CVE-2026 list

CVE-2026 records published in June 2026

Page four of eight: records 3,001 to 4,000 of the 7,316 published in June 2026, newest first. The first page carries the figures for June 2026.

CVE-2026 records published in June 2026, newest first: records 3,001 to 4,000 of 7,316
CVE Summary CVSS EPSS Published Signals
CVE-2026-10736Tutor LMS WordPress plugin authenticated (Administrator+) SQL injection via data parameter4.9CNA v3.10.5%2026-06-18Fix
CVE-2026-10623PressPrimer Quiz WordPress plugin insecure direct object reference4.3CNA v3.10.3%2026-06-18Fix
CVE-2026-10029Event Koi Lite WordPress plugin missing authorization unauthenticated sensitive information exposure5.3CNA v3.10.3%2026-06-18Fix
CVE-2026-10023dokaninc Dokan order management AJAX handlers insecure direct object reference4.3CNA v3.10.2%2026-06-18Fix
CVE-2026-9860Offload, AI and Optimize with Cloudflare Images WordPress plugin remote code execution8.8CNA v3.11.1%2026-06-18Fix
CVE-2026-9815MagicForm WordPress plugin unauthenticated arbitrary file upload to RCE6.5CISA ADP v3.10.4%2026-06-18
CVE-2026-9692Mojolicious::Sessions::Storable versions for Perl generate session ids insecurely5.3CISA ADP v3.10.4%2026-06-18
CVE-2026-9199Equalize Digital Accessibility Checker WordPress plugin authorization bypass4.3CNA v3.10.4%2026-06-18Fix
CVE-2026-9158Eclipse 4diac use-after-free5.2CNA v4.00.6%2026-06-18
CVE-2026-8811SEPPmail Secure Email Gateway path traversal in PDF generation module7.1CNA v4.00.4%2026-06-18Fix
CVE-2026-8668Progress Chef Chef360 hard-coded credentials in embedded content2.3CNA v4.00.3%2026-06-18Fix
CVE-2026-8461Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder8.8CNA v3.11.0%2026-06-18Exploit codeFix
CVE-2026-8100Progress Chef Chef360 relative path traversal8.6CNA v4.00.5%2026-06-18Fix
CVE-2026-8039Fancy Testimonials WordPress plugin authenticated (Author+) stored cross-site scripting6.4CNA v3.10.3%2026-06-18
CVE-2026-8024Deserialization vulnerability in ibaPDA and ibaDatCoordinator9.3CNA v4.00.7%2026-06-18Fix
CVE-2026-2021Slideshow Gallery LITE WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-06-18Fix
CVE-2026-55748OpenStack Horizon RC file generation does not escape special characters in project names6.8v3.10.5%2026-06-17Fix
CVE-2026-55743OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution9.4CNA v4.00.6%2026-06-17
CVE-2026-55738Stack buffer overflow in rxi/microtar raw_to_header via non-null-terminated TAR name field8.7CNA v4.00.6%2026-06-17
CVE-2026-55706OpenBSD improper quantity validation8.3v3.10.4%2026-06-17
CVE-2026-55202Tinyproxy Stathost Detection Bypass via host Header Manipulation8.8CNA v4.00.6%2026-06-17Fix
CVE-2026-55201Evil-WinRM path traversal in download_dir function7.4CNA v4.00.5%2026-06-17
CVE-2026-55200libssh2 out-of-bounds write via Unchecked packet_length in transport.c8.3NVD v3.14.0%2026-06-17Exploit codeFix
CVE-2026-55199libssh2 Pre-authentication DoS via SSH_MSG_EXT_INFO handler7.5v3.10.7%2026-06-17Fix
CVE-2026-55198nesquena Hermes WebUI session export endpoint insecure direct object reference7.1CNA v4.00.5%2026-06-17Fix
CVE-2026-55197nesquena hermes-webui hermes WebUI broken access control in /API/session endpoint7.1CNA v4.00.5%2026-06-17Fix
CVE-2026-55196hermes-webui Hermes WebUI Unauthenticated Passkey Registration via authentication bypass9.1CNA v4.00.8%2026-06-17Fix
CVE-2026-54819Listdom WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-54818Slimstat Analytics WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-17Fix
CVE-2026-54817MStore API WordPress plugin broken authentication6.5CNA v3.10.5%2026-06-17Fix
CVE-2026-54816Advanced Ads WordPress plugin remote code execution (RCE)7.5CNA v3.10.4%2026-06-17Fix
CVE-2026-54815Cargo Shipping Location for WooCommerce WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-54814Motors WordPress plugin local file inclusion8.1CNA v3.10.6%2026-06-17Fix
CVE-2026-54813SureDash WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-17Fix
CVE-2026-54812Motors WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-54811WP eMember WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-54810Nexi XPay WordPress plugin broken access control7.5CNA v3.10.4%2026-06-17Fix
CVE-2026-54809GIFT4U WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-54808WP Travel Gutenberg Blocks WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-54807Registration Form for WooCommerce WordPress plugin privilege escalation9.8CNA v3.10.5%2026-06-17Exploit codeFix
CVE-2026-54806WP Activity Log WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-17Exploit codeFix
CVE-2026-54805Falang multilanguage WordPress plugin privilege escalation8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-54804Melhor Envio WordPress plugin broken authentication7.6CNA v3.10.4%2026-06-17Fix
CVE-2026-54803SMS Alert Order Notifications WordPress plugin privilege escalation9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-54802SMS Alert Order Notifications WordPress plugin broken authentication7.5CNA v3.10.5%2026-06-17Fix
CVE-2026-54533vantage6 node has an improper access control issue6.9CNA v4.00.5%2026-06-17Fix
CVE-2026-54445vantage6 root admin account vulnerability6.9CNA v4.00.5%2026-06-17Fix
CVE-2026-54417Integer overflow in rxi/microtar mtar_next causes infinite loop DoS8.7CNA v4.00.8%2026-06-17
CVE-2026-54415Broken access control in Azuriom CMS Server Routes allows account takeover8.6CNA v4.00.5%2026-06-17Exploit codeFix
CVE-2026-54388Tinyproxy HTTP request smuggling via Duplicate Content-Length headers9.3CNA v4.00.7%2026-06-17Fix
CVE-2026-54387Tinyproxy HTTP request smuggling via CL/TE Desynchronization9.3CNA v4.00.7%2026-06-17Fix
CVE-2026-54386marimo XSS via file Query parameter in assets.py5.1CNA v4.00.4%2026-06-17Fix
CVE-2026-54196JetFormBuilder WordPress plugin privilege escalation6.8CNA v3.10.3%2026-06-17Reported exploitedFix
CVE-2026-54195JetFormBuilder WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-54194Fusion Builder WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-17Fix
CVE-2026-54193Fusion Builder WordPress plugin arbitrary file deletion7.7CNA v3.10.5%2026-06-17Fix
CVE-2026-54192Popup box WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-54189JetEngine WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-54188JetEngine WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-54187JetEngine WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-54186JobSearch WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-54185Cornerstone WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-17Fix
CVE-2026-54184Clean Login WordPress plugin insecure direct object references (IDOR)8.2CNA v3.10.4%2026-06-17Fix
CVE-2026-53876Micro-Star International RadiX AX6600 WiFi 6 Tri-Band Gaming Router OS command injection8.6CNA v4.02.5%2026-06-17
CVE-2026-53875picklescan Scanning Bypass via Dynamic Eval in scan_pytorch7.1CNA v4.00.7%2026-06-17Fix
CVE-2026-53874picklescan arbitrary code execution via Obfuscated eval Call9.3CNA v4.00.8%2026-06-17Fix
CVE-2026-53873picklescan arbitrary code execution via profile.run Blocklist Bypass9.3CNA v4.00.7%2026-06-17Fix
CVE-2026-53872picklescan arbitrary file read via Unsafe Pickle deserialization8.7CNA v4.00.7%2026-06-17Fix
CVE-2026-53871nesquena hermes-webui Hermes WebUI Profile-Scoped authorization bypass8.6CNA v4.00.5%2026-06-17Fix
CVE-2026-53870NousResearch hermes-agent Hermes Agent Sensitive File Permission vulnerability in Store files6.8CNA v4.00.2%2026-06-17Fix
CVE-2026-53869NousResearch hermes-agent Hermes Agent DNS Rebinding Bypass via WebSocket endpoints8.7CNA v4.00.8%2026-06-17Fix
CVE-2026-53805NVIDIA SIL GEN3C unauthenticated RCE via Pickle deserialization in Inference API9.3CNA v4.01.3%2026-06-17Exploit code
CVE-2026-53676ThingsBoard prototype pollution8.6CNA v4.00.8%2026-06-17
CVE-2026-52716WorkScout-Core WordPress plugin arbitrary file deletion6.5CNA v3.10.4%2026-06-17Fix
CVE-2026-52707Kastell WordPress theme local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-52706JetEngine WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-17Fix
CVE-2026-52705SigmaForms Pro AI Generated Forms WordPress plugin arbitrary file upload9.0CNA v3.10.4%2026-06-17Fix
CVE-2026-52698PushEngage WordPress plugin Subscriber information disclosure7.4CNA v3.10.3%2026-06-17Fix
CVE-2026-52696JetBlog WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-17Fix
CVE-2026-50268SteeltoeOSS Steeltoe.Configuration.Encryption steeltoe: OAEP setting silently selects PKCS#1 padding1.9CNA v3.10.1%2026-06-17Fix
CVE-2026-50267Steeltoe Configuration Abstractions cleartext storage of sensitive information4.7CNA v3.10.1%2026-06-17Fix
CVE-2026-50203Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory9.1CISA ADP v3.10.9%2026-06-17Fix
CVE-2026-50202Steeltoe Security Authentication JWT signing key cache resource exposure5.9CNA v3.10.5%2026-06-17Fix
CVE-2026-50201Steeltoe Management Endpoint actuator permission model improper privilege management6.5CNA v3.10.4%2026-06-17Fix
CVE-2026-50200Steeltoe Management Endpoint environment actuator sanitizer information disclosure7.5CNA v3.10.3%2026-06-17Fix
CVE-2026-50196Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch7.5CNA v3.10.6%2026-06-17Fix
CVE-2026-50194Steeltoe Management Endpoint management port access control authentication bypass8.2CNA v3.10.4%2026-06-17Fix
CVE-2026-50107F5 NGINX Gateway Fabric NGINX configuration generator injection8.6CNA v4.00.5%2026-06-17Fix
CVE-2026-49778WPFunnels Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-49767wpForo Forum WordPress plugin broken authentication9.8CNA v3.10.6%2026-06-17Fix
CVE-2026-49502Dell PowerFlex improper authentication7.4CNA v3.10.3%2026-06-17Fix
CVE-2026-49268Apache Shiro: LDAP DN injection in DefaultLdapRealm8.8CNA v4.00.8%2026-06-17Fix
CVE-2026-49133Typemill path traversal via ControllerApiImage::getPagemedia7.1CNA v4.00.5%2026-06-17Fix
CVE-2026-49113Cornerstone WordPress plugin arbitrary code execution8.5CNA v3.10.5%2026-06-17Fix
CVE-2026-49108Moderno WordPress theme PHP object injection9.8CNA v3.10.6%2026-06-17Fix
CVE-2026-49107Thrive Apprentice WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-17Fix
CVE-2026-49084JetEngine WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-49081User Registration Stripe WordPress plugin broken access control8.2CNA v3.10.3%2026-06-17Fix
CVE-2026-49080wpDataTables WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-49079JetSearch WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Exploit codeFix
CVE-2026-49076JetEngine WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-49075JetEngine WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-17Fix
CVE-2026-49074JetEngine WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-49073Directorist Booking WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-17Fix
CVE-2026-49072WooCommerce Anti-Fraud WordPress plugin broken access control6.5CNA v3.10.3%2026-06-17Fix
CVE-2026-49071WooCommerce Dropshipping WordPress plugin broken authentication6.5CNA v3.10.3%2026-06-17Fix
CVE-2026-49058LoginPress Pro WordPress plugin privilege escalation9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-49057JobSearch WordPress plugin broken access control7.5CNA v3.10.4%2026-06-17Fix
CVE-2026-48997e107 ImageMagick resize path command injection7.1CNA v3.11.3%2026-06-17Fix
CVE-2026-48991XianYuLauncher: Legacy Microsoft account OAuth sign-in flow lacks PKCE and state validation5.5CNA v3.10.2%2026-06-17Fix
CVE-2026-48990joserfc unencoded JWS payload check resource exhaustion5.3CNA v3.10.3%2026-06-17Fix
CVE-2026-48989Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS8.9CNA v4.00.7%2026-06-17Fix
CVE-2026-48988markdown-it smartquotes rule denial of service5.3CNA v3.10.4%2026-06-17Fix
CVE-2026-48979PHP Standard Library HTTP/2 server connection HTTP request smuggling7.5CNA v3.10.5%2026-06-17Fix
CVE-2026-48967Geo Mashup WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-17Fix
CVE-2026-48929Rocket.Chat improper authentication7.5CNA v3.00.9%2026-06-17Fix
CVE-2026-48875JetSmartFilters WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-48869Enfold WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-48823Shaarli has stored cross-site scripting (XSS) via Tags Search4.8CNA v3.10.2%2026-06-17Fix
CVE-2026-48822Shaarli has stored cross-site scripting (XSS) via Markdown Reference Links5.8CNA v3.10.2%2026-06-17Fix
CVE-2026-48821Shaarli: DOM-based cross-site scripting (XSS) in Thumbnail Synchronizer5.8CNA v3.10.2%2026-06-17Fix
CVE-2026-48820CakePHP: View::element is missing a path containment check6.3CNA v4.00.4%2026-06-17Fix
CVE-2026-48818Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows7.5CNA v3.10.6%2026-06-17Fix
CVE-2026-48817Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`5.3CNA v3.10.3%2026-06-17Fix
CVE-2026-48814Network-AI: Empty default secret still authorizes all requests (Incomplete fix for)9.1CNA v3.10.5%2026-06-17Fix
CVE-2026-48797Backpropagate: Backprop UI --auth and backprop UI --share do not enforce authentication9.3CNA v4.00.6%2026-06-17Fix
CVE-2026-48788Remark42: Cross-site scripting (XSS) on /API/v1/img via content-type spoofing8.2CNA v3.00.4%2026-06-17Fix
