattermost improper permission Check allows User Manager to Deactivate Bot Accounts3.8CNA v3.10.3%2026-06-22Fix
CVE-2026-8059IBM Datacap cross-site scripting6.1CNA v3.10.2%2026-06-22Fix
CVE-2026-7859Motors car media AJAX action missing authorization5.3CISA ADP v3.10.2%2026-06-22Fix
CVE-2026-7664IBM Unauthenticated Flow Execution via Webhook endpoint in Langflow OSS9.8CNA v3.10.5%2026-06-22Fix
CVE-2026-7253IBM Sterling File Gateway SQL injection6.0CNA v3.10.4%2026-06-22Fix
CVE-2026-7167Gaudire Assassin game email validation vulnerability6.9CNA v4.00.6%2026-06-22
CVE-2026-7166Gaudire Assassin game information disclosure9.2CNA v4.00.5%2026-06-22
CVE-2026-7165Gaudire Assassin game addJugador endpoint improper input validation9.4CNA v4.00.5%2026-06-22
CVE-2026-6858Transbank Webpay WordPress plugin unauthenticated stored XSS7.1CISA ADP v3.10.3%2026-06-22Fix
CVE-2026-6673Mattermost Server Jira plugin installed callback missing authentication6.4CNA v3.10.3%2026-06-22Fix
CVE-2026-6653GNOME libxml2 use-after-free9.8NVD v3.10.4%2026-06-22Fix
CVE-2026-6645Insecure Search Path vulnerability in PaperCut Print Deploy client for Windows7.3CNA v4.00.2%2026-06-22Fix
CVE-2026-6062Mattermost IDOR in Jira plugin subscription edit endpoint6.4CNA v3.10.2%2026-06-22Fix
CVE-2026-5139Mattermost GitLab plugin allows Non-Admin Users to Modify Default Instance Configuration5.4CNA v3.10.3%2026-06-22Fix
CVE-2026-4259Ultimate WooCommerce Auction Pro manage auctions action reflected cross-site scripting7.1CISA ADP v3.10.3%2026-06-22
CVE-2026-4110Ultimate WooCommerce Auction Pro bids list parameter reflected cross-site scripting6.1CISA ADP v3.10.3%2026-06-22
CVE-2026-56412libexpat use-after-free5.9v3.10.2%2026-06-21Fix
CVE-2026-56411libexpat integer overflow6.9CNA v3.10.1%2026-06-21Fix
CVE-2026-56410libexpat integer overflow6.9CNA v3.10.1%2026-06-21Fix
CVE-2026-56409libexpat integer overflow6.5CNA v3.10.1%2026-06-21Fix
CVE-2026-56408libexpat integer overflow6.9CNA v3.10.1%2026-06-21Fix
CVE-2026-56407libexpat integer overflow6.9CNA v3.10.2%2026-06-21Fix
CVE-2026-56406libexpat integer overflow6.9CNA v3.10.2%2026-06-21Fix
CVE-2026-56405libexpat integer overflow6.9v3.10.1%2026-06-21Fix
CVE-2026-56404libexpat integer overflow6.9v3.10.1%2026-06-21Fix
CVE-2026-56403libexpat integer overflow6.9v3.10.1%2026-06-21Fix
CVE-2026-56397SiYuan remote code execution via Malicious Bazaar Package Metadata and README9.4CNA v4.00.5%2026-06-21Fix
CVE-2026-56396phpMyFAQ privilege escalation via missing authorization in editUser and updateUserRights8.7CNA v4.00.4%2026-06-21Fix
CVE-2026-56394Craft CMS authenticated path traversal in assets/icon extension parameter7.1CNA v4.00.5%2026-06-21Fix
CVE-2026-56393Craft CMS multiple stored cross-site scripting in Settings Names and field options4.6CNA v4.00.3%2026-06-21Fix
CVE-2026-56385Craft CMS authorization bypass in assets/preview-file endpoint5.3CNA v4.00.4%2026-06-21Fix
CVE-2026-56384Craft CMS missing authorization in assets/preview-thumb endpoint5.3CNA v4.00.3%2026-06-21Fix
CVE-2026-56383Craft CMS stored XSS in Table field via Row Heading Column Type4.6CNA v4.00.3%2026-06-21Fix
CVE-2026-56382Craft CMS remote code execution via Missing Config Sanitization in FieldsController8.6CNA v4.00.9%2026-06-21Fix
CVE-2026-56381Craft CMS stored XSS via User Group Name in User Permissions page4.6CNA v4.00.3%2026-06-21Fix
CVE-2026-56378ImageMagick heap out-of-bounds read in PCD Decoder8.2v3.10.4%2026-06-21Fix
CVE-2026-56367ImageMagick heap out-of-bounds read in PSB RLE Decoding9.1v3.10.2%2026-06-21Fix
CVE-2026-56316Capgo Cap-go Job Existence Oracle via Unauthenticated OPTIONS /build/upload/:jobId/*6.9CNA v4.00.4%2026-06-21Fix
CVE-2026-56299Capgo denial of service via Unauthenticated OPTIONS request to /build/upload endpoint6.9CNA v4.00.7%2026-06-21Fix
CVE-2026-56265Crawl4AI authentication bypass via Hard-coded JWT Signing Key9.3CNA v4.02.6%2026-06-21NucleiFix
CVE-2026-56253Capgo Unauthenticated Organization Member email disclosure via get_org_members RPC8.7CNA v4.00.4%2026-06-21Fix
CVE-2026-56251Capgo privilege escalation via Broken Row Level Security in org_users7.0CNA v4.00.4%2026-06-21Fix
CVE-2026-56242Capgo get_identity_apikey_only RPC information disclosure8.7CNA v4.00.4%2026-06-21Fix
CVE-2026-56239Capgo privilege escalation via security DEFINER function apply_usage_overage7.2CNA v4.00.3%2026-06-21Fix
CVE-2026-56236Capgo CLI arbitrary file overwrite via Symlink-Following in Local Credential Operations6.8CNA v4.00.2%2026-06-21Fix
CVE-2026-56229Capgo Cross-App Build Job Access via app_id/job_id Mismatch in /build/status and /build/logs7.1CNA v4.00.4%2026-06-21Fix
CVE-2026-52911Linux kernel ksmbd session binding vulnerability8.8CNA v3.10.7%2026-06-21Fix
CVE-2026-12814Comfast CF-WR631AX V3 API endpoint mbox-config system os command injection5.3CNA v4.02.0%2026-06-21
