CVE-2026 list

CVE-2026 records published in June 2026

Page six of eight: records 5,001 to 6,000 of the 7,316 published in June 2026, newest first. The first page carries the figures for June 2026.

CVE-2026 records published in June 2026, newest first: records 5,001 to 6,000 of 7,316
CVE Summary CVSS EPSS Published Signals
CVE-2026-47983Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47982Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47981Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47980Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47978Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47977Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47975Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47974Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47973Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47972Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47970Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47966Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47962Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47961Adobe Acrobat Reader out-of-bounds read5.5CNA v3.10.3%2026-06-09Fix
CVE-2026-47960Adobe ColdFusion improper restriction of XML external entity reference (XXE)7.4CNA v3.10.8%2026-06-09Fix
CVE-2026-47959Adobe Acrobat Reader stack-based buffer overflow7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-47958Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47957Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47956Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47955Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-47954Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47953Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47952Adobe Acrobat Reader heap-based buffer overflow7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-47951Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47950Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47949Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47948Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47947Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47946Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47945Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47944Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47943Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47942Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47941Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47939Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47938Adobe Campaign Classic (ACC) server-side request forgery (SSRF)10.0CNA v3.10.9%2026-06-09Fix
CVE-2026-47937Adobe Acrobat Reader uncontrolled search path element7.7CNA v3.10.3%2026-06-09Fix
CVE-2026-47936Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47935Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47933Adobe ColdFusion cross-site scripting (stored XSS)4.8CNA v3.10.4%2026-06-09Fix
CVE-2026-47932Adobe ColdFusion improper limitation of a pathname to a restricted directory (path traversal)8.8CNA v3.10.5%2026-06-09Fix
CVE-2026-47931Adobe ColdFusion improper input validation8.4CNA v3.10.5%2026-06-09Fix
CVE-2026-47930Adobe ColdFusion improper input validation8.1CNA v3.10.9%2026-06-09Fix
CVE-2026-47929Adobe ColdFusion incorrect authorization8.4CNA v3.10.5%2026-06-09Fix
CVE-2026-47928Adobe ColdFusion improper input validation9.6CNA v3.10.5%2026-06-09Fix
CVE-2026-47926Adobe Acrobat Reader out-of-bounds read5.5CNA v3.10.3%2026-06-09Fix
CVE-2026-47925Adobe Acrobat Reader integer overflow or wraparound5.5CNA v3.10.3%2026-06-09Fix