CVE-2026-48783Postiz modify-subscription endpoint missing authorization4.8CNA v3.10.2%2026-06-17Fix
CVE-2026-48782Pydantic AI SSRF blocklist server-side request forgery6.8CNA v3.10.4%2026-06-17Fix
CVE-2026-48781gitroomhq postiz-app postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery9.9CNA v3.10.3%2026-06-17Fix
CVE-2026-48776langchain-ai LangGraph SDK has unsafe URL path construction4.2CNA v3.10.3%2026-06-17Fix
CVE-2026-48759baptisteArno typebot.io TypeBot: Cross-Workspace theme Template IDOR (Modification and Deletion)7.1CNA v3.10.4%2026-06-17Fix
CVE-2026-48745Traccar Client: Silent configuration hijack via unverified deep link redirects all GPS telemetry9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-48616Rocket.Chat improper access control9.3CNA v3.00.4%2026-06-17Fix
CVE-2026-48591Stored XSS via unescaped HTML attribute values in earmark4.8CNA v4.00.2%2026-06-17
CVE-2026-48294Adobe Acrobat PDF Extension (Chrome) information disclosure7.4CNA v3.11.2%2026-06-17Reported exploited
CVE-2026-48142F5 NGINX ngx_http_charset_module out-of-bounds read6.3CNA v4.00.4%2026-06-17Fix
CVE-2026-48117DroneAware account registration and SSO activation authentication bypass6.8CNA v3.10.3%2026-06-17
CVE-2026-48055Streambert: Arbitrary file write (Zip Slip) via Subtitle Extraction10.0CNA v3.11.0%2026-06-17Fix
CVE-2026-47774Envoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplification7.5CNA v3.11.1%2026-06-17Fix
CVE-2026-47340Apache DolphinScheduler alert instance access control information disclosure6.5v3.10.4%2026-06-17Fix
CVE-2026-47277Runtipi: Unauthenticated arbitrary file read through app-store logo symlinks6.5CNA v3.10.4%2026-06-17Fix
CVE-2026-47103fgmacedo python-statemachine python StateMachine RCE via SCXML eval injection9.3CNA v4.01.4%2026-06-17Exploit codeFix
CVE-2026-46979Oracle PeopleSoft Enterprise CS Campus Community unauthorized data access6.5CNA v3.10.4%2026-06-17Fix
CVE-2026-46978Oracle Solaris Remote Administration daemon component unauthorized data access10.0CNA v3.10.4%2026-06-17Fix
CVE-2026-46977Oracle VM VirtualBox VMSVGA device component information disclosure3.2CNA v3.10.2%2026-06-17Fix
CVE-2026-46976Oracle E-Business Suite Public Sector Payroll Internal Operations component takeover7.2CNA v3.10.5%2026-06-17Fix
CVE-2026-46974Oracle VM VirtualBox Core component takeover7.5CNA v3.10.1%2026-06-17Fix
CVE-2026-46973Oracle Outsourced Mfg for Discrete Industries Internal Operations component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46972Oracle Outsourced Mfg for Discrete Industries Internal Operations component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46971Oracle E-Business Suite HR Intelligence Internal Operations component takeover7.5CNA v3.10.3%2026-06-17Fix
CVE-2026-46970Oracle E-Business Suite HR Intelligence Internal Operations component takeover7.2CNA v3.10.5%2026-06-17Fix
CVE-2026-46969Oracle E-Business Suite Financials for EMEA Internal Operations component takeover7.2CNA v3.10.5%2026-06-17Fix
CVE-2026-46967Oracle Public Sector Financials (International) Authorization component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46966Oracle E-Business Suite Universal Work Queue takeover7.5CNA v3.10.3%2026-06-17Fix
CVE-2026-46965Oracle E-Business Suite Universal Work Queue takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46964Oracle E-Business Suite Universal Work Queue takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46963Oracle E-Business Suite Universal Work Queue takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46962Oracle E-Business Suite Project Portfolio Analysis Internal Operations component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46961Oracle E-Business Suite Project Portfolio Analysis Internal Operations component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46960Oracle E-Business Suite Project Portfolio Analysis Internal Operations component takeover7.2CNA v3.10.5%2026-06-17Fix
CVE-2026-46959Oracle E-Business Suite Subledger Accounting Internal Operations component takeover7.5CNA v3.10.3%2026-06-17Fix
CVE-2026-46958Oracle E-Business Suite Subledger Accounting Internal Operations component takeover7.5CNA v3.10.3%2026-06-17Fix
CVE-2026-46957Oracle E-Business Suite iSupplier Portal Internal Operations component takeover7.5CNA v3.10.3%2026-06-17Fix
CVE-2026-46956Oracle E-Business Suite Property Manager Internal Operations component takeover7.2CNA v3.10.5%2026-06-17Fix
CVE-2026-46955Oracle E-Business Suite Human Resources Person component takeover7.5CNA v3.10.2%2026-06-17Fix
CVE-2026-46953Oracle E-Business Suite HRMS (UK) UK Payroll component takeover7.2CNA v3.10.5%2026-06-17Fix
CVE-2026-46952Oracle E-Business Suite Quality Internal Operations component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46951Oracle E-Business Suite Quality Internal Operations component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46950Oracle E-Business Suite Advanced Outbound Telephony Internal Operations component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46949Oracle E-Business Suite Advanced Outbound Telephony unauthorized data access9.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46947Oracle E-Business Suite Advanced Outbound Telephony Internal Operations component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46946Oracle E-Business Suite iSupport Internal Operations component takeover9.1CNA v3.10.5%2026-06-17Fix
CVE-2026-46945Oracle E-Business Suite iSupport Internal Operations component takeover9.1CNA v3.10.5%2026-06-17Fix
CVE-2026-46944Oracle E-Business Suite iSupport Internal Operations component takeover9.1CNA v3.10.5%2026-06-17Fix
CVE-2026-46942Oracle Process Manufacturing Process Planning Internal Operations component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46940Oracle E-Business Suite Cost Management Cost Planning component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46939Oracle E-Business Suite Configure to Order unauthorized data access8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46938Oracle E-Business Suite Cost Management Cost Planning component takeover7.2CNA v3.10.5%2026-06-17Fix
CVE-2026-46937Oracle E-Business Suite iSetup General Ledger Update Transform, Reports component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46935Oracle Complex Maintenance, Repair and Overhaul Internal Operations component takeover7.5CNA v3.10.3%2026-06-17Fix
CVE-2026-46934Oracle Complex Maintenance, Repair and Overhaul Internal Operations component takeover7.5CNA v3.10.3%2026-06-17Fix
CVE-2026-46933Oracle E-Business Suite Applications Manager Internal Operations component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46932Oracle E-Business Suite Enterprise Asset Management unauthorized data access7.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46931Oracle E-Business Suite Enterprise Asset Management Internal Operations component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46930Oracle In-Memory Cost Management for Discrete Industries unauthorized data access9.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46929Oracle E-Business Suite Cost Management Cost Planning component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46928Oracle E-Business Suite Spares Management Internal Operations component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46927Oracle E-Business Suite Receivables Internal Operations component takeover8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46926Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component takeover8.8CNA v3.10.2%2026-06-17Fix
CVE-2026-46925Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component takeover8.3CNA v3.10.3%2026-06-17Fix
CVE-2026-46922Oracle E-Business Suite HR Intelligence Internal Operations component takeover7.2CNA v3.10.5%2026-06-17Fix
CVE-2026-46921Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46920Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component takeover8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46919Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46918Oracle Process Manufacturing Product Development Internal Operations component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46916Oracle Process Manufacturing Product Development Quality Management Specs component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46915Oracle Complex Maintenance, Repair and Overhaul Production component takeover8.5CNA v3.10.3%2026-06-17Fix
CVE-2026-46914Oracle Solaris Filesystem component unauthorized data access7.1CNA v3.10.2%2026-06-17Fix
CVE-2026-46913Oracle JD Edwards EnterpriseOne Tools Installation Security component takeover9.3CNA v3.10.2%2026-06-17Fix
CVE-2026-46912Oracle JD Edwards EnterpriseOne Tools Web Runtime Security component unauthorized data access9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-46911Oracle JD Edwards EnterpriseOne Project Costing Job Costing component unauthorized data access9.6CNA v3.10.4%2026-06-17Fix
CVE-2026-46910Oracle JD Edwards EnterpriseOne Tools unauthorized data access9.1CNA v3.10.5%2026-06-17Fix
CVE-2026-46909Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure Security component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46908Oracle JD Edwards EnterpriseOne Accounts Payable takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46907Oracle JD Edwards EnterpriseOne Order Promising Order Promising Integration component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46906Oracle JD Edwards EnterpriseOne Tools unauthorized data access9.6CNA v3.10.4%2026-06-17Fix
CVE-2026-46905Oracle JD Edwards EnterpriseOne Tools Web Runtime Security component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46904Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure Security component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46903Oracle JD Edwards EnterpriseOne Tools Business Logic Infrastructure Security component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46902Oracle Enterprise Command Center Framework Core component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46901Oracle Enterprise Command Center Framework Core component unauthorized data access9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46900Oracle Enterprise Command Center Framework Core component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46899Oracle Enterprise Command Center Framework Core component unauthorized data access9.6CNA v3.10.4%2026-06-17Fix
CVE-2026-46898Oracle Enterprise Command Center Framework Core component unauthorized data access8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46897Oracle Enterprise Command Center Framework Core component unauthorized data access9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46896Oracle Enterprise Command Center Framework Core component takeover9.1CNA v3.10.5%2026-06-17Fix
CVE-2026-46895Oracle Enterprise Command Center Framework Core component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46894Oracle E-Business Suite iSupplier Portal Home page component takeover8.0CNA v3.10.2%2026-06-17Fix
CVE-2026-46893Oracle JD Edwards EnterpriseOne General Ledger E1 Foundation component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46892Oracle JD Edwards EnterpriseOne Human Resources Management unauthorized data access9.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46891Oracle JD Edwards EnterpriseOne Accounts Payable unauthorized data access8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46890Oracle Siebel Apps - Marketing takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46889Oracle Siebel Apps - Marketing takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46888Oracle Siebel CRM Deployment Database Upgrade component takeover7.8CNA v3.10.2%2026-06-17Fix
CVE-2026-46887Oracle Siebel Apps - Marketing takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46886Oracle Siebel Apps - Marketing takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46885Oracle Siebel CRM Integration EAI component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46884Oracle Siebel Apps - Marketing takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46883Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure Security component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46882Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure Security component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46881Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure Security component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46880Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure Security component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46879Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure Security component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46878Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure Security component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46877Oracle VM VirtualBox VMSVGA device component unauthorized data access6.0CNA v3.10.2%2026-06-17Fix
CVE-2026-46875Oracle Enterprise Manager Base Platform Deployment library component takeover9.1CNA v3.10.5%2026-06-17Fix
CVE-2026-46874Oracle VM VirtualBox Core component information disclosure3.2CNA v3.10.2%2026-06-17Fix