CVE-2026-12813activepieces File URL file.ts handleUrlFile server-side request forgery5.3CNA v4.00.3%2026-06-21
CVE-2026-12812Radware Cyber Controller HTML Report Generation HTML injection5.1CNA v4.00.3%2026-06-21
CVE-2026-12811kortix-ai suna Auth endpoint page.tsx router.push cross-site scripting5.3CNA v4.00.5%2026-06-21Fix
CVE-2026-12810Edimax BR-6478AC V2 POST request mp command injection5.3CNA v4.02.0%2026-06-21
CVE-2026-12809Edimax BR-6478AC V2 POST request wiz_5in1_redirect command injection5.3CNA v4.02.0%2026-06-21
CVE-2026-12808Edimax BR-6478AC V2 POST request stainfo command injection5.3CNA v4.02.0%2026-06-21
CVE-2026-12807Edimax BR-6478AC V2 POST request setWAN command injection5.3CNA v4.02.0%2026-06-21
CVE-2026-12806Edimax BR-6478AC V2 POST request formWlSiteSurvey buffer overflow8.7CNA v4.00.8%2026-06-21
CVE-2026-12805OFFIS DCMTK ofxml.cc parseFile heap-based overflow5.3CNA v4.00.5%2026-06-21Fix
CVE-2026-12804lemonldap-ng SAML Common Domain Cookie Endpoint CDC.pm redirect5.3CNA v4.00.4%2026-06-21Fix
CVE-2026-12799BerriAI LiteLLM Incomplete Fix internal_user_endpoints.py ui_view_users improper authorization5.3CNA v4.00.4%2026-06-21
CVE-2026-12798BerriAI LiteLLM has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader5.3CNA v4.00.4%2026-06-21
CVE-2026-12797BerriAI LiteLLM Completions banned_keywords.py async_pre_call_hook authorization5.3CNA v4.00.4%2026-06-21
CVE-2026-12796BerriAI LiteLLM: SSO Login Does not Invalidate Previous UI Session Tokens5.3CNA v4.00.6%2026-06-21
CVE-2026-12795BerriAI LiteLLM SSO Debug Flow ui_sso.py json.dumps missing authentication6.9CNA v4.00.8%2026-06-21
CVE-2026-12789ILIAS Learning Management System learning progress tracking query SQL injection5.1CNA v4.00.3%2026-06-21
CVE-2026-12788Zhilink ADP Application Developer Platform XML parser XML external entity injection5.3CNA v4.00.4%2026-06-21
CVE-2026-12787zhilink 智互联科技有限公司 ADP Application Developer Platform 应用开发者平台 testConnection endpoint deserialization5.3CNA v4.00.4%2026-06-21
CVE-2026-12786Ezbsystems UltraISO Premium Edition Kernel driver bootpt64.sys access control8.5CNA v4.00.2%2026-06-21
CVE-2026-12784IM-Magic Partition Resizer Kernel Driver MDA_NTDRV.sys access control8.5CNA v4.00.2%2026-06-21
CVE-2026-12782EaseUS Partition Master Kernel Driver EUEDKEPM.sys access control8.5CNA v4.00.2%2026-06-21Fix
CVE-2026-12781EaseUS Partition Master Kernel driver epmntdrv.sys access control8.5CNA v4.00.2%2026-06-21Fix
CVE-2026-12780AOMEI Backupper Kernel driver amwrtdrv.sys access control8.5CNA v4.00.2%2026-06-21Fix
CVE-2026-12779AOMEI Dynamic Disk Manager Kernel driver ddmdrv.sys access control8.5CNA v4.00.2%2026-06-21
CVE-2026-12778AOMEI Partition Assistant Kernel driver ampa10.sys access control8.5CNA v4.00.2%2026-06-21
CVE-2026-12776Montodel House-Rental-Management index.php houses SQL injection5.3CNA v4.00.3%2026-06-21
CVE-2026-12775Montodel House-Rental-Management login.php SQL injection6.9CNA v4.00.4%2026-06-21
CVE-2026-12774BerriAI LiteLLM MCP server connection testing server-side request forgery5.3CNA v4.00.4%2026-06-21
CVE-2026-12773BerriAI LiteLLM MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication9.8v3.11.0%2026-06-21Fix
CVE-2026-12772LiteLLM: PROXY_ADMIN database API Key Generator has insufficient session expiration5.3CNA v4.00.4%2026-06-21
CVE-2026-12771BerriAI LiteLLM M2M JWT user_api_key_auth.py improper authorization7.5v3.10.4%2026-06-21
CVE-2026-12770BerriAI LiteLLM Admin Key key_management_endpoints.py improper authorization8.8v3.10.6%2026-06-21
CVE-2026-56355GNU Savane incorrect behavior order3.7CNA v3.10.4%2026-06-20
CVE-2026-56347AVideo TopMenu plugin stored cross-site scripting via Unescaped Menu Item fields5.3CNA v4.00.3%2026-06-20
CVE-2026-56346AVideo Unauthenticated PGP Message Decryption via decryptMessage.json.php endpoint6.9CNA v4.00.6%2026-06-20
CVE-2026-56345AVideo arbitrary user session hijacking via Meet plugin uploadRecordedVideo endpoint9.2CNA v4.00.5%2026-06-20Fix
CVE-2026-56342AVideo server-side request forgery in Live/test.php via statsURL parameter6.1CNA v4.00.4%2026-06-20
CVE-2026-56341AVideo unauthenticated access to Payment Log DataTables endpoints via list.json.php8.7CNA v4.00.5%2026-06-20
CVE-2026-56340vLLM denial of service via Unvalidated Multimodal Embeddings7.5v3.10.6%2026-06-20Fix
CVE-2026-56332Capgo open redirect via confirmation_url parameter5.1CNA v4.00.2%2026-06-20Fix
CVE-2026-56330Capgo open redirect via Unvalidated Stripe Billing URLs4.8CNA v4.00.3%2026-06-20Fix
CVE-2026-56325Capgo App ID Confusion via ILIKE Wildcard in Preview Subdomain Lookup2.3CNA v4.00.3%2026-06-20Fix
CVE-2026-56319Capgo App Existence Oracle via GET /statistics/app/:app_id5.3CNA v4.00.3%2026-06-20Fix
CVE-2026-56317Nuxt cross-site scripting via NoScript Component Slot Content6.1v3.10.3%2026-06-20Fix
CVE-2026-56307Capgo Cap-go Broken Cursor Pagination in /private/devices endpoint5.3CNA v4.00.4%2026-06-20Fix