CVE-2026-47924Adobe Acrobat Reader use-after-free5.5CNA v3.10.3%2026-06-09Fix
CVE-2026-47923Adobe Acrobat Reader out-of-bounds read5.5CNA v3.10.3%2026-06-09Fix
CVE-2026-47921Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-47920Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-47919Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-47918Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-47917Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-47916Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-47915Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-47914Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-47913Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-47912Adobe Acrobat Reader use-after-free7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-47911Adobe Acrobat Reader out-of-bounds write7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-47910Adobe Dreamweaver Desktop incorrect authorization6.3CNA v3.10.2%2026-06-09Fix
CVE-2026-47909Adobe Dreamweaver Desktop improper input validation6.3CNA v3.10.3%2026-06-09Fix
CVE-2026-47908Adobe Dreamweaver Desktop access of uninitialized pointer7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-47907Adobe Dreamweaver Desktop improper access control8.6CNA v3.10.3%2026-06-09Fix
CVE-2026-47906Adobe Dreamweaver Desktop dependency on vulnerable third-party component8.6CNA v3.10.3%2026-06-09Fix
CVE-2026-47905Adobe CAI Content Credentials uncontrolled resource consumption6.2CNA v3.10.3%2026-06-09Fix
CVE-2026-47904Adobe CAI Content Credentials uncontrolled resource consumption6.2CNA v3.10.3%2026-06-09Fix
CVE-2026-47903Adobe CAI Content Credentials improper input validation6.2CNA v3.10.3%2026-06-09Fix
CVE-2026-47902Adobe CAI Content Credentials uncontrolled resource consumption6.2CNA v3.10.3%2026-06-09Fix
CVE-2026-47901Iframe escape by plugins in Logseq4.6CNA v4.00.2%2026-06-09
CVE-2026-47900Stored XSS via Unsanitized Plugin Metadata in Logseq4.6CNA v4.00.2%2026-06-09
CVE-2026-47899Arbitrary file read, Write, Rename, and Delete in Logseq8.7CNA v4.00.2%2026-06-09
CVE-2026-47656Microsoft Windows Boot Manager security feature bypass7.9CNA v3.10.4%2026-06-09Fix
CVE-2026-47654Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-06-09Fix
CVE-2026-47653Microsoft Windows remote Desktop client remote code execution8.8CNA v3.10.8%2026-06-09Fix
CVE-2026-47652Microsoft Windows Hyper-V remote code execution8.2CNA v3.10.3%2026-06-09Fix
CVE-2026-47648Microsoft Windows Storage elevation of privilege7.0CNA v3.10.3%2026-06-09Fix
CVE-2026-47643Microsoft Azure Stack Edge remote code execution9.8CNA v3.11.0%2026-06-09Fix
CVE-2026-47641Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-06-09Fix
CVE-2026-47640Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-06-09Fix
CVE-2026-47639Microsoft SharePoint server spoofing5.4CNA v3.10.6%2026-06-09Fix
CVE-2026-47638Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-06-09Fix
CVE-2026-47637Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-06-09Fix
CVE-2026-47636Microsoft SharePoint server spoofing5.4CNA v3.10.6%2026-06-09Fix
CVE-2026-47635Microsoft Outlook and Word remote code execution8.4CNA v3.10.4%2026-06-09Fix
CVE-2026-47634Microsoft SharePoint server spoofing7.3CNA v3.10.5%2026-06-09Fix
CVE-2026-47631Microsoft Exchange Server spoofing8.1CNA v3.10.5%2026-06-09Fix
CVE-2026-47352TYPO3 CMS broken access control in Backend API5.3CNA v4.00.4%2026-06-09Fix
CVE-2026-47351TYPO3 CMS broken access control in Clipboard5.3CNA v4.00.4%2026-06-09Fix
CVE-2026-47350TYPO3 CMS broken access control in DataHandler5.3CNA v4.00.4%2026-06-09Fix