CVE-2026-46873Oracle VM VirtualBox VMSVGA device component takeover7.5CNA v3.10.1%2026-06-17Fix
CVE-2026-46872Oracle Enterprise Manager Base Platform Install component unauthorized data modification9.0CNA v3.10.4%2026-06-17Fix
CVE-2026-46871Oracle MySQL Shell for VS Code component unauthorized data access6.5CNA v3.10.4%2026-06-17Fix
CVE-2026-46870Oracle MySQL Shell for VS Code component takeover8.5CNA v3.10.3%2026-06-17Fix
CVE-2026-46869Oracle MySQL Shell Dump and Load component unauthorized data access6.5CNA v3.10.2%2026-06-17Fix
CVE-2026-46868Oracle Enterprise Manager Base Platform Extensibility Framework component takeover7.2CNA v3.10.5%2026-06-17Fix
CVE-2026-46867Oracle Enterprise Manager Base Platform Extensibility Framework component takeover7.2CNA v3.10.5%2026-06-17Fix
CVE-2026-46866Oracle Enterprise Manager Base Platform Agent Next Gen component unauthorized data modification8.2CNA v3.10.4%2026-06-17Fix
CVE-2026-46865Oracle Enterprise Manager Base Platform Extensibility Framework component takeover8.2CNA v3.10.2%2026-06-17Fix
CVE-2026-46864Oracle Enterprise Manager Base Platform Agent Next Gen component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46863Oracle MySQL Server, MySQL Cluster Server Connection Handling component denial of service7.5CNA v3.10.5%2026-06-17Fix
CVE-2026-46862Oracle MySQL Router General component denial of service7.5CNA v3.10.5%2026-06-17Fix
CVE-2026-46861Oracle MySQL NDB Cluster NDB Operator component unauthorized data access9.6CNA v3.10.4%2026-06-17Fix
CVE-2026-46860Oracle MySQL Router General component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46859Oracle Supply Chain Agile PLM Security component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46858Oracle APM - Application Performance Management unauthorized data modification9.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46857Oracle Enterprise Manager Base Platform Oracle Management service component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46856Oracle Enterprise Manager Base Platform Metadata plugin component takeover9.6CNA v3.10.5%2026-06-17Fix
CVE-2026-46855Oracle Enterprise Manager Base Platform Metadata plugin component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46854Oracle Enterprise Manager Base Platform Target Management component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46853Oracle Enterprise Manager Base Platform Metadata plugin component takeover9.6CNA v3.10.5%2026-06-17Fix
CVE-2026-46852Oracle Enterprise Manager Base Platform Metadata plugin component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46851Oracle PeopleSoft Enterprise CS Campus Community Security component takeover8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46850Oracle MySQL Shell for VS Code component takeover9.9CNA v3.10.5%2026-06-17Fix
CVE-2026-46849Oracle PeopleSoft Enterprise CS Student Financials Other component unauthorized data access8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46848Oracle WebLogic Server console component unauthorized data access7.9CNA v3.10.2%2026-06-17Fix
CVE-2026-46847Oracle WebCenter Portal Runtime tools component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46846Oracle WebCenter Portal Security Framework component takeover10.0CNA v3.10.5%2026-06-17Fix
CVE-2026-46845Oracle WebCenter Portal Security Framework component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46844Oracle WebCenter Portal Security Framework component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46838Oracle WebCenter Portal Security Framework component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46832Oracle Enterprise Manager Base Platform Discovery Framework component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46825Oracle VM VirtualBox VMSVGA device component unauthorized data modification6.0CNA v3.10.2%2026-06-17Fix
CVE-2026-46816Oracle VM VirtualBox VMSVGA device component information disclosure3.2CNA v3.10.2%2026-06-17Fix
CVE-2026-46815Oracle VM VirtualBox VMSVGA device component information disclosure3.2CNA v3.10.2%2026-06-17Fix
CVE-2026-46814Oracle WebCenter Portal Security Framework component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46813Oracle WebCenter Content Server component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46812Oracle Access Manager Authentication Engine component unauthorized data modification6.1CNA v3.10.2%2026-06-17Fix
CVE-2026-46810Oracle Identity Manager End User Self service component unauthorized data modification6.5CNA v3.10.3%2026-06-17Fix
CVE-2026-46809Oracle WebCenter Sites unauthorized data access9.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46808Oracle WebCenter Content Server component unauthorized data access8.7CNA v3.10.3%2026-06-17Fix
CVE-2026-46807Oracle Identity Manager OIM Legacy UI component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46806Oracle WebCenter Content Server component unauthorized data access8.2CNA v3.10.3%2026-06-17Fix
CVE-2026-46805Oracle WebCenter Content Server component unauthorized data access9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-46804Oracle WebCenter Content Server component unauthorized data access8.7CNA v3.10.3%2026-06-17Fix
CVE-2026-46803Oracle WebCenter Portal Security Framework component takeover10.0CNA v3.10.5%2026-06-17Fix
CVE-2026-46802Oracle WebCenter Portal Security Framework component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46801Oracle WebCenter Sites takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46800Oracle WebCenter Sites takeover10.0CNA v3.10.5%2026-06-17Fix
CVE-2026-46799Oracle WebCenter Sites takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46798Oracle WebCenter Sites takeover10.0CNA v3.10.5%2026-06-17Fix
CVE-2026-46797Oracle WebCenter Sites takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46796Oracle WebCenter Sites takeover8.0CNA v3.10.4%2026-06-17Fix
CVE-2026-46795Oracle WebCenter Content Server component unauthorized data access9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-46794Oracle Identity Manager Connector Generic Unix Connector component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46793Oracle Identity Manager Connector Database User component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46792Oracle Identity Manager Connector Generic Unix Connector component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46791Oracle WebCenter Content Server component unauthorized data access7.5CNA v3.10.4%2026-06-17Fix
CVE-2026-46790Oracle WebCenter Content Server component information disclosure5.3CNA v3.10.3%2026-06-17Fix
CVE-2026-46789Oracle WebCenter Content Server component takeover9.6CNA v3.10.4%2026-06-17Fix
CVE-2026-46788Oracle WebCenter Content Server component takeover8.4CNA v3.10.4%2026-06-17Fix
CVE-2026-46787Oracle WebCenter Content Server component unauthorized data access8.0CNA v3.10.2%2026-06-17Fix
CVE-2026-46786Oracle WebCenter Content Server component takeover9.6CNA v3.10.2%2026-06-17Fix
CVE-2026-46785Oracle WebCenter Content Server component unauthorized data access9.3CNA v3.10.2%2026-06-17Fix
CVE-2026-46784Oracle WebCenter Content: Imaging Core component unauthorized data access9.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46783Oracle WebCenter Content: Imaging Core component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46782Oracle WebCenter Enterprise Capture Client Bundle component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46781Oracle WebCenter Enterprise Capture Client Bundle component takeover10.0CNA v3.10.5%2026-06-17Fix
CVE-2026-46780Oracle WebCenter Content: Imaging Core component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-46779Oracle WebCenter Enterprise Capture Client Bundle component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46778Oracle WebCenter Enterprise Capture Client Bundle component takeover10.0CNA v3.10.5%2026-06-17Fix
CVE-2026-46777Oracle WebCenter Content Server component unauthorized data access9.1CNA v3.10.4%2026-06-17Fix
CVE-2026-46776Oracle Unified Directory OUD Core component unauthorized data modification8.6CNA v3.10.4%2026-06-17Fix
CVE-2026-46774Oracle Unified Directory OUD Core component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46773Oracle Unified Directory OUD Core component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46772Oracle Application Development Framework (ADF) ADF Faces component unauthorized data access4.7CNA v3.10.1%2026-06-17Fix
CVE-2026-46771Oracle Application Development Framework (ADF) unauthorized data access4.1CNA v3.10.1%2026-06-17Fix
CVE-2026-46770Oracle Application Development Framework (ADF) unauthorized data modification6.1CNA v3.10.2%2026-06-17Fix
CVE-2026-46769Oracle Application Development Framework (ADF) ADF Shared components component takeover7.2CNA v3.10.5%2026-06-17Fix
CVE-2026-46768Oracle VM VirtualBox VMSVGA device component denial of service6.0CNA v3.10.2%2026-06-17Fix
CVE-2026-46767Oracle WebCenter Portal Composer component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-46766Oracle WebCenter Content Server component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-46765Oracle WebCenter Portal Composer component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-45617LiquidJS: ReDoS via Quadratic Backtracking in `strip_html` Filter Regex7.5CNA v3.10.7%2026-06-17Fix
CVE-2026-45436WPBakery Page Builder WordPress plugin broken access control6.5CNA v3.10.3%2026-06-17Fix
CVE-2026-45357LiquidJS: Memory and render limit bypass via unbounded width padding in `date` filter (strftime)7.5CNA v3.10.7%2026-06-17Fix
CVE-2026-44646harttle LiquidJS render tag vulnerability5.3CNA v3.10.4%2026-06-17Fix
CVE-2026-44645LiquidJS for tag render limit guard denial of service6.5CNA v3.10.6%2026-06-17Fix
CVE-2026-44644LiquidJS's strip_html filter bypass via newline characters in HTML tags enables XSS6.1CNA v3.10.4%2026-06-17Fix
CVE-2026-44587CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters4.7CNA v3.10.3%2026-06-17Fix
CVE-2026-42629PowerPack Pro for Elementor WordPress plugin broken authentication8.8CNA v3.10.5%2026-06-17Fix
CVE-2026-42530F5 NGINX Open Source HTTP/3 QUIC module use-after-free9.2CNA v4.01.5%2026-06-17Exploit codeFix
CVE-2026-42385Profile Builder Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-42380AI Lab WordPress theme PHP object injection9.8CNA v3.10.6%2026-06-17Fix
CVE-2026-42357Apache DolphinScheduler workflow instance access control incorrect authorization6.5v3.10.3%2026-06-17Fix
CVE-2026-42055F5 NGINX HTTP/2 proxy and gRPC modules out-of-bounds write9.2CNA v4.06.5%2026-06-17Exploit codeFix
CVE-2026-41557Kapee WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-41280Apache DolphinScheduler task definition deletion incorrect authorization4.9CISA ADP v3.10.5%2026-06-17Fix
CVE-2026-40783Blocksy Companion Pro WordPress plugin remote code execution (RCE)9.9CNA v3.10.8%2026-06-17Fix
CVE-2026-40768Salon booking system WordPress plugin insecure direct object references (IDOR)7.3CNA v3.10.3%2026-06-17Fix
CVE-2026-40765collectchat WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-40761Valeska WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40760Behold WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40759Esmée WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40758Léonie WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40757Château WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40756Zoya WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40755TechLink WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40754Roisin WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40753EasyMeals WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40752Manufaktur Solutions WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40751Ashtanga WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40749Charity Zone WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-06-17Fix
CVE-2026-40748Kids Gift Shop WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-06-17Fix
CVE-2026-40747Ecommerce Zone WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-06-17Fix
CVE-2026-40746Restaurant Zone WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-06-17Fix
CVE-2026-40739LuxeDrive WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40738Eldon WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40736Laurits WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40735Reina WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40733ShiftUp WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-40731ChapterOne WordPress theme local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-40726User Registration Stripe WordPress plugin broken access control8.2CNA v3.10.3%2026-06-17Fix
CVE-2026-40725WooCommerce Product Filters WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-17Fix
CVE-2026-40724Client Portal (Pro) WordPress plugin arbitrary file download6.5CNA v3.10.4%2026-06-17Fix
CVE-2026-40723Bricks Builder WordPress theme broken access control4.3CNA v3.10.3%2026-06-17Fix
CVE-2026-40722Yoast SEO Premium WordPress plugin broken access control5.5CNA v3.10.3%2026-06-17Fix