CVE-2026-56304picklescan arbitrary file creation via logging.FileHandler deserialization6.9CNA v4.00.4%2026-06-20Fix
CVE-2026-56295Capgo Policy Enforcement Bypass in Webhook Management endpoints via Non-Expiring API Keys5.3CNA v4.00.3%2026-06-20Fix
CVE-2026-56294capacitor-native-biometric authentication bypass4.3CNA v4.00.2%2026-06-20Fix
CVE-2026-56282Capgo information disclosure via Unauthenticated /replication endpoint6.9CNA v4.00.4%2026-06-20Fix
CVE-2026-56276Flowise mass assignment in PUT /API/v1/user allows Password Hash Override6.0CNA v4.00.4%2026-06-20Fix
CVE-2026-56267Flowise PII Disclosure via Unauthenticated Forgot Password endpoint6.9CNA v4.00.5%2026-06-20Fix
CVE-2026-56235Capgo Unauthenticated Cross-Tenant Metrics Disclosure via RPC functions6.9CNA v4.00.4%2026-06-20Fix
CVE-2026-56228Capgo denial of service via Improper Password Policy Length Validation6.9CNA v4.00.5%2026-06-20Fix
CVE-2026-56227Capgo server-side request forgery via Webhook URL Validation5.3CNA v4.00.3%2026-06-20Fix
CVE-2026-56218Capgo EXIF Metadata Exposure via Image upload6.9CNA v4.00.3%2026-06-20Fix
CVE-2026-56216Capgo Scope Escalation via API Key Creation in /functions/v1/apikey8.7CNA v4.00.4%2026-06-20Fix
CVE-2026-56215Capgo Account Merge via Poisoned public.users.email in SSO Provisioning8.7CNA v4.00.4%2026-06-20Fix
CVE-2026-56214Capgo Unauthenticated Organization Enumeration and Billing Status Disclosure via Supabase RPC8.7CNA v4.00.5%2026-06-20Fix
CVE-2026-56213Capgo Unauthenticated Cross-Tenant Metrics Poisoning via upsert_version_meta RPC6.9CNA v4.00.4%2026-06-20Fix
CVE-2026-56212Capgo Improper 2FA Enforcement Logic via Team Security settings5.1CNA v4.00.3%2026-06-20Fix
CVE-2026-48939iCagenda unrestricted upload of file with dangerous type9.8NVD v3.120.1%2026-06-20KEVNucleiExploit codeFix
CVE-2026-48909Joomla extension joomshaper.com PHP object injection in SP LMS extension for Joomla9.5CNA v4.04.9%2026-06-20NucleiExploit code
CVE-2026-48908JoomShaper SP Page Builder unrestricted upload of file with dangerous type9.8NVD v3.188.5%2026-06-20KEVNucleiExploit codeFix
CVE-2026-12673Adobe Liquidfiles missing authorization5.9CNA v4.00.4%2026-06-20Fix
CVE-2026-12119Simple File List WordPress plugin missing authorization authenticated arbitrary file Operations6.5CNA v3.10.5%2026-06-20Fix
CVE-2026-11912Simple File List WordPress plugin missing authorization unauthenticated file modification7.5CNA v3.10.5%2026-06-20Exploit codeFix
CVE-2026-11911Simple File List WordPress plugin unauthenticated arbitrary file deletion7.5CNA v3.11.2%2026-06-20Fix
CVE-2026-11551Branda WordPress plugin privilege escalation9.8CNA v3.10.6%2026-06-20Exploit codeFix
CVE-2026-9843Database for Contact Form 7 WordPress plugin arbitrary file deletion8.1CNA v3.11.0%2026-06-20Fix
CVE-2026-9265Crypt::OpenSSL::PKCS12 versions for Perl permits a heap OOB read in print_attribute UTF8STRING path9.1CISA ADP v3.10.6%2026-06-20Fix
CVE-2026-5366Git argument injection in PrefectHQ/Prefect9.9CNA v3.01.0%2026-06-20Exploit code
CVE-2026-56211Red Hat Enterprise Linux AI libaom: Libaom: Remote code execution7.1CNA v3.10.9%2026-06-19Fix
CVE-2026-56210Red Hat Enterprise Linux AI out-of-bounds read7.1CNA v3.10.6%2026-06-19Fix
CVE-2026-56209Red Hat Enterprise Linux AI out-of-bounds write7.1CNA v3.10.6%2026-06-19Fix
CVE-2026-56208Red Hat Enterprise Linux libaom: Libaom: Heap buffer overflow in av1 encoder first-pass stats buffer7.6CNA v3.10.4%2026-06-19Fix
CVE-2026-56142JetBrains Hub mass assignment9.6CNA v3.10.6%2026-06-19Fix
CVE-2026-56141JetBrains Hub weak random number generator9.8CNA v3.10.5%2026-06-19Fix
CVE-2026-56138ail framework /objects/item/diff endpoint path traversal5.3CNA v4.00.5%2026-06-19Fix
CVE-2026-56132libexpat incorrect synchronization6.9v3.10.1%2026-06-19Fix
CVE-2026-56131libexpat use-after-free4.9CNA v3.10.2%2026-06-19Fix
CVE-2026-56082Capgo Unauthenticated Cross-Tenant Billing Log tampering via public.record_build_time RPC8.7CNA v4.00.4%2026-06-19Fix
CVE-2026-56081Capgo Cap-go Account Lockout via 2FA Misconfiguration on Unverified Email9.3CNA v4.00.6%2026-06-19Fix
CVE-2026-56080Capgo Cap-go authentication logic flaw in Enforce Password Policy6.9CNA v4.00.5%2026-06-19Fix
CVE-2026-56079Capgo Cross-Tenant authorization bypass via PostgREST Webhook Access7.1CNA v4.00.4%2026-06-19Fix
CVE-2026-56073Capgo Cap-go OTP Bypass via Response Manipulation in Email Verification9.3CNA v4.00.3%2026-06-19Fix
CVE-2026-54414FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover9.3CNA v4.00.7%2026-06-19Fix
CVE-2026-53915JetBrains GoLand external control of a file path7.1CNA v3.10.5%2026-06-19Fix
CVE-2026-52910Linux kernel BPF socket reuseport vulnerability7.8CNA v3.10.1%2026-06-19Exploit codeFix
CVE-2026-52909Linux kernel IPv6 VTI tunnel driver vulnerability7.8CNA v3.10.1%2026-06-19Fix