CVE-2026-47349TYPO3 CMS broken access control in Recycler5.3CNA v4.00.4%2026-06-09Fix
CVE-2026-47348TYPO3 CMS cross-site scripting in Indexed Search5.1CNA v4.00.5%2026-06-09Fix
CVE-2026-47347TYPO3 CMS open redirect in Core Utilities5.3CNA v4.00.5%2026-06-09Fix
CVE-2026-47346TYPO3 CMS broken access control in Form Framework7.6CNA v4.00.4%2026-06-09Fix
CVE-2026-47343TYPO3 CMS Destructive Actions on File Mount Folders7.2CNA v4.00.4%2026-06-09Fix
CVE-2026-47298Microsoft SharePoint server remote code execution8.0CNA v3.11.0%2026-06-09Fix
CVE-2026-47293Microsoft Office Click-To-Run elevation of privilege7.0CNA v3.10.3%2026-06-09Fix
CVE-2026-47292Microsoft Visual Studio Code MSSQL extension remote code execution7.8CNA v3.10.5%2026-06-09Fix
CVE-2026-47291Microsoft Windows HTTP.sys remote code execution9.8CNA v3.11.0%2026-06-09Fix
CVE-2026-47289Microsoft Windows remote Desktop Client remote code execution8.8CNA v3.10.8%2026-06-09Fix
CVE-2026-47288Microsoft Windows Kerberos Key Distribution Center (KDC) remote code execution7.1CNA v3.10.4%2026-06-09Fix
CVE-2026-47287Microsoft Visual Studio Code tampering6.5CNA v3.10.8%2026-06-09Fix
CVE-2026-47284Microsoft Visual Studio Code information disclosure6.5CNA v3.10.9%2026-06-09Fix
CVE-2026-47281Microsoft Visual Studio Code elevation of privilege9.6CNA v3.10.8%2026-06-09Fix
CVE-2026-47106Ellucian Banner Self-Service stored XSS via getFacultyMeetingTimes API5.1CNA v4.00.3%2026-06-09Fix
CVE-2026-46749Siemens SINEC INS predictable password hash salt5.0CNA v4.00.2%2026-06-09Fix
CVE-2026-46748Siemens SINEC INS execution with unnecessary privileges8.7CNA v4.00.3%2026-06-09Fix
CVE-2026-46747Siemens SINEC INS directory listing5.3CNA v4.00.4%2026-06-09Fix
CVE-2026-46746Siemens SINEC INS OS command injection8.7CNA v4.00.8%2026-06-09Fix
CVE-2026-46517InternLM lmdeploy code injection7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-46492md-fileserver Markdown rendering cross-site scripting7.2CNA v3.10.3%2026-06-09Fix
CVE-2026-46433lldpd VLAN decapsulation out-of-bounds read6.5CNA v3.10.4%2026-06-09Fix
CVE-2026-46374SQLFluff: Uncontrolled resource consumption in parser7.5CNA v3.10.5%2026-06-09Fix
CVE-2026-46373SQLFluff: Recursive stack overflow in parser7.5CNA v3.10.5%2026-06-09Fix
CVE-2026-46332Linux kernel gb-beagleplay bootloader receive buffer buffer overflow8.0CNA v3.10.3%2026-06-09Fix
CVE-2026-46330Linux kernel SMC TCP ULP socket conversion use-after-free7.8CNA v3.10.1%2026-06-09Fix
CVE-2026-46329Linux kernel EROFS file-backed mount I/O vulnerability5.5v3.10.1%2026-06-09Fix
CVE-2026-46328Linux kernel AppArmor posix CPU timer rlimit vulnerability7.3CNA v3.10.2%2026-06-09Fix
CVE-2026-46327Linux kernel device mapper zone reporting vulnerability7.8CNA v3.10.1%2026-06-09Fix
CVE-2026-46326Linux kernel mprls0025pa pressure sensor SPI transfer vulnerability8.4CNA v3.10.2%2026-06-09Fix
CVE-2026-46325Linux kernel RXE memory region page size handling vulnerability9.8CNA v3.10.4%2026-06-09Fix
CVE-2026-46324Linux kernel nf_tables netlink hook list vulnerability7.8CNA v3.10.1%2026-06-09Fix
CVE-2026-46323Linux kernel GRO zerocopy skb merging use-after-free7.8CNA v3.10.1%2026-06-09Fix
CVE-2026-46322Linux kernel tun XDP receive path vulnerability7.1CNA v3.10.1%2026-06-09Fix
CVE-2026-46321Linux kernel tun XDP receive path vulnerability7.1CNA v3.10.1%2026-06-09Fix
CVE-2026-46320Linux kernel tap XDP receive path vulnerability7.4CNA v3.10.3%2026-06-09Fix
CVE-2026-46319Linux kernel act_ct flow table lookup use-after-free7.8CNA v3.10.1%2026-06-09Fix
CVE-2026-46318Linux kernel hugetlbfs VMA lock allocation vulnerability5.5v3.10.1%2026-06-09Fix