CVE-2026-40721Element Pack Pro WordPress plugin local file inclusion7.5CNA v3.10.4%2026-06-17Fix
CVE-2026-40720Royal Elementor Addons Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-40641Dell PowerFlex weak cryptographic algorithm4.8CNA v3.10.2%2026-06-17Fix
CVE-2026-39598Academy LMS Pro WordPress plugin arbitrary file upload8.0CNA v3.10.4%2026-06-17Fix
CVE-2026-39597WPZOOM Addons for Elementor WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-39596Blocksy Companion Pro WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-39595W3 Total Cache WordPress plugin broken access control4.7CNA v3.10.3%2026-06-17Fix
CVE-2026-39590Atomlab WordPress theme local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-39589Webenvo WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-06-17Fix
CVE-2026-39582Hitek WordPress theme local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-39580Micdrop WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-39578Valiance WordPress theme PHP object injection8.1CNA v3.10.3%2026-06-17Fix
CVE-2026-39577Playroom WordPress theme PHP object injection8.1CNA v3.10.3%2026-06-17Fix
CVE-2026-39576SingleMalt WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-39573Mildhill WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-39568Mr. SEO WordPress theme local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-39567Santé WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-39560Hiroshi WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-39559Uppercase WordPress theme local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-39558Malmö WordPress theme local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-39557NeoBeat WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-39556Konsept WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-39554Fidalgo WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-39549Aperitif WordPress theme local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-39548MagOne WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-39547Getaway WordPress theme local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-39546MultiLoca WordPress plugin privilege escalation7.6CNA v3.10.3%2026-06-17Fix
CVE-2026-39545Zermatt WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-39539Alloggio - Hotel Booking WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-39537Mikado Core WordPress plugin local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-39529Elementra WordPress theme PHP object injection9.8CNA v3.10.6%2026-06-17Fix
CVE-2026-39523Solene Core WordPress plugin local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-39522Solene WordPress theme local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-39446Kapee WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-39445Alukas WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-39443EmallShop WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-39442PressMart WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-39438ListingPro WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-39433WPAMS WordPress plugin arbitrary content deletion vulnerability6.5CNA v3.10.4%2026-06-17Fix
CVE-2026-39199Snes9X out-of-bounds write2.9CNA v3.10.2%2026-06-17Fix
CVE-2026-36418JimuReport executeSelectApi endpoint code injection9.1CISA ADP v3.10.7%2026-06-17
CVE-2026-35327Oracle WebCenter Content Server component unauthorized data access7.6CNA v3.10.3%2026-06-17Fix
CVE-2026-35326Oracle WebCenter Content Server component takeover7.2CNA v3.10.5%2026-06-17Fix
CVE-2026-35325Oracle WebCenter Content Server component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-35324Oracle WebCenter Content Server component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-35323Oracle WebCenter Content Server component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-35322Oracle WebCenter Content Server component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-35321Oracle WebCenter Content Server component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-35320Oracle WebCenter Content Server component takeover9.0CNA v3.10.4%2026-06-17Fix
CVE-2026-35319Oracle WebCenter Content Server component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-35318Oracle WebCenter Sites takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-35317Oracle WebCenter Content Server component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-35316Oracle WebCenter Content Server component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-35315Oracle WebCenter Content Server component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-35314Oracle Access Manager Web Server plugin component unauthorized data modification7.3CNA v3.10.3%2026-06-17Fix
CVE-2026-35313Oracle Access Manager Authentication Engine component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-35312Oracle Virtual Directory Virtual Directory Server component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-35311Oracle WebLogic Server Core component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-35310Oracle Coherence Core component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-35309Oracle Coherence Centralized Third Party Jars component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-35308Oracle Coherence Centralized Third Party Jars component takeover10.0CNA v3.10.5%2026-06-17Fix
CVE-2026-35307Oracle Coherence Core component takeover10.0CNA v3.10.5%2026-06-17Fix
CVE-2026-35306Oracle Coherence Centralized Third Party Jars component unauthorized data access9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-35305Oracle Coherence Centralized Third Party Jars component unauthorized data access9.3CNA v3.10.4%2026-06-17Fix
CVE-2026-35304Oracle Coherence Core component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-35303Oracle WebLogic Server console component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-35302Oracle WebLogic Server console component takeover8.3CNA v3.10.3%2026-06-17Fix
CVE-2026-35301Oracle WebLogic Server console component takeover10.0CNA v3.10.5%2026-06-17Fix
CVE-2026-35300Oracle WebLogic Server Core component takeover9.8CNA v3.10.6%2026-06-17Fix
CVE-2026-35299Oracle WebLogic Server console component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-35298Oracle WebLogic Server Core component takeover9.1CNA v3.10.5%2026-06-17Fix
CVE-2026-35296Oracle WebCenter Sites takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-35295Oracle WebCenter Sites takeover7.5CNA v3.10.3%2026-06-17Fix
CVE-2026-35294Oracle Identity Manager Connector Mainframe Connectors component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-35293Oracle WebCenter Sites takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-35292Oracle WebLogic Server console component takeover10.0CNA v3.10.5%2026-06-17Fix
CVE-2026-35291Oracle WebLogic Server console component takeover6.6CNA v3.10.4%2026-06-17Fix
CVE-2026-35289Oracle PeopleSoft Enterprise PT PeopleTools Deployment Package component takeover8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-35288Oracle PeopleSoft Enterprise PT PeopleTools Deployment Package component takeover8.2CNA v3.10.2%2026-06-17Fix
CVE-2026-35286Oracle WebCenter Content Server component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-35285Oracle WebCenter Enterprise Capture Client Bundle component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-35284Oracle WebCenter Enterprise Capture Client Bundle component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-35283Oracle WebCenter Enterprise Capture Client Bundle component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-35282Oracle WebCenter Enterprise Capture Client Bundle component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-35281Oracle WebCenter Enterprise Capture Client Bundle component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-35280Oracle WebCenter Enterprise Capture Client Bundle component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-35279Oracle PeopleSoft Enterprise PT PeopleTools Performance Monitor component takeover8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-35278Oracle PeopleSoft Enterprise PT PeopleTools Performance Monitor component takeover9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-35276Oracle PeopleSoft Enterprise PT PeopleTools Application Server component takeover8.1CNA v3.10.4%2026-06-17Fix
CVE-2026-35275Oracle VM VirtualBox Shared Folders component unauthorized data access7.5CNA v3.10.1%2026-06-17Fix
CVE-2026-35274Oracle PeopleSoft Enterprise PT PeopleTools Deployment Package component unauthorized data access8.2CNA v3.10.4%2026-06-17Fix
CVE-2026-35272Oracle PeopleSoft Enterprise PT PeopleTools Deployment Package component takeover8.4CNA v3.10.2%2026-06-17Fix
CVE-2026-35271Oracle PeopleSoft Enterprise PT PeopleTools Weblogic component unauthorized data access8.7CNA v3.10.3%2026-06-17Fix
CVE-2026-35270Oracle WebCenter Content Server component takeover9.1CNA v3.10.5%2026-06-17Fix
CVE-2026-35269Oracle Identity Manager REST WebServices component unauthorized data modification7.5CNA v3.10.4%2026-06-17Fix
CVE-2026-35268Oracle Identity Manager Core component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-35267Oracle Identity Manager REST WebServices component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-35265Oracle Identity Manager Security component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-35263Oracle WebLogic Server Core component takeover9.9CNA v3.10.4%2026-06-17Fix
CVE-2026-35262Oracle Data Integrator Market Place component unauthorized data access8.3CNA v3.10.4%2026-06-17Fix
CVE-2026-35261Oracle Access Manager Authentication Engine component unauthorized data modification6.5CNA v3.10.3%2026-06-17Fix
CVE-2026-35259Oracle WebLogic Server console component takeover8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-35258Oracle WebLogic Server console component unauthorized data access8.7CNA v3.10.3%2026-06-17Fix
CVE-2026-35162Dell PowerFlex improper access control4.3CNA v3.10.4%2026-06-17Fix
CVE-2026-35069Dell PowerFlex SQL injection5.7CNA v3.10.4%2026-06-17Fix
CVE-2026-35068Dell PowerFlex SQL injection3.5CNA v3.10.3%2026-06-17Fix
CVE-2026-35067Dell PowerFlex improper access control5.7CNA v3.10.3%2026-06-17Fix
CVE-2026-35066Dell PowerFlex improper access control7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-35065Dell PowerFlex missing authentication8.8CNA v3.10.5%2026-06-17Fix
CVE-2026-34895Softlab Core WordPress plugin local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-34894Integrio Core WordPress plugin local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-34893Thegov Core WordPress plugin local file inclusion8.1CNA v3.10.5%2026-06-17Fix
CVE-2026-34888Bricksforge WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-17Fix
CVE-2026-32967Apache DolphinScheduler: The `/v2` experimental interface lacks permission checks9.1v3.10.3%2026-06-17Fix
CVE-2026-32966Apache DolphinScheduler DataSource API missing authorization9.8v3.10.4%2026-06-17Fix
CVE-2026-32804Dell PowerFlex improper authentication8.1CNA v3.10.3%2026-06-17Fix
CVE-2026-32682F5 NGINX Gateway Fabric GRPCRoute configuration handling vulnerability7.1CNA v4.00.5%2026-06-17Fix
CVE-2026-32652Dell AIOps default credentials7.8CNA v3.10.1%2026-06-17Fix
CVE-2026-30803Integer underflow vulnerability in RTI Connext Micro allows Overread Buffers8.8CNA v4.00.5%2026-06-17Fix
CVE-2026-30802Out-of-bounds read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers8.8CNA v4.00.4%2026-06-17Fix
CVE-2026-30799RTI Connext Professional missing authentication6.1CNA v4.00.5%2026-06-17Fix
CVE-2026-28615Google Android Telecomm privilege escalation10.0CNA v4.00.2%2026-06-17Fix
CVE-2026-28587Google Android MmsSmsProvider.java information disclosure10.0CNA v4.00.2%2026-06-17Fix
CVE-2026-28576Android Contacts Provider information disclosure10.0CNA v4.00.2%2026-06-17Exploit codeFix
CVE-2026-28575Google Android PackageInstallerSession.java resource exhaustion10.0CNA v4.00.2%2026-06-17Fix
CVE-2026-27870Cross-site scripting (XSS) VIA MALICIOUS file upload ON Regesta Smart HD-PLC OF Teldat4.8CNA v4.00.5%2026-06-17Fix
CVE-2026-27869Web service (HTTP) denial OF service VIA SLOW HEADERS ON Regesta Smart HD-PLC OF Teldat6.9CNA v4.00.5%2026-06-17Fix
CVE-2026-27868PUBLICATION OF sensitive information ON Regesta Smart HD-PLC OF Teldat6.9CNA v4.00.5%2026-06-17Fix
CVE-2026-27429Nifty WordPress theme PHP object injection9.8CNA v3.10.6%2026-06-17Fix
CVE-2026-27410Slimstat Analytics WordPress plugin deserialization of untrusted data6.5CNA v3.10.3%2026-06-17Fix
CVE-2026-27400BookPro WordPress plugin arbitrary file deletion8.6CNA v3.10.5%2026-06-17
CVE-2026-27395Support Board WordPress plugin privilege escalation9.8CNA v3.10.5%2026-06-17Fix
CVE-2026-27041Unlimited Elements for Elementor (Premium) WordPress plugin arbitrary file upload9.9CNA v3.10.5%2026-06-17
CVE-2026-25446WishList Member X WordPress plugin arbitrary file upload9.9CNA v3.10.5%2026-06-17Fix
CVE-2026-25439Booknetic WordPress plugin account takeover8.1CNA v3.10.5%2026-06-17
CVE-2026-24611MetForm Pro WordPress plugin broken access control9.1CNA v3.10.4%2026-06-17Fix
CVE-2026-24610MetForm Pro WordPress plugin broken access control4.3CNA v3.10.2%2026-06-17Fix