CVE-2026-52908Linux kernel RDMA memory region reregistration vulnerability7.8CNA v3.10.1%2026-06-19Fix
CVE-2026-52866Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT missing authorization7.1CNA v4.00.3%2026-06-19
CVE-2026-51846Tenda AC7 stack-based buffer overflow9.8v3.10.8%2026-06-19
CVE-2026-51845Tenda AC7 stack-based buffer overflow9.8v3.10.6%2026-06-19
CVE-2026-51844Tenda AC7 stack-based buffer overflow9.8v3.10.6%2026-06-19
CVE-2026-51843Tenda AC7 stack-based buffer overflow9.8v3.10.6%2026-06-19
CVE-2026-50559quarkusio quarkus Authentication/authorization bypass via Advanced Path Normalization7.5CNA v3.11.0%2026-06-19Fix
CVE-2026-50519Microsoft Visual Studio Code CoPilot Chat security feature bypass6.5CNA v3.10.9%2026-06-19Fix
CVE-2026-50242JetBrains Hub missing authentication10.0CNA v3.10.6%2026-06-19Fix
CVE-2026-50034An attacker within BLE communication range can passively intercept wireless traffic and obtain sensitive health-related information, including glucose measurement values.7.1CNA v4.00.2%2026-06-19
CVE-2026-49872Apache APISIX: Improper authentication in cas-auth plugin5.3CNA v4.00.5%2026-06-19Fix
CVE-2026-49871Apache APISIX: Cas-auth login CSRF / session injection issue2.1CNA v4.00.4%2026-06-19Fix
CVE-2026-49359pontedilana php-weasyprint PhpWeasyPrint vulnerable to SSRF and local file disclosure6.5CNA v3.10.4%2026-06-19Fix
CVE-2026-49358pontedilana php-weasyprint PhpWeasyPrint vulnerable to arbitrary file deletion at shutdown3.0CNA v3.10.1%2026-06-19Fix
CVE-2026-49357line-desktop-mcp Streamable HTTP mode missing authentication8.8CNA v4.00.6%2026-06-19Fix
CVE-2026-49346libde265 has a heap buffer overflow in de265_image_get_buffer via SPS dimension integer overflow7.1CNA v3.10.3%2026-06-19Fix
CVE-2026-49345Mercator CVE Configuration vulnerable to server-side request forgery (SSRF)5.3CNA v4.00.6%2026-06-19Fix
CVE-2026-49344Mercator has a Personal Identifiable information leak from Query Executor feature7.1CNA v4.00.4%2026-06-19Fix
CVE-2026-49342YARD static cache reads raw traversal paths before router sanitization5.3CNA v3.10.4%2026-06-19Fix
CVE-2026-49340gonic playlist creation endpoint arbitrary file write8.1CNA v3.10.4%2026-06-19Fix
CVE-2026-49339gonic playlist ID path resolution path traversal7.1CNA v3.10.4%2026-06-19Fix
CVE-2026-49338gonic Subsonic playlist API insecure direct object reference7.1CNA v3.10.3%2026-06-19Fix
CVE-2026-49337libde265 has an unbounded memory leak via orphaned slice headers in `read_slice_NAL`4.3CNA v3.10.3%2026-06-19Fix
CVE-2026-49336Microsoft kiota-typescript case sensitivity bypass5.5CNA v4.01.2%2026-06-19Fix
CVE-2026-49295libde265 has an out-of-bounds write in process_reference_picture_set via predicted short-term RPS7.1CNA v3.10.3%2026-06-19Fix
CVE-2026-49293sunnyadn js-toml CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals7.5CNA v3.10.6%2026-06-19Fix
CVE-2026-49291mcp-memory-service MCP tools/call endpoint missing authorization8.1CNA v3.10.5%2026-06-19Fix
CVE-2026-49290Slopsmith has path traversal in archive extractors that allows arbitrary file write → potential RCE7.6CNA v4.00.8%2026-06-19Fix
CVE-2026-49288Statamic CMS Control Panel fieldtype endpoints missing authorization4.3CNA v3.10.3%2026-06-19Fix
CVE-2026-49287Statamic CMS vulnerable to unsafe method invocation via collection sorting allows data destruction7.4CNA v3.10.5%2026-06-19Fix
CVE-2026-49286pontedilana php-weasyprint PhpWeasyPrint vulnerable to PHAR deserialization8.1CNA v3.11.0%2026-06-19Fix
CVE-2026-49271struktur libheif uncompressed HEIF decoder out-of-bounds read6.5CNA v3.10.4%2026-06-19Fix
CVE-2026-49260pontedilana php-weasyprint PhpWeasyPrint: Shell command injection8.2CNA v3.10.2%2026-06-19Fix
CVE-2026-49231Apache APISIX: Identity spoofing issue in APISIX opa plugin2.3CNA v4.00.6%2026-06-19Fix
CVE-2026-49230Apache APISIX: Authentication bypass in jwe-decrypt6.3CNA v4.00.3%2026-06-19Exploit codeFix
CVE-2026-48895Apache APISIX: Cas-auth host header influence on CAS service URL2.1CNA v4.00.6%2026-06-19Fix
CVE-2026-48794Authelia has an Edge Case Access Control Rule Mismatch1.3CNA v4.00.4%2026-06-19Fix
CVE-2026-48787gin-vue-admin vulnerable to RCE7.4CNA v4.00.7%2026-06-19
CVE-2026-48774ProxySQL MCP run_sql_readonly tool improper input validation7.5CNA v3.10.4%2026-06-19Fix
CVE-2026-48773ProxySQL pre-auth heap overflow in MySQL and PostgreSQL first-packet handling9.8CNA v3.10.7%2026-06-19Fix
CVE-2026-48772ProxySQL PROXY protocol parser incorrect authorization10.0CNA v3.10.2%2026-06-19Fix
CVE-2026-48715Radvdump's Route Information option parser has a stack buffer overflow7.7CNA v4.00.3%2026-06-19Fix
CVE-2026-48584Microsoft Azure Synapse elevation of privilege9.9CNA v3.10.9%2026-06-19Fix
CVE-2026-48582Microsoft Exchange Online elevation of privilege9.6CNA v3.10.7%2026-06-19Fix
CVE-2026-48141Memory leak in NI grpc-device BeginSidebandStream6.0CNA v4.00.4%2026-06-19Fix