CVE-2026-46317Linux kernel arm64 nested MMU array vulnerability8.8CNA v3.10.1%2026-06-09Fix
CVE-2026-46316Linux kernel vGIC ITS translation cache vulnerability9.3CNA v3.10.2%2026-06-09Fix
CVE-2026-46315Linux kernel io_uring waitid operation vulnerability5.5v3.10.1%2026-06-09Fix
CVE-2026-45771Freeswitch denial of service in SIP PUBLISH requests via XML entity expansion7.5CNA v3.10.5%2026-06-09Fix
CVE-2026-45658Microsoft Windows BitLocker security feature bypass7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-45657Microsoft Windows Kernel remote code execution9.8CNA v3.11.0%2026-06-09Fix
CVE-2026-45656Microsoft Windows UEFI Secure Boot security feature bypass7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-45655Microsoft Windows BitLocker security feature bypass5.3CNA v3.10.5%2026-06-09Fix
CVE-2026-45654Microsoft Windows secure Boot security feature bypass7.9CNA v3.10.3%2026-06-09Fix
CVE-2026-45653Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.3%2026-06-09Fix
CVE-2026-45650Microsoft Bing Search spoofing4.3CNA v3.10.7%2026-06-09Fix
CVE-2026-45649Microsoft Excel Office for Android spoofing7.1CNA v3.10.4%2026-06-09Fix
CVE-2026-45648Microsoft Windows Active Directory Domain services remote code execution8.8CNA v3.10.9%2026-06-09Fix
CVE-2026-45647Microsoft Defender For Endpoint for Mac elevation of privilege5.5CNA v3.10.2%2026-06-09Fix
CVE-2026-45645Microsoft Office remote code execution7.8CNA v3.10.5%2026-06-09Fix
CVE-2026-45644Microsoft Live Share Canvas SDK elevation of privilege8.0CNA v3.10.8%2026-06-09Fix
CVE-2026-45643Microsoft Word remote code execution7.8CNA v3.10.5%2026-06-09Fix
CVE-2026-45642Microsoft Azure Attestation service and Device Health Attestation service spoofing3.9CNA v3.10.4%2026-06-09Fix
CVE-2026-45641Microsoft Windows Hyper-V remote code execution8.4CNA v3.10.3%2026-06-09Fix
CVE-2026-45640Microsoft Windows Bluetooth Port driver elevation of privilege7.0CNA v3.10.3%2026-06-09Fix
CVE-2026-45639Microsoft Windows Remote Desktop Protocol (RDP) information disclosure7.5CNA v3.11.0%2026-06-09Fix
CVE-2026-45638Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-45637Microsoft DWM Core library elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-45636Microsoft Windows NTFS remote code execution7.8CNA v3.10.5%2026-06-09Fix
CVE-2026-45635Microsoft Windows UPnP device host remote code execution8.1CNA v3.10.7%2026-06-09Fix
CVE-2026-45634Microsoft Windows DHCP client information disclosure5.5CNA v3.10.4%2026-06-09Fix
CVE-2026-45608Microsoft Windows DHCP client information disclosure6.8CNA v3.10.4%2026-06-09Fix
CVE-2026-45607Microsoft Windows Hyper-V remote code execution8.4CNA v3.10.3%2026-06-09Fix
CVE-2026-45606Microsoft UxTheme library (uxtheme.dll) denial of service5.5CNA v3.10.4%2026-06-09Fix
CVE-2026-45605Microsoft Windows Bluetooth service elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-45604Microsoft Windows Managed Installer information disclosure5.5CNA v3.10.4%2026-06-09Fix
CVE-2026-45603Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.2%2026-06-09Fix
CVE-2026-45602Microsoft Windows Dynamic Host Configuration Protocol (DHCP) tampering9.1CNA v3.10.4%2026-06-09Fix
CVE-2026-45601Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.2%2026-06-09Fix
CVE-2026-45600Microsoft Windows Kernel-Mode driver elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-45599Microsoft Windows UPnP device host remote code execution8.1CNA v3.10.7%2026-06-09Fix
CVE-2026-45598Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.2%2026-06-09Fix
CVE-2026-45597Microsoft Windows UI Automation Manager (uiamanager.dll) elevation of privilege7.0CNA v3.10.2%2026-06-09Fix