CVE-2026-24575WishList Member X WordPress plugin broken access control4.3CNA v3.10.3%2026-06-17Fix
CVE-2026-22343WordPress Dating theme broken access control8.6CNA v3.10.3%2026-06-17
CVE-2026-22342WordPress Dating theme cross-site request forgery (CSRF) to account takeover8.8CNA v3.10.2%2026-06-17
CVE-2026-22340WPJobster WordPress theme SQL injection9.3CNA v3.10.4%2026-06-17
CVE-2026-22339WPJobster WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-06-17
CVE-2026-22338EcoBlue WordPress theme local file inclusion8.1CNA v3.10.3%2026-06-17
CVE-2026-22335WooCommerce Frontend Manager Ultimate WordPress plugin SQL injection8.5CNA v3.10.3%2026-06-17Fix
CVE-2026-22334Woocommerce Book Price WordPress plugin arbitrary file download7.5CNA v3.10.5%2026-06-17
CVE-2026-22332Tutor LMS Pro WordPress plugin SQL injection9.3CNA v3.10.3%2026-06-17Fix
CVE-2026-22331AutoParts WordPress theme local file inclusion8.1CNA v3.10.4%2026-06-17
CVE-2026-22330Right Way WordPress theme local file inclusion8.1CNA v3.10.4%2026-06-17
CVE-2026-22329Skillate WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-06-17
CVE-2026-22328Auto Repair WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-06-17
CVE-2026-22327Restaurt WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-06-17
CVE-2026-22326Reprizo WordPress theme local file inclusion8.1CNA v3.10.3%2026-06-17
CVE-2026-22325Promo WordPress theme local file inclusion8.1CNA v3.10.4%2026-06-17
CVE-2026-22283Dell PowerFlex inclusion of untrusted functionality7.5CNA v3.10.2%2026-06-17Fix
CVE-2026-20266OS command injection in the btool Configuration Helper in Splunk AI Toolkit9.1CNA v3.10.6%2026-06-17Fix
CVE-2026-20265Insecure default Domain Allowlist in Splunk AI Toolkit4.3CNA v3.10.2%2026-06-17Fix
CVE-2026-20246Cisco Umbrella Virtual Appliance privilege escalation6.0CNA v3.10.1%2026-06-17Fix
CVE-2026-20220Cisco Crosswork Network Controller remote code execution6.3CNA v3.10.3%2026-06-17Fix
CVE-2026-20190Cisco Identity Services Engine information disclosure7.5CNA v3.10.5%2026-06-17Fix
CVE-2026-20181Cisco Identity Services Engine remote code execution9.1CNA v3.18.9%2026-06-17Fix
CVE-2026-20178Cisco Webex App open redirect4.3CNA v3.10.2%2026-06-17Fix
CVE-2026-12568Black Lantern Security BBOT arbitrary file write in postman_download module6.5CNA v3.10.3%2026-06-17Fix
CVE-2026-12567Black Lantern Security BBOT symlink-following arbitrary write via github_workflows module2.2CNA v3.10.1%2026-06-17Fix
CVE-2026-12566Black Lantern Security BBOT SSRF via unvalidated WWW-Authenticate realm in docker_pull module3.1CNA v3.10.2%2026-06-17Fix
CVE-2026-12565Black Lantern Security BBOT path traversal (Zip-Slip) in unarchive module5.3CNA v3.10.2%2026-06-17Fix
CVE-2026-12530Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages8.4CNA v4.00.3%2026-06-17Fix
CVE-2026-12529SourceCodester CET Automated Grading System with AI Predictive Analytics improper access control6.9CNA v4.00.3%2026-06-17
CVE-2026-12528Red Hat Directory Server ACI parser out-of-bounds write5.4CNA v3.10.2%2026-06-17Fix
CVE-2026-12515Red Hat Satellite content uploads controller missing authorization4.3CNA v3.10.2%2026-06-17Fix
CVE-2026-12491vLLM image metadata handling vulnerability4.8CNA v3.10.2%2026-06-17Fix
CVE-2026-12469Google Chrome uninitialized variable use4.3CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12468Google Chrome race condition8.3CISA ADP v3.10.1%2026-06-17Fix
CVE-2026-12467Google Chrome extensions use-after-free8.3CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12466Google Chrome WebRTC heap-based buffer overflow8.8CISA ADP v3.10.4%2026-06-17Fix
CVE-2026-12465Google Chrome Metrics object lifecycle issue8.3CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12464Google Chrome Browser use-after-free8.3CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12463Google Chrome Views inappropriate implementation4.7CISA ADP v3.10.1%2026-06-17Fix
CVE-2026-12462Google Chrome Media use-after-free7.5CISA ADP v3.10.3%2026-06-17Fix
CVE-2026-12461Google Chrome WebRTC out-of-bounds read6.5CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12460Google Chrome File System Access insufficient policy enforcement4.2CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12459Google Chrome Serial inappropriate implementation6.1CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12458Google Chrome Passwords inappropriate implementation3.1CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12457Google Chrome extensions inappropriate implementation4.2CISA ADP v3.10.1%2026-06-17Fix
CVE-2026-12456Google Chrome extensions inappropriate implementation4.2CISA ADP v3.10.1%2026-06-17Fix
CVE-2026-12455Google Chrome Tab Strip use-after-free7.5CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12454Google Chrome race condition8.3CISA ADP v3.10.1%2026-06-17Fix
CVE-2026-12453Google Chrome improper input validation4.2CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12452Google Chrome Downloads use-after-free8.8CISA ADP v3.10.3%2026-06-17Fix
CVE-2026-12451Google Chrome DigitalCredentials use-after-free8.3CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12450Google Chrome Media inappropriate implementation6.5CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12449Google Chrome Chromoting use-after-free7.8CISA ADP v3.10.1%2026-06-17Fix
CVE-2026-12448Google Chrome WebView inappropriate implementation8.8CISA ADP v3.10.3%2026-06-17Fix
CVE-2026-12447Google Chrome WebRTC heap-based buffer overflow8.8CISA ADP v3.10.4%2026-06-17Fix
CVE-2026-12446Google Chrome Passwords inappropriate implementation4.3CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12445Google Chrome extensions use-after-free7.5CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12444Google Chrome Chromoting out-of-bounds read5.5CISA ADP v3.10.1%2026-06-17Fix
CVE-2026-12443Google Chrome Web Authentication use-after-free8.8CISA ADP v3.10.6%2026-06-17Fix
CVE-2026-12442Google Chrome Passwords use-after-free8.8CISA ADP v3.10.4%2026-06-17Fix
CVE-2026-12441Google Chrome File Input use-after-free8.8CISA ADP v3.10.3%2026-06-17Fix
CVE-2026-12440Google Chrome DigitalCredentials use-after-free9.6CISA ADP v3.10.3%2026-06-17Fix
CVE-2026-12439Google Chrome Digital Credentials use-after-free8.8CISA ADP v3.10.3%2026-06-17Fix
CVE-2026-12438Google Chrome WebView inappropriate implementation8.3CISA ADP v3.10.2%2026-06-17Fix
CVE-2026-12437Google Chrome WebShare use-after-free8.3CISA ADP v3.10.3%2026-06-17Fix
CVE-2026-12360JetEngine WordPress plugin unauthenticated SQL injection via Listing Grid Load More AJAX endpoint7.5CNA v3.10.3%2026-06-17Fix
CVE-2026-12348The Browser Company of New York ArcSearch address bar spoofing in Arc Search for Android7.4CNA v3.10.3%2026-06-17
CVE-2026-12199nltk/nltk unauthenticated denial of service in nltk.app.wordnet_app7.5CNA v3.00.3%2026-06-17
CVE-2026-12165Contest Gallery WordPress plugin privilege escalation8.8CNA v3.10.4%2026-06-17Fix
CVE-2026-12151undici WebSocket client vulnerable to denial of service via fragment count bypass7.5CNA v3.10.8%2026-06-17Fix
CVE-2026-12115Counter Box WordPress plugin authenticated (Administrator+) PHP object injection via import6.6CNA v3.10.5%2026-06-17Fix
CVE-2026-11975Stored cross-site scripting (XSS) in SimplCommerce News Module Admin interface6.2CNA v4.00.3%2026-06-17
CVE-2026-11858Quanos Solutions SCHEMA ST4 Client Update Service missing authorization8.4CNA v4.00.1%2026-06-17
CVE-2026-11857Quanos Solutions SCHEMA ST4 Client Update Service deserialization of untrusted data8.4CNA v4.00.3%2026-06-17
CVE-2026-11525undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching3.7CNA v3.10.2%2026-06-17Fix
CVE-2026-11410OS command injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N8.5CNA v4.02.8%2026-06-17Fix
CVE-2026-11409OS command injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N8.5CNA v4.02.8%2026-06-17Fix
CVE-2026-11407Pimcore CMS Twig sandbox bypass via SecurityPolicy checkMethodAllowed8.6CNA v4.00.6%2026-06-17
CVE-2026-11311F5 NGINX Gateway Fabric NGINX configuration generator vulnerability8.6CNA v4.00.6%2026-06-17Fix
CVE-2026-10850Plane stored XSS in intake issue description_html5.4v3.10.2%2026-06-17
CVE-2026-10839Open redirection vulnerability in Password Manager5.1CNA v4.00.4%2026-06-17Fix
CVE-2026-10837Open redirection vulnerability in Password Manager5.1CNA v4.00.3%2026-06-17Fix
CVE-2026-10836Improper neutralization of HTTP headers in Password Manager5.1CNA v4.00.3%2026-06-17Fix
CVE-2026-10741Nexus Repository Manager incorrect authorization allows credential disclosure5.9CNA v4.00.3%2026-06-17Fix
CVE-2026-10696Devolutions UniGetUI pinget backend incorrectly resolved name or reference7.5CISA ADP v3.10.3%2026-06-17Fix
CVE-2026-10641zephyrproject zephyr out-of-bounds write in Bluetooth HFP Hands-Free CIND indicator parsing7.1CNA v3.10.3%2026-06-17Fix
CVE-2026-10094Path traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 20249.8CNA v3.10.4%2026-06-17
CVE-2026-9697undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent7.4CNA v3.10.6%2026-06-17Fix
CVE-2026-9690WP Media folder Addon WordPress plugin arbitrary file download7.5CNA v3.10.5%2026-06-17Fix
CVE-2026-9679undici vulnerable to HTTP header injection via Set-Cookie percent-decoding5.9CNA v3.10.3%2026-06-17Fix
CVE-2026-9678undici vulnerable to cross-user information disclosure via shared cache whitespace bypass5.9CNA v3.10.4%2026-06-17Fix
CVE-2026-9675undici WebSocket client vulnerable to denial of service via cumulative fragment bypass7.5CNA v3.10.5%2026-06-17Fix
CVE-2026-9591Cross-site request forgery (CSRF) in SimplCommerce News module6.9CNA v4.00.3%2026-06-17
CVE-2026-9570Taskbuilder WordPress plugin reflected XSS via shortcode7.1CISA ADP v3.10.3%2026-06-17Fix
CVE-2026-8607Points Management System For Gamification WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-06-17Fix
CVE-2026-8494Permalink Manager Lite WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-17Fix
CVE-2026-8383LearnPress WordPress plugin unauthenticated sensitive user information disclosure via REST API5.3CISA ADP v3.10.7%2026-06-17NucleiFix
CVE-2026-8089weMail WordPress plugin reflected cross-site scripting7.1CISA ADP v3.10.3%2026-06-17NucleiFix
CVE-2026-8050SignalRGB kernel driver IOCTL handlers null pointer dereference7.5CISA ADP v3.10.5%2026-06-17Fix
CVE-2026-8049SignalRGB kernel driver SignalIo device object improper access control5.3CISA ADP v3.10.1%2026-06-17Fix
CVE-2026-7850WP Magnific Popup WordPress plugin Author+ stored XSS via href attribute5.9CISA ADP v3.10.2%2026-06-17
CVE-2026-7300RTI Connext Professional buffer overflow8.8CNA v4.00.4%2026-06-17Fix
CVE-2026-6734undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse7.5CNA v3.10.4%2026-06-17Fix
CVE-2026-6733undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse3.7CNA v3.10.3%2026-06-17Fix
CVE-2026-5667Mitsubishi Electric Room Air Conditioners MSZ-BKR2223-W hard-coded credentials7.2CNA v4.00.2%2026-06-17Fix
CVE-2026-3894Out-of-bounds read vulnerability in RTI Connext Professional allows Overread Buffers9.2CNA v4.00.3%2026-06-17Fix
CVE-2026-3490picklescan Universal Blocklist Bypass via pkgutil.resolve_name10.0CNA v4.00.9%2026-06-17Fix
CVE-2026-2675RTI Connext Professional missing authentication6.0CNA v4.00.4%2026-06-17Fix
CVE-2026-2674Out-of-bounds write vulnerability in RTI Connext Professional allows Overflow Buffers4.8CNA v4.00.3%2026-06-17Fix
CVE-2026-2467RTI Connext Professional heap-based buffer overflow9.2CNA v4.00.2%2026-06-17Fix
CVE-2026-1288RFA File Parsing vulnerability in Autodesk Revit5.5CNA v3.10.1%2026-06-17Fix
CVE-2026-0092Google Android Package Manager privilege escalation10.0CNA v4.00.2%2026-06-17Exploit codeFix
CVE-2026-0083Google Android Nfc.h use-after-free10.0CNA v4.00.1%2026-06-17Fix
CVE-2026-0082Google Android NfcDispatcher.java privilege escalation10.0CNA v4.00.2%2026-06-17Fix
CVE-2026-0081Google Android NFC privilege escalation10.0CNA v4.00.1%2026-06-17Fix
CVE-2026-0071Google Android SettingsLib missing authorization10.0CNA v4.00.2%2026-06-17Fix
CVE-2026-0068Google Android PackageInstallerService.java privilege escalation10.0CNA v4.00.1%2026-06-17Fix
CVE-2026-0064Google Android multiple places denial of service10.0CNA v4.00.1%2026-06-17Fix
CVE-2026-0063Google Android PhoneInterfaceManager.java privilege escalation10.0CNA v4.00.2%2026-06-17Fix
CVE-2026-0057Google Android Contacts Provider information disclosure3.3CISA ADP v3.10.1%2026-06-17Fix
CVE-2026-0019Google Android SettingsLib privilege escalation7.8CISA ADP v3.10.1%2026-06-17Fix
CVE-2026-54198Media LIbrary Assistant WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-16Fix
CVE-2026-54197GetGenie WordPress plugin sensitive data exposure6.5CNA v3.10.4%2026-06-16Fix
CVE-2026-54191Pods WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-16Fix
CVE-2026-54190Envira Photo Gallery WordPress plugin broken access control6.5CNA v3.10.3%2026-06-16Fix
CVE-2026-53900Mozilla Firefox cookie injection was possible when opening a PDF link4.3CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-53899Mozilla Firefox cross-origin cookies could be leaked when opening a PDF link6.5CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-53866OpenClaw Allowlist Bypass in Shell Inline-Command Parsing7.6CNA v4.00.5%2026-06-16Fix