CVE-2026-48140Unchecked enum cast vulnerability in NI grpc-device in BeginSidebandStream7.1CNA v4.00.4%2026-06-19Fix
CVE-2026-48139Null pointer dereference vulnerability in NI grpc-device data moniker service8.7CNA v4.00.5%2026-06-19Fix
CVE-2026-48138Out-of-bounds read vulnerability in the NI grpc-device streaming API8.7CNA v4.00.5%2026-06-19Fix
CVE-2026-48137Untrusted pointer dereference in NI grpc-device sideband streaming API9.3CNA v4.00.8%2026-06-19Fix
CVE-2026-48129Kestra task inputFiles accepts traversal filenames for worker file writes6.5CNA v3.10.4%2026-06-19Fix
CVE-2026-48089DevGuard has improper authorization on public assets7.1CNA v4.00.4%2026-06-19Fix
CVE-2026-47645Microsoft 365 Copilot's Business Chat elevation of privilege8.8CNA v3.10.8%2026-06-19Fix
CVE-2026-47341Apache APISIX: Session replay issue in hmac-auth6.3CNA v4.00.7%2026-06-19Fix
CVE-2026-47339Apache APISIX: Authz-casdoor incorrect session sharing5.3CNA v4.00.5%2026-06-19Fix
CVE-2026-47203Authelia Missing Username Canonicalization in Basic Auth (LDAP)2.9CNA v4.00.5%2026-06-19Fix
CVE-2026-46461Dell Server Hardware Manager improper access control7.8CNA v3.10.1%2026-06-19Fix
CVE-2026-45480Microsoft Azure Active Directory elevation of privilege10.0CNA v3.10.9%2026-06-19Fix
CVE-2026-44939Command injection through unsanitized YAML parameter in Rancher9.4CNA v4.01.3%2026-06-19Fix
CVE-2026-44915Apache APISIX: Cas-auth plugin open redirect via unsanitized cookie value2.1CNA v4.00.6%2026-06-19Fix
CVE-2026-44087Apache APISIX: Openid-connect plugin Identity header spoofing5.3CNA v4.00.3%2026-06-19Fix
CVE-2026-44046Apache APISIX: Wolf-rbac plugin Identity spoofing2.3CNA v4.00.5%2026-06-19Fix
CVE-2026-42895Microsoft Copilot tampering6.5CNA v3.10.7%2026-06-19Fix
CVE-2026-41156Imagination Technologies Graphics DDK kernel firmware command buffer use-after-free7.7CISA ADP v3.10.2%2026-06-19Fix
CVE-2026-40624AVer PTC cameras files or directories accessible to external parties9.3CNA v4.00.8%2026-06-19Fix
CVE-2026-39999Apache APISIX: JWT Algorithm Confusion allows authentication bypass7.0CNA v4.00.6%2026-06-19Fix
CVE-2026-39998Apache APISIX: Identity injection via forward-auth Plugin Missing Header Cleanup5.8CNA v4.00.7%2026-06-19Fix
CVE-2026-34192GPU DDK _MMU_AllocLevel error recovery paths leave dangling page table entries7.7CISA ADP v3.10.2%2026-06-19Fix
CVE-2026-32208Microsoft Entra ID spoofing8.8CNA v3.10.5%2026-06-19Fix
CVE-2026-27878Tempo TraceQL query with exemplar hint could result in unbounded memory usage6.5CNA v3.10.4%2026-06-19Fix
CVE-2026-21768HCL Verse for Android is susceptible to an injection6.3CNA v3.10.2%2026-06-19
CVE-2026-12726Red Hat Ansible Automation Platform AWX GitHub webhook handler server-side request forgery6.3CNA v3.10.3%2026-06-19
CVE-2026-12706Red Hat Enterprise Linux AI 3 ffmpeg: Ffmpeg: Heap use-after-free read in rasc decoder decode_move6.5CNA v3.10.5%2026-06-19Fix
CVE-2026-12644ts-deepmerge uncaught exception6.9CNA v4.00.5%2026-06-19Fix
CVE-2026-12622Open redirect vulnerability in Password Reset Submission in GridTime™ 3000 GNSS Time Server5.3CNA v4.00.2%2026-06-19Fix
CVE-2026-12621Cross-site scripting vulnerability in Password Reset Redirect in GridTime™ 3000 GNSS Time Server5.3CNA v4.00.2%2026-06-19Fix
CVE-2026-12620Access token exposure in URL parameters in GridTime™ 3000 GNSS Time Server4.6CNA v4.00.4%2026-06-19Fix
CVE-2026-12619GridTime™ 3000 GNSS Time Server CSRF to XSS5.1CNA v4.00.2%2026-06-19Fix
CVE-2026-12430Blocksy Companion WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-06-19Fix
CVE-2026-12238WP Go Maps WordPress plugin unauthenticated arbitrary Record creation5.3CNA v3.10.4%2026-06-19Fix
CVE-2026-12157BetterDocs WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-19Fix
CVE-2026-12104Authenticated OS command injection in Bondix8.6CNA v4.01.3%2026-06-19
CVE-2026-12050pgAdmin 4: SQL injection in named restore point endpoint5.3CNA v4.00.4%2026-06-19Fix
CVE-2026-12049pgAdmin 4: Open redirect in multi-factor authentication flow via unvalidated next parameter5.3CNA v4.00.4%2026-06-19Fix
CVE-2026-12048pgAdmin 4: Stored XSS via untrusted error and plan-node text rendered through html-react-parser9.3CNA v4.00.3%2026-06-19Fix
CVE-2026-12047pgAdmin 4: HTML injection in cloud verify_credentials / deploy endpoints4.8CNA v4.00.2%2026-06-19Fix
CVE-2026-12046pgAdmin 4 SQL Editor missing authentication9.5CNA v4.01.0%2026-06-19Fix
CVE-2026-12045pgAdmin 4 AI Assistant SQL injection9.4CNA v4.00.7%2026-06-19Fix
CVE-2026-12044pgadmin.org pgAdmin 4 SQL injection8.7CNA v4.00.7%2026-06-19Fix
CVE-2026-11989Bit integrations WordPress plugin unauthenticated server-side request forgery6.5CNA v3.10.5%2026-06-19Fix
CVE-2026-11941Cloudflare quiche use-after-free in connection ID iterator and FFI functions5.6CNA v3.10.3%2026-06-19Fix