CVE-2026-45596Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.2%2026-06-09Fix
CVE-2026-45595Microsoft Windows Mark of the web security feature bypass5.4CNA v3.10.5%2026-06-09Fix
CVE-2026-45594Microsoft Windows Application Identity (AppID) information disclosure5.5CNA v3.10.5%2026-06-09Fix
CVE-2026-45593Microsoft Windows SDK elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-45592Microsoft Windows Internet (wininet.dll) elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-45591ASP.NET Core denial of service7.5CNA v3.12.4%2026-06-09Fix
CVE-2026-45588Microsoft Windows secure Boot security feature bypass7.9CNA v3.10.4%2026-06-09Fix
CVE-2026-45586Microsoft Windows Collaborative Translation Framework (CTFMON) elevation of privilege7.8CNA v3.10.4%2026-06-09Reported exploitedFix
CVE-2026-45583Microsoft Exchange Server remote code execution7.5CNA v3.10.7%2026-06-09Fix
CVE-2026-45504Microsoft Exchange Server elevation of privilege8.8CNA v3.10.8%2026-06-09Exploit codeFix
CVE-2026-45503Microsoft Exchange Server information disclosure8.1CNA v3.10.9%2026-06-09Fix
CVE-2026-45502Microsoft Exchange Server information disclosure5.0CNA v3.10.6%2026-06-09Emerging ThreatsFix
CVE-2026-45501Microsoft Exchange Server spoofing6.5CNA v3.10.5%2026-06-09Fix
CVE-2026-45500Microsoft Exchange Server spoofing6.1CNA v3.10.4%2026-06-09Fix
CVE-2026-45491Microsoft .NET tampering6.2CNA v3.10.4%2026-06-09Fix
CVE-2026-45490Microsoft .NET SDK elevation of privilege7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-45487Microsoft Windows Program Compatibility Assistant service elevation of privilege7.8CNA v3.10.2%2026-06-09Fix
CVE-2026-45486Microsoft Word remote code execution7.8CNA v3.10.5%2026-06-09Fix
CVE-2026-45485Microsoft Office information disclosure3.3CNA v3.10.6%2026-06-09Fix
CVE-2026-45484Microsoft SharePoint elevation of privilege8.8CNA v3.12.3%2026-06-09Fix
CVE-2026-45483Microsoft Office Project Server spoofing4.6CNA v3.10.6%2026-06-09Fix
CVE-2026-45482Microsoft Visual Studio Code CoPilot Chat security feature bypass8.4CNA v3.10.4%2026-06-09Fix
CVE-2026-45481Microsoft SharePoint server spoofing7.3CNA v3.10.6%2026-06-09Fix
CVE-2026-45479Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-06-09Fix
CVE-2026-45476Microsoft Azure Network Adapter elevation of privilege8.2CNA v3.10.3%2026-06-09Fix
CVE-2026-45475Microsoft Office remote code execution7.8CNA v3.10.6%2026-06-09Fix
CVE-2026-45474Microsoft Office remote code execution8.4CNA v3.10.4%2026-06-09Fix
CVE-2026-45472Microsoft Office remote code execution8.4CNA v3.10.4%2026-06-09Fix
CVE-2026-45471Microsoft Word remote code execution7.8CNA v3.10.6%2026-06-09Fix
CVE-2026-45469Microsoft Excel remote code execution7.8CNA v3.10.5%2026-06-09Fix
CVE-2026-45468Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-06-09Fix
CVE-2026-45467Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-06-09Fix
CVE-2026-45466Microsoft Word information disclosure3.3CNA v3.10.5%2026-06-09Fix
CVE-2026-45465Microsoft SharePoint server spoofing5.4CNA v3.10.6%2026-06-09Fix
CVE-2026-45464Microsoft SharePoint server spoofing5.4CNA v3.10.6%2026-06-09Fix
CVE-2026-45463Microsoft Office remote code execution8.4CNA v3.10.4%2026-06-09Fix
CVE-2026-45462Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-06-09Fix
CVE-2026-45461Microsoft Office remote code execution8.4CNA v3.10.4%2026-06-09Fix
CVE-2026-45460Microsoft Office information disclosure4.7CNA v3.10.4%2026-06-09Fix
CVE-2026-45459Microsoft Excel security feature bypass3.3CNA v3.10.5%2026-06-09Fix
CVE-2026-45458Microsoft Outlook and Word remote code execution8.4CNA v3.10.4%2026-06-09Fix