CVE-2026-53865OpenClaw arbitrary command execution via Workspace-Derived service path7.2CNA v4.00.2%2026-06-16Fix
CVE-2026-53864OpenClaw Insufficient Environment Variable Sanitization in Node.js Control variables7.6CNA v4.00.4%2026-06-16Fix
CVE-2026-53863OpenClaw Unvalidated Group ID Acceptance in Tool Group Policy6.5NVD v3.10.3%2026-06-16Fix
CVE-2026-53862OpenClaw Bootstrap Token Replay via Pending Pairing Scope Widening5.4v3.10.1%2026-06-16Fix
CVE-2026-53861OpenClaw Allowlist Bypass via Combined POSIX Inline Flags on macOS9.8v3.10.5%2026-06-16Fix
CVE-2026-53860OpenClaw Sender Policy Bypass via Mutable Conversation Identifiers in BlueBubbles5.4v3.10.2%2026-06-16Fix
CVE-2026-53859OpenClaw Hostname Validation Bypass via Trailing-Dot Inconsistency6.5v3.10.4%2026-06-16Fix
CVE-2026-53858OpenClaw arbitrary Runtime Dependency Loading via STATE_DIRECTORY Environment variable7.0CNA v4.00.2%2026-06-16Fix
CVE-2026-53857OpenClaw Mutable Display Name Binding in Zalo allowFrom Policy8.6CNA v4.00.4%2026-06-16Fix
CVE-2026-53856OpenClaw insecure file permissions in Config Recovery via OpenClaw.json5.7CNA v4.00.1%2026-06-16Fix
CVE-2026-53855OpenClaw Shell Positional Parameters Bypass in Inline-Eval Checks7.6CNA v4.00.5%2026-06-16Fix
CVE-2026-53854OpenClaw privilege escalation via ownerAllowFrom Wildcard Inheritance in Internal/Webchat commands6.0CNA v4.00.4%2026-06-16Fix
CVE-2026-53853OpenClaw Argument Pattern Bypass in Exec Allowlist via Linux and macOS7.6CNA v4.00.6%2026-06-16Fix
CVE-2026-53852OpenClaw Scope Bypass via Empty-Scope Device Re-pairing2.3CNA v4.00.3%2026-06-16Fix
CVE-2026-53851OpenClaw Slack Reaction Event Notification Bypass6.3CNA v4.00.3%2026-06-16Fix
CVE-2026-53850OpenClaw Control Scope Enforcement Bypass in Focus command6.8CNA v4.00.1%2026-06-16Fix
CVE-2026-53849OpenClaw privilege escalation via Mutable Discord Display Names in allowFrom8.6CNA v4.00.4%2026-06-16Fix
CVE-2026-53848OpenClaw Exec Allowlist Bypass via Transparent Command Wrappers2.3CNA v4.00.3%2026-06-16Fix
CVE-2026-53847OpenClaw privilege escalation via Active Memory Write Scope5.3CNA v4.00.3%2026-06-16Fix
CVE-2026-53846OpenClaw arbitrary Package Manager Execution via Workspace .env npm_execpath7.0CNA v4.00.2%2026-06-16Fix
CVE-2026-53845OpenClaw Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping2.3CNA v4.00.3%2026-06-16Fix
CVE-2026-53844OpenClaw Session Visibility Check Bypass in Shared Memory Search6.0CNA v4.00.4%2026-06-16Fix
CVE-2026-53843OpenClaw Node Token Revocation Bypass via Pairing-Scoped Device Session8.7CNA v4.00.5%2026-06-16Fix
CVE-2026-53842OpenClaw arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment variable7.0CNA v4.00.2%2026-06-16Fix
CVE-2026-53841OpenClaw cross-site scripting via Unsafe Markdown Links in Exported Session HTML2.1CNA v4.00.3%2026-06-16Fix
CVE-2026-53840OpenClaw Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirects6.0CNA v4.00.3%2026-06-16Fix
CVE-2026-53776Perry JWT Expiration Bypass via verify_decode9.3CNA v4.00.6%2026-06-16Fix
CVE-2026-52715GEO my WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-16NucleiExploit codeFix
CVE-2026-52714SEO Plugin by Squirrly SEO WordPress plugin broken access control7.5CNA v3.10.3%2026-06-16Fix
CVE-2026-52712Attendance Manager WordPress plugin SQL injection7.6CNA v3.10.3%2026-06-16Fix
CVE-2026-52711WooCommerce POS WordPress plugin broken access control7.5CNA v3.10.4%2026-06-16Fix
CVE-2026-50656Microsoft Defender elevation of privilege7.8CNA v3.10.4%2026-06-16Exploit codeFix
CVE-2026-50255Sony Optical Disc Archive Software incorrect default permissions5.4CNA v4.00.1%2026-06-16
CVE-2026-49774RD Station WordPress plugin remote code execution (RCE)9.9CNA v3.10.5%2026-06-16Fix
CVE-2026-49772The Events Calendar WordPress plugin SQL command improper neutralization9.3CNA v3.10.5%2026-06-16Reported exploitedNucleiExploit codeFix
CVE-2026-48780Forem vulnerable to bypass of email address domain restrictions8.2CNA v3.10.4%2026-06-16
CVE-2026-48779ws denial of service7.5CNA v3.10.9%2026-06-16Fix
CVE-2026-48777FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory9.3CNA v4.00.5%2026-06-16Fix
CVE-2026-48775LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading6.8CNA v3.10.7%2026-06-16Fix
CVE-2026-47964DNG SDK heap-based buffer overflow7.8CNA v3.10.3%2026-06-16Fix
CVE-2026-47963DNG SDK out-of-bounds read5.5CNA v3.10.3%2026-06-16Fix
CVE-2026-47934DNG SDK out-of-bounds read5.5CNA v3.10.3%2026-06-16Fix
CVE-2026-47927DNG SDK out-of-bounds read5.5CNA v3.10.3%2026-06-16Fix
CVE-2026-47750leejet stable-diffusion.cpp out-of-bounds write7.8CNA v3.10.2%2026-06-16
CVE-2026-47749stable-diffusion.cpp PyTorch checkpoint pickle parser heap buffer overflow7.8CNA v3.10.2%2026-06-16
CVE-2026-47748stable-diffusion.cpp PyTorch checkpoint pickle parser out-of-bounds read5.5CNA v3.10.2%2026-06-16
CVE-2026-47747stable-diffusion.cpp has a heap-based buffer overflow7.8CNA v3.10.2%2026-06-16
CVE-2026-47684Sync-in Server: SSRF protection bypass via IPv4-mapped IPv6 addresses in regExpPrivateIP7.7CNA v3.10.4%2026-06-16Fix
CVE-2026-46448OpenStack Nova incorrect resource transfer8.5v3.10.3%2026-06-16Fix
CVE-2026-46331Linux kernel net/sched pedit action out-of-bounds write7.8CNA v3.10.6%2026-06-16Reported exploitedExploit codeFix
CVE-2026-44932Indirect remote shell command injection via unsanitized DHCP options in wicked8.8CNA v3.10.5%2026-06-16Fix
CVE-2026-42089Yeoman Environment local generator installation arbitrary code execution8.6CNA v3.10.2%2026-06-16Exploit codeFix
CVE-2026-42014Red Hat Enterprise Linux 10 Gnutls: Gnutls: Use-after-free in gnutls_pkcs11_token_set_pin6.6CNA v3.10.2%2026-06-16Fix
CVE-2026-40809Metro Magazine WordPress theme broken access control6.5CNA v3.10.3%2026-06-16Fix
CVE-2026-40750Kids Online Store WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-06-16Fix
CVE-2026-39581WP Sessions Time Monitoring Full Automatic WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-16Fix
CVE-2026-39574InPost Gallery WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-16Fix
CVE-2026-39490JupiterX Core WordPress plugin broken access control7.5CNA v3.10.4%2026-06-16Fix
CVE-2026-39437Min Max Step Quantity Limits Manager for WooCommerce WordPress plugin reflected cross-site scripting7.1CNA v3.10.3%2026-06-16Fix
CVE-2026-25470ACPT (Pro) - Custom Post Types plugin for WordPress remote code execution (RCE)10.0CNA v3.10.9%2026-06-16Fix
CVE-2026-24228NVIDIA NeMo Framework deserialization of untrusted data7.8CNA v3.10.2%2026-06-16Fix
CVE-2026-24155NVIDIA NeMo Framework code injection7.8CNA v3.10.2%2026-06-16Fix
CVE-2026-22313OS Commands Executed with Administrative Permissions in Radiflow iSAP Smart Collector9.1CNA v3.10.9%2026-06-16
CVE-2026-22312Radiflow iSAP Smart Collector REST API authentication hard-coded credentials8.6CNA v3.10.2%2026-06-16
CVE-2026-12425Reflected / DOM cross-site scripting (XSS) in PowerSchool ERP / Employee Access Center6.1NVD v3.10.1%2026-06-16
CVE-2026-12398Red Hat Ansible Automation Platform 2 galaxy_ng: Shell injection in legacy role import7.5CNA v3.10.9%2026-06-16
CVE-2026-12330Mozilla Firefox incorrect boundary conditions in the Internationalization component5.4CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12329Memory safety bug fixed in Thunderbird ESR5.3CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12328Mozilla Firefox memory safety bugs8.1CISA ADP v3.10.5%2026-06-16Fix
CVE-2026-12327Mozilla memory safety bugs fixed in Firefox ESR, Thunderbird ESR, Firefox 152 and Thunderbird 1528.1CISA ADP v3.10.4%2026-06-16Fix
CVE-2026-12326Mozilla memory safety bugs fixed in Firefox 152 and Thunderbird 1528.1CISA ADP v3.10.4%2026-06-16Fix
CVE-2026-12325Mozilla Firefox denial of service in the Graphics: ImageLib component6.5CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12324Mozilla Firefox incorrect boundary conditions in the Graphics: CanvasWebGL component7.3CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12323Mozilla Firefox spoofing issue in the DOM: Core and HTML component5.4CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12322Mozilla Firefox clickjacking issue in the Widget: Gtk component5.4CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12321Mozilla Firefox JIT miscompilation in the JavaScript: WebAssembly component5.4CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12320Mozilla Firefox information disclosure in the Password Manager component4.3CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12319Mozilla Firefox denial of service in the Audio/Video: Playback component6.5CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12318Mozilla Firefox incorrect boundary conditions in the Libraries component in NSS7.3CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12317Memory safety bug fixed in Thunderbird 1527.5CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12316Mozilla Firefox mitigation bypass in the DOM: Security component9.1CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12315Mozilla Firefox mitigation bypass in the DOM: Security component9.1CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12314Memory safety bug fixed in Thunderbird 1527.5CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12313Mozilla Firefox information disclosure, sandbox escape in the Security: Process Sandboxing component4.7CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12312Memory safety bug fixed in Thunderbird 1527.5CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12311Mozilla Firefox information disclosure, sandbox escape in the Security: Process Sandboxing component4.7CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12310Memory safety bug fixed in Thunderbird 1527.5CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12309Memory safety bug fixed in Thunderbird 1526.5CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12308Memory safety bug fixed in Thunderbird 1525.3CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12307Memory safety bug fixed in Thunderbird 1525.3CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12306Memory safety bug fixed in Thunderbird 1525.3CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12305Memory safety bug fixed in Thunderbird 1527.5CISA ADP v3.10.4%2026-06-16Fix
CVE-2026-12304Mozilla Firefox same-origin policy bypass in the Networking: Cookies component9.1CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12303Mozilla Firefox and Thunderbird WebGPU information disclosure4.3CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12302Mozilla Firefox mitigation bypass in the DOM: Security component6.5CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-12301Memory safety bug fixed in Thunderbird 1525.3CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12300Memory safety bug fixed in Thunderbird 1525.3CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12299Mozilla Firefox JIT miscompilation in the DOM: Core and HTML component5.4CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12298Memory safety bug fixed in Thunderbird 1525.4CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12297Mozilla Firefox sandbox escape due to incorrect boundary conditions in the Networking component9.6CISA ADP v3.10.4%2026-06-16Fix
CVE-2026-12296Mozilla Firefox sandbox escape in the Security: Process Sandboxing component9.6CISA ADP v3.10.4%2026-06-16Fix
CVE-2026-12295Mozilla Firefox sandbox escape in the DOM: Navigation component9.6CISA ADP v3.10.4%2026-06-16Exploit codeFix
CVE-2026-12294Mozilla Firefox sandbox escape in the DOM: Workers component9.6CISA ADP v3.10.4%2026-06-16Fix
CVE-2026-12293Mozilla Firefox use-after-free in the Graphics: WebGPU component9.8v3.10.3%2026-06-16Fix
CVE-2026-12292Mozilla Firefox incorrect boundary conditions in the Web Audio component8.1CISA ADP v3.10.5%2026-06-16Fix
CVE-2026-12291Mozilla Firefox use-after-free in the Networking: HTTP component8.8CISA ADP v3.10.4%2026-06-16Fix
CVE-2026-12290Memory safety bug fixed in Thunderbird 1528.1CISA ADP v3.10.4%2026-06-16Fix
CVE-2026-12289Mozilla Firefox privilege escalation in the Graphics: WebRender component8.8CISA ADP v3.10.4%2026-06-16Fix
CVE-2026-12256Fusion Builder WordPress theme PHP object injection8.8CNA v3.10.5%2026-06-16Fix
CVE-2026-12225syracom Secure Login (2FA) for Confluence allows 2FA bypass via spoofed User-Agent8.7CNA v4.00.5%2026-06-16Fix
CVE-2026-12162Devolutions Remote Desktop Manager improper certificate host validation5.5CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-12117Devolutions Server social login connection endpoint improper access control4.3CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12105Devolutions Server improper access control6.5CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-12003CPython Insecure Input Validation resulting in privilege escalation5.3CNA v4.00.1%2026-06-16Fix
CVE-2026-11890Devolutions Server PAM account discovery results improper access control4.3CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-11317Rockwell Automation Logix 5370 and 5570 Controllers vulnerable to denial of service via CIP8.7CNA v4.00.3%2026-06-16Fix
CVE-2026-10831Moxa NPort 6000 Series improper authorization of Break Signal commands in Devices6.9CNA v4.00.3%2026-06-16Fix