CVE-2026-11775User Admin Simplifier WordPress plugin cross-site request forgery4.3CNA v3.10.2%2026-06-19Fix
CVE-2026-11752Armeria: External control of file name or path in xDS SDS DataSource5.9CNA v4.00.3%2026-06-19Fix
CVE-2026-11576Eclipse ThreadX double free7.5CNA v3.10.5%2026-06-19
CVE-2026-10779Classified Listing WordPress plugin missing authorization authenticated feature modification4.3CNA v3.10.4%2026-06-19Fix
CVE-2026-10720MicroCeph path traversal issue in the remote-import API5.1CNA v4.00.3%2026-06-19Fix
CVE-2026-10034WP DSGVO Tools (GDPR) WordPress plugin authorization bypass5.3CNA v3.10.6%2026-06-19Fix
CVE-2026-9822WP Hotel Booking WordPress plugin Subscriber+ missing authorization in Multiple AJAX Handlers6.5CISA ADP v3.10.3%2026-06-19Fix
CVE-2026-9143Incorrect conversion between numeric types in NI grpc-device due to missing range checks in CodeGen6.3CNA v4.00.3%2026-06-19Fix
CVE-2026-9142Insecure default Credentials vulnerability in NI grpc-device when TLS configuration is not present9.3CNA v4.00.4%2026-06-19Fix
CVE-2026-9013Bogo WordPress plugin missing authorization authenticated sensitive information exposure4.3CNA v3.10.4%2026-06-19Fix
CVE-2026-8806Denial of service (DoS) vulnerability in MELSEC iQ-F Series FX5-ENET/IP Ethernet module8.7CNA v4.00.6%2026-06-19
CVE-2026-8805Denial of service (DoS) vulnerability in MELSEC iQ-F Series EtherNet/IP module8.7CNA v4.00.6%2026-06-19Fix
CVE-2026-8713Avada (Fusion) Builder WordPress plugin unauthenticated arbitrary file deletion via form Entry Value9.1CNA v3.12.7%2026-06-19NucleiExploit codeFix
CVE-2026-8296Octopus Deploy Octopus Server cross-site scripting5.6CNA v4.00.3%2026-06-19Fix
CVE-2026-8118Royal Addons for Elementor WordPress plugin arbitrary file read6.5CNA v3.10.4%2026-06-19Fix
CVE-2026-7547Woosa WordPress plugin authenticated (Administrator+) arbitrary file read via log_file parameter4.9CNA v3.10.6%2026-06-19Fix
CVE-2026-7515BetterDocs Pro WordPress plugin unauthenticated local file inclusion via doc_style9.8CNA v3.10.9%2026-06-19Exploit codeFix
CVE-2026-67982Download Connector for 2DL Hosted Checkout WordPress plugin unauthorized access5.3CNA v3.10.5%2026-06-19Fix
CVE-2026-4328Advanced Import: One-Click Demo Import for WordPress plugin server-side request forgery6.4CNA v3.10.3%2026-06-19Fix
CVE-2026-4027FlexNet Manager Suite Attachment File Disclosure7.1CNA v4.00.4%2026-06-19Fix
CVE-2026-4026FlexNet Manager Suite privilege escalation8.7CNA v4.00.4%2026-06-19Fix
CVE-2026-3640STRABL WordPress plugin unauthenticated arbitrary Webhook creation via REST API endpoint5.3CNA v3.10.6%2026-06-19Fix
CVE-2026-3196QEMU virtio-snd device integer overflow5.5CNA v3.10.1%2026-06-19Fix
CVE-2026-3195Red Hat Enterprise Linux 10 qemu-kvm: Virtio-snd: Heap buffer overflow in virtio_snd_pcm_in_cb7.4CNA v3.10.2%2026-06-19Fix
CVE-2026-1856Appointment Booking Calendar WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-19Fix
CVE-2026-56099OpenBSD mpls_do_error Kernel Stack Memory Disclosure via MPLS Input5.3v3.10.5%2026-06-18
CVE-2026-56078PraisonAI arbitrary file read and Write via path traversal in MultiAgentMonitor8.7CNA v4.00.9%2026-06-18Fix
CVE-2026-56077PraisonAI information disclosure via Shared MultiAgentLedger State7.1CNA v4.00.4%2026-06-18Fix
CVE-2026-56076PraisonAI AGUI endpoint permissive cross-domain policy8.6CNA v4.00.6%2026-06-18Fix
CVE-2026-56075PraisonAI arbitrary Shell command execution via Hard-coded Approval Mode Override8.7CNA v4.00.6%2026-06-18Fix
CVE-2026-56074PraisonAI Tool Approval Cache Bypass via Coarse-Grained Caching6.8CNA v4.00.2%2026-06-18Fix
CVE-2026-56024WP EasyPay WordPress plugin cross-site request forgery (CSRF)6.5CNA v3.10.2%2026-06-18Fix
CVE-2026-56022Webmin basic authentication handler authentication bypass6.9CNA v4.00.6%2026-06-18Fix
CVE-2026-56021Webmin information disclosure via regex pattern6.9CNA v4.00.5%2026-06-18Fix
CVE-2026-56020Webmin HTTP header authentication bypass9.2CNA v4.00.5%2026-06-18Fix
CVE-2026-56012Media LIbrary Assistant WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-18Fix
CVE-2026-56009Bricksable for Bricks Builder WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-06-18Fix
CVE-2026-56007Ocean Product Sharing WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-06-18Fix
CVE-2026-55746Cotonti stored XSS via PFS folder title7.0CNA v4.00.3%2026-06-18
CVE-2026-55745Cotonti CSRF in PFS folder edit allows unauthorized folder modification5.3CNA v4.00.1%2026-06-18
CVE-2026-55744Cotonti CSRF in PFS allows forced arbitrary file upload8.6CNA v4.00.2%2026-06-18
CVE-2026-55742Cotonti CSRF in admin.rights.php allows privilege escalation9.4CNA v4.00.2%2026-06-18
CVE-2026-55741Cotonti CSRF in admin.config.php allows unauthorized configuration changes8.7CNA v4.00.2%2026-06-18
CVE-2026-55740SQL injection in Nur-Alam39 bus-ticket bus_info.php via busid parameter9.3CNA v4.00.5%2026-06-18
CVE-2026-55392nilfs-dev nilfs-utils NILFS utilities undefined behavior and Out-of-Memory6.7CNA v4.00.2%2026-06-18Fix
CVE-2026-55237AutoGPT SignUp page has DOM-based XSS and open redirect8.8CNA v3.10.3%2026-06-18Fix
CVE-2026-55205nesquena hermes-webui hermes WebUI resource exhaustion via Unauthenticated OAuth Flow endpoint6.9CNA v4.00.5%2026-06-18Fix
CVE-2026-55204HAProxy null pointer dereference in hpack_dht_insert function8.7CNA v4.00.5%2026-06-18Fix
CVE-2026-55203HAProxy integer overflow in FCGI Demux Record Length field9.1NVD v3.10.3%2026-06-18Fix
CVE-2026-54419PIAF-HMS multiple unauthenticated SQL injection vulnerabilities via mysql_query9.3CNA v4.00.6%2026-06-18
CVE-2026-54390JTL-Software JTL-Shop JTL Shop server-side template injection via Smarty Renderer9.3CNA v4.00.6%2026-06-18Exploit codeFix
CVE-2026-54224Denial of service in UBB.threads7.1CNA v4.00.4%2026-06-18
CVE-2026-54223Remote code execution via arbitrary file read and write in UBB.threads8.6CNA v4.00.8%2026-06-18
CVE-2026-54222Blind SQL injection in UBB.threads8.6CNA v4.00.4%2026-06-18
CVE-2026-54221Reflected XSS in UBB.threads5.1CNA v4.00.5%2026-06-18
CVE-2026-54220Cross-site request forgery in UBB.threads8.6CNA v4.00.2%2026-06-18
CVE-2026-54219Stored XSS in UBB.threads5.1CNA v4.00.4%2026-06-18
CVE-2026-54130M365 Copilot information disclosure9.8CNA v3.11.1%2026-06-18Fix
CVE-2026-54106U.S. GAO EPDS and CBCA EDS network access control bypass5.1CNA v4.00.5%2026-06-18Fix
CVE-2026-54105U.S. GAO EPDS and CBCA EDS user information disclosure6.9CNA v4.00.5%2026-06-18Fix
CVE-2026-54104U.S. GAO EPDS and CBCA EDS client-based privilege escalation8.7CNA v4.00.7%2026-06-18Fix
CVE-2026-54103U.S. GAO EPDS and CBCA EDS unauthenticated password change9.3CNA v4.00.8%2026-06-18Fix
CVE-2026-54017open-webui open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal7.7CNA v3.10.5%2026-06-18Fix
CVE-2026-50643Out‑of‑Bounds Read in 8cc5.1CNA v4.00.2%2026-06-18
CVE-2026-50141Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation7.1CNA v4.00.4%2026-06-18Fix
CVE-2026-49454Relyra SAML improper signature verification9.1CNA v3.10.2%2026-06-18Fix
CVE-2026-49257mcp-pinot HTTP MCP server missing authentication10.0CNA v3.10.9%2026-06-18Fix
CVE-2026-49252deepstream.io deepstream is vulnerable to prototype pollution9.9CNA v3.10.5%2026-06-18Fix
CVE-2026-49248OneDev tar archive extraction symlink following8.3CNA v4.00.6%2026-06-18Fix
CVE-2026-49205phpMyFAQ: Missing userHasPermission in 4 API write endpoints ( Incomplete Fix)6.5CNA v3.10.4%2026-06-18Fix
CVE-2026-48986pam_usb process-tree walk infinite loop4.7CNA v3.10.1%2026-06-18Fix
CVE-2026-48985pam_usb loginctl output parser null pointer dereference5.5CNA v3.10.2%2026-06-18Fix
CVE-2026-48984pam_usb xfree memory release helper vulnerability4.7CNA v3.10.1%2026-06-18Fix
CVE-2026-48983pam_usb pad directory creation race condition5.8CNA v3.10.1%2026-06-18Fix
CVE-2026-48982pam_usb one-time pad file creation race condition5.8CNA v3.10.1%2026-06-18Fix
CVE-2026-48981pam_usb configuration file parser XML external entity injection6.7CNA v3.10.2%2026-06-18Fix
CVE-2026-48980pam_usb local session check vulnerability6.3CNA v3.10.2%2026-06-18Fix
CVE-2026-48937Node.js Node resource exhaustion7.5v3.10.6%2026-06-18Fix
CVE-2026-48768TypeBot file upload endpoint path traversal9.3CNA v3.10.4%2026-06-18Fix
CVE-2026-48764baptisteArno typebot.io TypeBot has SSRF in HTTP request and script fetch flows8.2CNA v3.10.4%2026-06-18Fix
CVE-2026-48716HKUDS nanobot WhatsApp bridge path traversal8.7CNA v3.10.4%2026-06-18
CVE-2026-48617Node.js Node improper access control8.2v3.10.3%2026-06-18Fix
CVE-2026-47847bitnami/mariadb-galera hard-coded credentials5.3CNA v3.10.3%2026-06-18Fix
CVE-2026-47846bitnami/cassandra hard-coded credentials9.8CNA v3.10.5%2026-06-18Fix
CVE-2026-47833Cloud Foundry Foundation bpm-release link following6.8CNA v4.00.2%2026-06-18
CVE-2026-47647Dynamics 365 elevation of privilege9.9CNA v3.10.8%2026-06-18Fix
CVE-2026-47633Microsoft Cost Management information disclosure7.5CNA v3.11.0%2026-06-18Fix
CVE-2026-46699conda-forge conda-smithy repository invitation routing improper access control7.6CNA v3.10.3%2026-06-18Fix
CVE-2026-46580Eclipse Theia indirect prompt injection via Auto-Loaded Workspace Prompt template files in AI Chat8.4CNA v4.00.5%2026-06-18Fix
CVE-2026-45696OpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl (DoS)8.3CNA v4.00.4%2026-06-18Fix
CVE-2026-44942libzypp .repo files can have an optional path which can lead to path traversal attacks6.5CNA v3.10.5%2026-06-18Fix
CVE-2026-44691Eclipse Theia arbitrary command execution via Untrusted Workspace Task Definitions8.4CNA v4.00.4%2026-06-18Fix
CVE-2026-44688Eclipse Theia Indirect prompt injection8.4CNA v4.00.5%2026-06-18Fix
CVE-2026-44663OpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflow6.1CNA v3.10.2%2026-06-18Fix