CVE-2026-10829Moxa NPort W2150A-W4/W2250A-W4 Series stack-based buffer overflow8.6CNA v4.00.5%2026-06-16Fix
CVE-2026-10828Moxa NPort W2150A-W4/W2250A-W4 Series format string6.9CNA v4.00.3%2026-06-16Fix
CVE-2026-10825Moxa NPort 6000-G2 Series Improper JSON Input Validation in WebSocket API leads to denial of service7.1CNA v4.00.2%2026-06-16Fix
CVE-2026-10780Static Block WordPress plugin insecure direct object reference4.3CNA v3.10.2%2026-06-16
CVE-2026-10748Nexus Repository 3 remote code execution via License deserialization8.6CNA v4.00.3%2026-06-16Fix
CVE-2026-10649Red Hat Enterprise Linux 10 pacemaker: Pacemaker: Denial of service8.6CNA v3.10.6%2026-06-16Fix
CVE-2026-10640zephyrproject zephyr use-after-free reading `net_pkt` `iface` after send in IPv6 Neighbor Discovery4.2CNA v3.10.4%2026-06-16Fix
CVE-2026-10639Zephyr ICMPv4 echo reply handling use-after-free4.8CNA v3.10.2%2026-06-16Fix
CVE-2026-10638Zephyr ICMPv6 receive path use-after-free5.9CNA v3.10.4%2026-06-16Fix
CVE-2026-10637Zephyr IPv6 MLD send path use-after-free5.9CNA v3.10.3%2026-06-16Fix
CVE-2026-10636Zephyr IPv4 IGMP send path use-after-free3.7CNA v3.10.3%2026-06-16Fix
CVE-2026-10635Zephyr Xtensa MMU page tables use-after-free6.3CNA v3.10.2%2026-06-16Fix
CVE-2026-10303ServerCo getssl ACME shell script path injection7.4CNA v3.10.8%2026-06-16Fix
CVE-2026-10093File Sharing and Download Manager WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-06-16Fix
CVE-2026-9507Session fixation vulnerability in Enhancesoft's osTicket5.1CNA v4.00.6%2026-06-16
CVE-2026-9307Rockwell Automation CompactLogix 5370 web server diagnostics page information disclosure6.3CNA v4.00.4%2026-06-16Fix
CVE-2026-9262Canon EOS Network Setting Tool insecure default initialization7.1CNA v4.00.5%2026-06-16Fix
CVE-2026-9261Canon EOS Network Setting Tool weak cryptographic algorithm7.6CNA v4.00.3%2026-06-16Fix
CVE-2026-9260Canon EOS Network Setting Tool hard-coded cryptographic key6.9CNA v4.00.4%2026-06-16Fix
CVE-2026-9259Canon EOS Network Setting Tool improper input validation7.1CNA v4.00.3%2026-06-16Fix
CVE-2026-9258Canon EOS Network Setting Tool improper input validation7.1CNA v4.00.5%2026-06-16Fix
CVE-2026-9187zealopensource Abandoned Contact Form 7 recover_id parameter missing authorization5.3CNA v3.10.4%2026-06-16
CVE-2026-8484Heap buffer overflow in Jansi4.8CNA v4.00.2%2026-06-16Fix
CVE-2026-8444WP Review Slider Pro WordPress plugin SQL injection8.8CNA v3.10.5%2026-06-16Fix
CVE-2026-8443WP Review Slider Pro WordPress plugin authenticated (Subscriber+) SQL injection via stypes parameter8.8CNA v3.10.5%2026-06-16Fix
CVE-2026-8442WP Review Slider Pro WordPress plugin arbitrary file deletion8.1CNA v3.10.8%2026-06-16Fix
CVE-2026-8176LatePoint WordPress plugin privilege escalation to Administrator7.5CNA v3.10.6%2026-06-16Fix
CVE-2026-7273Zyxel GS1900 Series Switches stack-based buffer overflow8.8CNA v3.12.5%2026-06-16KEVFix
CVE-2026-6964Video Conferencing with Zoom WordPress plugin authorization bypass5.3CNA v3.10.5%2026-06-16Fix
CVE-2026-6933Premmerce Dev Tools WordPress plugin missing authorization authenticated remote code execution8.8CNA v3.11.1%2026-06-16
CVE-2026-5416TURCK TBEN-LL-SE-M2 command injection via name parameter8.7CNA v4.01.3%2026-06-16Fix
CVE-2026-5149RTMKit WordPress plugin missing authorization arbitrary form Submission access6.5CNA v3.10.4%2026-06-16Fix
CVE-2026-4367Red Hat Hardened Images libxpm: Libxpm: Denial of service via out-of-bounds read in xpm file parsing5.5CNA v3.10.2%2026-06-16Fix
CVE-2026-2604Evolution-data-server: Evolution Data Server: Arbitrary file deletion via inconsistent uri handling5.6CNA v3.10.3%2026-06-16Fix
CVE-2026-2381WooCommerce Stripe Payment Gateway WordPress plugin unauthorized access6.5CNA v3.10.4%2026-06-16Fix
CVE-2026-1767GNOME Localsearch MP3 extractor vulnerability8.1NVD v3.10.2%2026-06-16Fix
CVE-2026-1766GNOME Localsearch MP3 extractor vulnerability6.1NVD v3.10.2%2026-06-16Fix
CVE-2026-1765GNOME Localsearch MP3 extractor out-of-bounds read5.6CNA v3.10.1%2026-06-16Fix
CVE-2026-1764GNOME Localsearch MP3 extractor out-of-bounds read5.6CNA v3.10.2%2026-06-16Fix
CVE-2026-0647Rockwell Automation FLEX I/O EtherNet/IP Adapters 1794-AENTR web server missing authentication8.8CNA v4.00.4%2026-06-16Fix
CVE-2026-0646Rockwell Automation FLEX I/O EtherNet/IP Adapters 1794-AENTR CIP protocol handling memory leak8.7CNA v4.00.3%2026-06-16Fix
CVE-2026-0165Google Android the RTCP packet decoder out-of-bounds read6.5CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-0164Google Android Modem out-of-bounds write8.8CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-0162Google Android AudioSdpParser.cpp memory corruption8.8CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-0161Google Android RtpSession.cpp out-of-bounds write8.8CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-0160Google Android TextRtpPayloadDecoderNode.cpp out-of-bounds write8.8CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-0158Google Android Camera information disclosure4.0CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-0157Google Android RtcpHeader::decodeRtcpHeader out-of-bounds read4.3CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-0156Google Android RtpSession.cpp memory safety bugs7.5v3.10.2%2026-06-16Fix
CVE-2026-0155Google Android ImsMediaBitReader::ReadByteBuffer out-of-bounds read5.3CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-0154Google Android Modem crash8.8CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-0153Google Android msg_to_host_buffer.cc out-of-bounds write7.8CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-0152Google Android pmr_os.c privilege escalation7.8CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-0151Google Android intfgraph.c out-of-bounds write8.8CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-0150Google Android EdgeTPU firmware out-of-bounds write7.8CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-0149Google Android RtpSession::rtpSendRtcpPacket out-of-bounds write8.8CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-0148Google Android VideoRtpPayloadDecoderNode.cpp out-of-bounds write8.8CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-0147Google Android mfc_core_nal_q.c out-of-bounds write8.8CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-0146Google Android mfc_core_reg_api.c out-of-bounds write8.8CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-0145Google Android keymint insecure permissions4.0CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-0144Google Android AocAudioCodec.cpp memory safety bugs7.5CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-0143Google Android lwis_event.c memory corruption7.8CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-0142Google Android avb_rsa.c out-of-bounds read4.0CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-0141Google Android RtcpAppPacket.cpp out-of-bounds read5.3CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-0140Google Android RtpPacket::decodePacket out-of-bounds read4.3CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-0139Google Android Modem out-of-bounds write8.8CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-0138Google Android lwis_io_buffer.c out-of-bounds write7.8CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-0137Google Android edgetpu-dmabuf.c elevation of privilege7.8CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-0136Google Android Modem out-of-bounds read7.5CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-0135Google Android Modem out-of-bounds read7.8CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-0134Google Android recovery_ui.cpp information disclosure4.0CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-0133Google Android arm-smmu-v3.c privilege escalation7.8CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-0132Google Android Modem out-of-bounds write8.8CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-0131Google Android RtpPacket::decodePacket out-of-bounds access7.3CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-0130Google Android RtcpChunk::decodeRtcpChunk out-of-bounds read4.3CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-0129Google Android RtcpByePacket::decodeByePacket information disclosure4.3CISA ADP v3.10.2%2026-06-16Fix
CVE-2026-0128Google Android RtcpFbPacket::decodeRtcpFbPacket out-of-bounds read6.5v3.10.2%2026-06-16Fix
CVE-2026-0127Google Android cn_NrmmDecoder.cpp out-of-bounds read6.5CISA ADP v3.10.3%2026-06-16Fix
CVE-2026-0126Google Android WC-Radio out-of-bounds write9.8v3.10.3%2026-06-16Fix
CVE-2026-0125Google Android vpu_ioctl.c use-after-free7.0CISA ADP v3.10.1%2026-06-16Fix
CVE-2026-53705GStreamer WavPack decoder integer overflow7.6CNA v3.10.7%2026-06-15Fix
CVE-2026-53704GStreamer RealMedia demuxer metadata parser out-of-bounds read7.1CNA v3.10.5%2026-06-15Fix
CVE-2026-53703GStreamer RealMedia demuxer audio header parser out-of-bounds read7.1CNA v3.10.5%2026-06-15Fix
CVE-2026-53430grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/18.7CNA v4.00.5%2026-06-15Fix
CVE-2026-52722Red Hat GStreamer VMnc decoder integer overflow7.1CNA v3.10.7%2026-06-15Fix
CVE-2026-52721Red Hat GStreamer pcapparse element out-of-bounds read5.3CNA v3.10.1%2026-06-15Fix
CVE-2026-52720Red Hat Enterprise Linux 10 gstreamer1-plugins-bad-free: Gstreamer: Heap buffer overflow8.8CNA v3.11.2%2026-06-15Fix
CVE-2026-52719Red Hat Enterprise Linux 10 gstreamer1-plugins-bad-free: Gstreamer: Out-of-bounds read7.1CNA v3.10.6%2026-06-15Fix
CVE-2026-52718Red Hat Enterprise Linux 10 gstreamer1-plugins-bad-free: Gstreamer: Denial of service6.5CNA v3.10.7%2026-06-15Fix
CVE-2026-52704WooCommerce PDF Invoice Builder WordPress plugin remote code execution (RCE)10.0CNA v3.10.6%2026-06-15Fix
CVE-2026-52703FastDup WordPress plugin path traversal9.6CNA v3.10.5%2026-06-15Fix
CVE-2026-52702SEO Redirection WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-15Fix
CVE-2026-52700WCMultiShipping WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-15Fix
CVE-2026-52699VikRentCar WordPress plugin insecure direct object references (IDOR)7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-52697Taskbuilder WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-15Fix
CVE-2026-52695ABC Crypto Checkout WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-52694Signature Add-On for WooCommerce WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-52693eCommerce Product Catalog WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-15Fix
CVE-2026-52692Affiliates Manager WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-50892Nginx Proxy Manager Let's Encrypt certificate download information disclosure6.5CISA ADP v3.10.2%2026-06-15
CVE-2026-50891Filestash allows attackers to escalate privileges via sending a crafted request8.1CISA ADP v3.10.4%2026-06-15
CVE-2026-50890Bernd Bestel grocy stock reports SQL injection9.8CISA ADP v3.10.5%2026-06-15
CVE-2026-50889Lldap denial of service7.5CISA ADP v3.10.5%2026-06-15
CVE-2026-50888Koillection has an authenticated server-side request forgery issue8.1CISA ADP v3.10.4%2026-06-15Fix
CVE-2026-50887Shlink has a server-side request forgery issue9.1CISA ADP v3.10.4%2026-06-15
CVE-2026-50886Project Firefly III has incorrect access control in the webhook management component9.1CISA ADP v3.10.4%2026-06-15
CVE-2026-50885Sismics Docs (Teedy) share-based read endpoints improper access control7.5CISA ADP v3.10.4%2026-06-15
CVE-2026-50884Statping-ng allows attackers to escalate privileges to Administrator and access sensitive components8.8CISA ADP v3.10.4%2026-06-15
CVE-2026-50883matze wastebin syntax highlighting cross-site scripting9.6CISA ADP v3.10.6%2026-06-15
CVE-2026-50882anna-is-cute paste pastes endpoint denial of service7.5CISA ADP v3.10.5%2026-06-15
CVE-2026-50881impworks Bonsai privilege escalation8.1CISA ADP v3.10.4%2026-06-15
CVE-2026-50880YouTransfer has an issue in the sendmail transport integration that allows arbitrary code execution9.8CISA ADP v3.10.7%2026-06-15
CVE-2026-50879Andrei Marcu linx-server upload post handler denial of service7.5CISA ADP v3.10.5%2026-06-15
CVE-2026-50878Feuerhamster MailForm attachment handling denial of service7.5CISA ADP v3.10.5%2026-06-15
CVE-2026-50877Zhoros SuperBin path traversal7.5CISA ADP v3.10.9%2026-06-15
CVE-2026-50876Deck9 Input v2.0.1 A cross-site scripting5.4CISA ADP v3.10.2%2026-06-15
CVE-2026-50875Deck9 Input webhook endpoint improper access control8.1CISA ADP v3.10.4%2026-06-15
CVE-2026-50874kanishka-linux Reminiscence media features endpoint vulnerability8.1CISA ADP v3.11.9%2026-06-15
CVE-2026-50873flatnotes attachment handling arbitrary file upload9.8CISA ADP v3.10.6%2026-06-15
CVE-2026-50872fossar selfoss loopback request handling vulnerability9.8CISA ADP v3.10.8%2026-06-15
CVE-2026-50871kanishka-linux Reminiscence media archiving and export pipeline vulnerability9.8CISA ADP v3.12.8%2026-06-15
CVE-2026-50870Ben Busby Whoogle Search configuration endpoint information disclosure7.5CISA ADP v3.10.4%2026-06-15
CVE-2026-50869Bludit plugin API path traversal9.8CISA ADP v3.11.0%2026-06-15
CVE-2026-50100Ricoh Multiple printer drivers uncontrolled search path8.5CNA v4.00.2%2026-06-15