CVE-2026-43994Coturn: Stack buffer overflow in decode_oauth_token_gcm8.1CNA v3.10.7%2026-06-18Fix
CVE-2026-43915Coturn: Stored cross-site scripting (XSS) in web-admin interface via TURN username5.4CNA v3.10.2%2026-06-18Fix
CVE-2026-42490Xen domctl lock open to abuse6.5CISA ADP v3.10.3%2026-06-18Fix
CVE-2026-42489Xen domctl lock open to abuse5.3CISA ADP v3.10.1%2026-06-18Fix
CVE-2026-42488Xen x86: Mismatched mapcache metadata8.1CISA ADP v3.10.6%2026-06-18Fix
CVE-2026-42487Xen x86 HVM I/O port list traversal7.9CISA ADP v3.10.1%2026-06-18Fix
CVE-2026-40457Reflected XSS in LMS2.1CNA v4.00.5%2026-06-18Fix
CVE-2026-40456OS command injection in LMS8.6CNA v4.02.8%2026-06-18Fix
CVE-2026-40455SQL injection in LMS8.6CNA v4.00.3%2026-06-18Fix
CVE-2026-38718InHand Networks Ir912l-fq58 buffer overflow7.5CISA ADP v3.10.5%2026-06-18Fix
CVE-2026-38717InHand Networks Ir912l-fq58 command injection9.8CISA ADP v3.12.3%2026-06-18Fix
CVE-2026-38716InHand Networks Ir912l-fq58 command injection9.8CISA ADP v3.12.3%2026-06-18Fix
CVE-2026-38715InHand Networks Ir912l-fq58 command injection9.8CISA ADP v3.12.3%2026-06-18Fix
CVE-2026-38714InHand Networks Ir912l-fq58 command injection9.8CISA ADP v3.12.3%2026-06-18Fix
CVE-2026-32174Microsoft Azure Bot Service elevation of privilege7.7CNA v3.10.8%2026-06-18Fix
CVE-2026-28573Google Android AndroidManifest.xml denial of service10.0CNA v4.00.2%2026-06-18Fix
CVE-2026-25865Punto Switcher unquoted search path via WinExec8.5CNA v4.00.2%2026-06-18Fix
CVE-2026-22674Hashgraph Guardian stored XSS via branding companyName field4.8CNA v4.00.3%2026-06-18
CVE-2026-22551Eclipse Theia Data Exfiltration via Markdown Image Rendering in AI Chat6.7CNA v4.00.3%2026-06-18Fix
CVE-2026-12569PTC Windchill and FlexPLM improper input validation9.3CNA v4.046.0%2026-06-18KEVFix
CVE-2026-12539Docker Sandboxes ICMP egress restriction bypass after daemon restart5.1CNA v4.00.1%2026-06-18Fix
CVE-2026-12527Shenzhen Liandian Communication Technology V380 IP Camera / AppFHE1_V1.0.6.0 missing authentication6.0CNA v4.00.2%2026-06-18
CVE-2026-12505Red Hat Enterprise Linux 10 cifs-utils: Local privilege escalation7.8CNA v3.10.2%2026-06-18Fix
CVE-2026-12407E2Pdf WordPress plugin missing authorization8.8CNA v3.10.4%2026-06-18Fix
CVE-2026-12390Access of resource using incompatible type (type confusion) in AzeoTech DAQFactory7.8v3.10.2%2026-06-18
CVE-2026-12137SysBasics Customize My Account for WooCommerce WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2026-06-18Fix
CVE-2026-12136SysBasics Customize My Account for WooCommerce WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-06-18Fix
CVE-2026-12120FireBox Popups WordPress plugin unauthenticated sensitive information exposure in form_id parameter5.3CNA v3.10.3%2026-06-18Fix
CVE-2026-12111Appointment Booking Calendar WordPress plugin sensitive information exposure4.3CNA v3.10.3%2026-06-18Fix
CVE-2026-12102UsersWP WordPress plugin insecure direct object reference2.7CNA v3.10.3%2026-06-18Fix
CVE-2026-12098PowerPress Podcasting plugin by Blubrry WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-06-18Fix
CVE-2026-12093Simple Membership WordPress plugin authorization bypass5.3CNA v3.10.4%2026-06-18Fix
CVE-2026-12039Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution5.7CNA v4.00.1%2026-06-18Fix
CVE-2026-11982grav-plugin-api stored XSS via missing XSS safety check in Admin2 Pages API partial validation5.1CNA v4.00.5%2026-06-18
CVE-2026-11958Local privilege escalation in ANSSI’s DFIR-ORC7.3CNA v4.00.1%2026-06-18Fix
CVE-2026-11791Red Hat Directory Server 11 389-ds-base: 389-ds-base: Use-after-free in schema reload5.0CNA v3.10.4%2026-06-18Fix
CVE-2026-11784Optimole WordPress plugin cross-site request forgery4.3CNA v3.10.2%2026-06-18Fix
CVE-2026-11777Form Maker by 10Web WordPress plugin authenticated (Administrator+) SQL injection via name parameter4.9CNA v3.10.3%2026-06-18Fix
CVE-2026-11776Form Maker by 10Web WordPress plugin SQL injection4.9CNA v3.10.3%2026-06-18Fix
CVE-2026-11719MCP Toolbox for Databases: Authenticated authorization bypass8.6CNA v4.00.1%2026-06-18Fix
CVE-2026-11718Google MCP Toolbox for Databases (googleapis/mcp-toolbox) authentication bypass9.3CNA v4.00.2%2026-06-18Fix
CVE-2026-11717Google MCP Toolbox for Databases (googleapis/mcp-toolbox) authentication bypass9.3CNA v4.00.2%2026-06-18Fix
CVE-2026-11402Services Section Block WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-06-18Fix
CVE-2026-11395CF7 to Webhook WordPress plugin unauthenticated server-side request forgery7.2CNA v3.10.3%2026-06-18Fix
CVE-2026-11360Advanced Order Export For WooCommerce WordPress plugin SQL injection4.9CNA v3.10.5%2026-06-18Fix
CVE-2026-11358Orbit Fox: Duplicate Page WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-06-18Fix
CVE-2026-11357Kadence Blocks WordPress plugin sensitive information exposure4.3CNA v3.10.3%2026-06-18Fix