CVE-2026-49954Discuz! X5.0 local file inclusion via enable_disable.php Plugin Directory8.6CNA v4.00.7%2026-06-15
CVE-2026-49953Discuz! X5.0 CAPTCHA Bypass via Predictable Character Set6.9CNA v4.00.5%2026-06-15
CVE-2026-49952Discuz! X5.0 authentication bypass via dbbak.php Encryption Oracle9.3CNA v4.03.7%2026-06-15NucleiExploit code
CVE-2026-49781OttoKit WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-15Fix
CVE-2026-49780Dokan WordPress plugin privilege escalation8.8CNA v3.10.4%2026-06-15Fix
CVE-2026-49776GPTranslate WordPress plugin Unauthenticated SQL injection9.3CNA v3.10.4%2026-06-15Fix
CVE-2026-49775Welcart e-Commerce WordPress plugin broken access control6.5CNA v3.10.3%2026-06-15Fix
CVE-2026-49773FV Flowplayer Video Player WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-15Fix
CVE-2026-49770WP Travel Engine WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-15Fix
CVE-2026-49769wpForo Forum WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-15Fix
CVE-2026-49768Happyforms WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-15Fix
CVE-2026-49766WP User Manager WordPress plugin arbitrary file deletion9.9CNA v3.10.5%2026-06-15Fix
CVE-2026-49765Integration for Mailchimp and Contact Form 7 WordPress plugin Unauthenticated PHP object injection9.8CNA v3.10.6%2026-06-15Fix
CVE-2026-49764RegistrationMagic WordPress plugin broken authentication9.8CNA v3.10.6%2026-06-15Fix
CVE-2026-49763Integration for Contact Form 7 HubSpot WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-15Fix
CVE-2026-49757team-alembic ash_authentication OAuth2/OIDC account takeover in AshAuthentication9.2CNA v4.00.7%2026-06-15Fix
CVE-2026-49294Valhalla has reflected XSS via unsanitized JSONP callback parameter6.1CNA v3.10.3%2026-06-15
CVE-2026-49112Shared Files WordPress plugin path traversal7.5CNA v3.10.5%2026-06-15Fix
CVE-2026-49111Masteriyo - LMS WordPress plugin privilege escalation8.8CNA v3.10.4%2026-06-15Fix
CVE-2026-49110Upsell Order Bump Offer for WooCommerce WordPress plugin Price manipulation vulnerability7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-49109Integration for Salesforce and Contact Form 7 WordPress plugin Unauthenticated PHP object injection9.8CNA v3.10.6%2026-06-15Fix
CVE-2026-49106Integration for Contact Form 7 and Constant Contact WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-15Fix
CVE-2026-49105WP Zendesk for Contact Form 7 WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-15Exploit codeFix
CVE-2026-49104Integration for Keap/infusionsoft and Contact Form 7 WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-15Exploit codeFix
CVE-2026-49085WP Insightly for Contact Form 7 WordPress plugin PHP object injection9.8CNA v3.10.6%2026-06-15Exploit codeFix
CVE-2026-49083LatePoint WordPress plugin privilege escalation7.5CNA v3.10.3%2026-06-15Reported exploitedExploit codeFix
CVE-2026-49082Chatway Live Chat WordPress plugin Subscriber information disclosure7.4CNA v3.10.3%2026-06-15Fix
CVE-2026-49078WP Travel Engine WordPress plugin Other vulnerability type vulnerability7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-49070Knit Pay WordPress plugin broken access control7.5CNA v3.10.3%2026-06-15Fix
CVE-2026-49068Coupon Affiliates WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-49067Advanced 301 and 302 Redirect WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-15Fix
CVE-2026-49066Conekta Payment Gateway WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-49065Hippoo Mobile App for WooCommerce WordPress plugin broken access control8.2CNA v3.10.3%2026-06-15Fix
CVE-2026-49064GetPaid WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-49063Listdom WordPress plugin privilege escalation7.3CNA v3.10.3%2026-06-15Fix
CVE-2026-49062Faust.js WordPress plugin broken authentication8.8CNA v3.10.6%2026-06-15Fix
CVE-2026-49061WPC Product Options for WooCommerce WordPress plugin arbitrary file download7.5CNA v3.10.5%2026-06-15Fix
CVE-2026-49056WooCommerce PDF Invoices WordPress plugin Unauthenticated information disclosure7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-49055Drag and Drop Multiple File Upload Contact Form 7 WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-15Fix
CVE-2026-49043WP Migrate Lite WordPress plugin cross-site request forgery (CSRF)4.7CNA v3.10.2%2026-06-15Fix
CVE-2026-48970Really Simple SSL WordPress plugin broken authentication8.1CNA v3.10.5%2026-06-15Fix
CVE-2026-48969Really Simple SSL WordPress plugin broken access control6.5CNA v3.10.3%2026-06-15Fix
CVE-2026-48966Funnel Builder by FunnelKit WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-15Fix
CVE-2026-48965XCloner WordPress plugin sensitive data exposure6.5CNA v3.10.4%2026-06-15Fix
CVE-2026-48964ELEX WordPress HelpDesk and Customer Ticketing System plugin SQL injection8.5CNA v3.10.4%2026-06-15Fix
CVE-2026-48889Amelia WordPress plugin privilege escalation8.8CNA v3.10.4%2026-06-15Fix
CVE-2026-48887JS Help Desk WordPress plugin broken access control6.5CNA v3.10.3%2026-06-15Fix
CVE-2026-48886JS Help Desk WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-15Fix
CVE-2026-48885HollerBox WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-15Fix
CVE-2026-48883WPC Product Bundles for WooCommerce WordPress plugin broken access control7.5CNA v3.10.3%2026-06-15Fix
CVE-2026-48882WP Time Slots Booking Form WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-15Fix
CVE-2026-48881TrueBooker WordPress plugin broken access control9.1CNA v3.10.4%2026-06-15Fix
CVE-2026-48880WP Job Portal WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-15Fix
CVE-2026-48878Visual Link Preview WordPress plugin sensitive data exposure6.5CNA v3.10.4%2026-06-15Fix
CVE-2026-48876Stop Spammers WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-15Fix
CVE-2026-48874GamiPress WordPress plugin SQL injection8.5CNA v3.10.4%2026-06-15Fix
CVE-2026-48873Montonio for WooCommerce WordPress plugin broken access control7.5CNA v3.10.3%2026-06-15Fix
CVE-2026-48872EmbedPress WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-48871MW WP Form WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-15Fix
CVE-2026-48870King Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-15Fix
CVE-2026-48868Simple Shopping Cart WordPress plugin insecure direct object references (IDOR)7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-48867Quiz And Survey Master WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-15Fix
CVE-2026-48854Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc8.7CNA v4.00.5%2026-06-15Fix
CVE-2026-48853gRPC Erlang package vulnerable to remote code execution with attacker-controlled gRPC payloads9.2CNA v4.00.8%2026-06-15Fix
CVE-2026-48838Post SMTP WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-15Fix
CVE-2026-48836Easy Invoice WordPress plugin remote code execution (RCE)10.0CNA v3.10.9%2026-06-15Fix
CVE-2026-48835Contact Form by WPForms WordPress plugin broken access control7.5CNA v3.10.3%2026-06-15Fix
CVE-2026-48723BrowserStack Cypress CL: Command injection7.8CNA v3.10.9%2026-06-15Fix
CVE-2026-48714i18next-http-middleware missingKeyHandler prototype pollution9.1CNA v3.10.7%2026-06-15Fix
CVE-2026-48713i18next-fs-backend vulnerable to prototype pollution via crafted missing-key string9.1CNA v3.10.7%2026-06-15Fix
CVE-2026-48709OliveTin ValidateArgumentType API endpoint missing authorization3.7CNA v3.10.4%2026-06-15Fix
CVE-2026-48708OliveTin template engine race condition7.5CNA v3.10.5%2026-06-15Fix
CVE-2026-48599Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding7.6CNA v4.00.3%2026-06-15Fix
CVE-2026-48518juice-shop multi-juicer MultiJuicer: Login CSRF allows attacker to force victims into their team4.3CNA v3.10.2%2026-06-15Fix
CVE-2026-48157Slim has reflected XSS in the HtmlErrorRenderer6.1CNA v3.10.3%2026-06-15Fix
CVE-2026-48124Cursor Desktop sandbox escape via Claude hook configuration8.5CNA v4.00.2%2026-06-15Fix
CVE-2026-48114Metacat has an unauthenticated SQL injection9.8CNA v3.10.5%2026-06-15Fix
CVE-2026-48017DbGate: Remote code execution via functionName injection in loadReader endpoint8.8CNA v3.10.6%2026-06-15Exploit codeFix
CVE-2026-47835VMware Spring AI vector store metadata filtering vulnerability8.6CNA v3.10.4%2026-06-15Fix
CVE-2026-47825Spring Cloud Gateway Server Forwards headers from Untrusted Proxies in certain situations8.6CNA v3.10.2%2026-06-15Fix
CVE-2026-47777Mastodon has a consent-check bypass in its remote Collections7.5CNA v3.10.2%2026-06-15Exploit codeFix
CVE-2026-47261Wasmtime: WASI path_open(TRUNCATE) bypasses `FilePerms::write` host restriction7.5CNA v3.10.5%2026-06-15Fix
CVE-2026-45441WpEvently WordPress plugin Other vulnerability type vulnerability7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-45439Realtyna Organic IDX WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-15Fix
CVE-2026-45437Product Filter Widget for Elementor WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-15
CVE-2026-45390OCaml-tar archive extraction path traversal9.1CISA ADP v3.10.5%2026-06-15Fix
CVE-2026-45389OCaml-TLS client improper certificate validation7.4CISA ADP v3.10.2%2026-06-15Fix
CVE-2026-45388OCaml-TLS server improper certificate validation9.1CISA ADP v3.10.3%2026-06-15Fix
CVE-2026-44188Red Hat Ansible Automation Platform Ansible Lightspeed insufficient session expiration5.3CNA v3.10.4%2026-06-15Fix
CVE-2026-42775AutomatorWP WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-15Fix
CVE-2026-42752Stripe Payments WordPress plugin bypass vulnerability vulnerability6.5CNA v3.10.3%2026-06-15Fix
CVE-2026-42743Masteriyo - LMS WordPress plugin broken authentication6.5CNA v3.10.2%2026-06-15Fix
CVE-2026-42688Modula Image Gallery WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-15Fix
CVE-2026-42687EventPrime WordPress plugin PHP object injection8.1CNA v3.10.4%2026-06-15Fix
CVE-2026-42686EventPrime WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.4%2026-06-15Fix
CVE-2026-42668Email Marketing for WooCommerce by Omnisend WordPress plugin broken authentication7.5CNA v3.10.5%2026-06-15Fix
CVE-2026-42667Bookly WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-42666Salon booking system WordPress plugin broken access control7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-42665WP Data Access WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-15Fix
CVE-2026-42664AI Product Search for WooCommerce Motive Commerce Search WordPress plugin broken access control8.2CNA v3.10.4%2026-06-15Fix
CVE-2026-42663Simple Membership WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-15Fix
CVE-2026-42662Event Tickets WordPress plugin bypass vulnerability vulnerability6.5CNA v3.10.4%2026-06-15Fix
CVE-2026-42661WP Customer Area WordPress plugin path traversal8.8CNA v3.10.5%2026-06-15Fix
CVE-2026-42660Contest Gallery WordPress plugin sensitive data exposure6.5CNA v3.10.4%2026-06-15Fix
CVE-2026-42659Advanced Form Integration WordPress plugin broken access control6.5CNA v3.10.3%2026-06-15Fix
CVE-2026-42658Classified Listing WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-15Fix
CVE-2026-42657Contest Gallery WordPress plugin Other vulnerability type vulnerability6.5CNA v3.10.3%2026-06-15Fix
CVE-2026-42656Contest Gallery WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-15Fix
CVE-2026-42655Best Payments Plugin for WP WordPress plugin Payment bypass vulnerability7.5CNA v3.10.3%2026-06-15Fix
CVE-2026-42651Classified Listing WordPress plugin broken access control6.3CNA v3.10.3%2026-06-15Fix
CVE-2026-42650AutomatorWP WordPress plugin cross-site scripting (XSS)7.2CNA v3.10.3%2026-06-15Fix
CVE-2026-42649Favicon Rotator WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-15Fix
CVE-2026-42640Classified Listing WordPress plugin broken access control6.5CNA v3.10.3%2026-06-15Fix
CVE-2026-42639GD Rating System WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-15Fix
CVE-2026-42411CloudSecure WP Security WordPress plugin broken authentication8.1CNA v3.10.5%2026-06-15Fix
CVE-2026-42386Order Delivery Date for WooCommerce WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-15Fix
CVE-2026-42384Simply Schedule Appointments WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-06-15Fix
CVE-2026-42381Funnel Builder by FunnelKit WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-15Fix
CVE-2026-42378WP Full Stripe Free WordPress plugin broken authentication6.5CNA v3.10.4%2026-06-15Fix
CVE-2026-41708Spring Cloud Sleuth instrumentation of Spring TX DoS7.5CNA v3.10.5%2026-06-15Fix
CVE-2026-41556ProfilePress WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-06-15Fix
CVE-2026-40799Simple Cloudflare Turnstile WordPress plugin broken authentication5.8CNA v3.10.4%2026-06-15Fix
CVE-2026-40798wpForo Forum WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-15Fix
CVE-2026-40796WPPizza WordPress plugin sensitive data exposure6.5CNA v3.10.4%2026-06-15Fix
CVE-2026-40795Amelia WordPress plugin broken access control6.5CNA v3.10.3%2026-06-15Fix
CVE-2026-40794myCred WordPress plugin broken access control6.5CNA v3.10.3%2026-06-15Fix
CVE-2026-40793Groundhogg WordPress plugin broken access control6.5CNA v3.10.3%2026-06-15Fix
CVE-2026-40792KiviCare WordPress plugin insecure direct object references (IDOR)6.3CNA v3.10.3%2026-06-15Fix