CVE-2026-45457Microsoft Word remote code execution7.8CNA v3.10.5%2026-06-09Fix
CVE-2026-45456Microsoft Outlook and Word remote code execution8.4CNA v3.10.4%2026-06-09Fix
CVE-2026-45455Microsoft Excel information disclosure3.3CNA v3.10.8%2026-06-09Fix
CVE-2026-45454Microsoft SharePoint remote code execution6.5CNA v3.11.5%2026-06-09Emerging ThreatsFix
CVE-2026-45453Microsoft SharePoint server spoofing5.4CNA v3.10.6%2026-06-09Fix
CVE-2026-45447OpenSSL heap use-after-free in the PKCS7_verify function8.8CISA ADP v3.14.0%2026-06-09Exploit codeFix
CVE-2026-45446OpenSSL Incorrect Tag Processing for Empty messages in AES-GCM-SIV and AES-SIV modes4.8CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-45445OpenSSL AES-OCB IV Ignored on EVP_Cipher Path7.5CISA ADP v3.10.7%2026-06-09Fix
CVE-2026-44963Veeam Backup and Replication deserialization of untrusted data9.4CNA v4.00.6%2026-06-09Reported exploitedFix
CVE-2026-44824Microsoft Office remote code execution7.8CNA v3.10.6%2026-06-09Fix
CVE-2026-44823Microsoft Excel remote code execution7.8CNA v3.10.5%2026-06-09Fix
CVE-2026-44822Microsoft Excel information disclosure8.2CNA v3.10.6%2026-06-09Fix
CVE-2026-44821Microsoft Office information disclosure5.5CNA v3.10.6%2026-06-09Fix
CVE-2026-44820Microsoft Excel remote code execution7.8CNA v3.10.5%2026-06-09Fix
CVE-2026-44819Microsoft Office remote code execution7.8CNA v3.10.6%2026-06-09Fix
CVE-2026-44818Microsoft Excel remote code execution7.0CNA v3.10.3%2026-06-09Fix
CVE-2026-44817Microsoft Excel remote code execution7.8CNA v3.10.5%2026-06-09Fix
CVE-2026-44815Microsoft Windows DHCP client service remote code execution9.8CNA v3.11.0%2026-06-09Fix
CVE-2026-44814Microsoft Windows DWM Core library information disclosure5.5CNA v3.10.4%2026-06-09Fix
CVE-2026-44813Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-44812Windows Graphics component remote code execution7.8CNA v3.10.5%2026-06-09Fix
CVE-2026-44811Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-44810Microsoft Cryptographic services elevation of privilege8.4CNA v3.10.3%2026-06-09Fix
CVE-2026-44809Microsoft Windows Common Log File System driver elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-44808Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-44807Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-44805Microsoft Windows Network Controller (NC) host agent denial of service5.5CNA v3.10.4%2026-06-09Fix
CVE-2026-44804Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-44803Windows Graphics component remote code execution7.8CNA v3.10.5%2026-06-09Fix
CVE-2026-44802Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-44801Microsoft Remote Desktop client remote code execution7.5CNA v3.10.6%2026-06-09Fix
CVE-2026-44799Microsoft Remote Desktop client remote code execution7.5CNA v3.10.6%2026-06-09Fix
CVE-2026-44757Cross-site scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager4.7CNA v3.10.2%2026-06-09Fix
CVE-2026-44755Email spoofing vulnerability in SAP Business Objects Business Intelligence Platform4.3CNA v3.10.2%2026-06-09Fix
CVE-2026-44754Missing caller identification check-in for ODP Data Replication APIs6.6CNA v3.10.3%2026-06-09Fix
CVE-2026-44751Missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform7.1CNA v3.10.4%2026-06-09Fix
CVE-2026-44750Missing authorization check in SAP MDG (Review Match Groups application)4.3CNA v3.10.3%2026-06-09Fix
CVE-2026-44748XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform9.9CNA v3.10.3%2026-06-09Fix
CVE-2026-44746Reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet)6.1CNA v3.10.3%2026-06-09Fix
CVE-2026-44744SQL injection vulnerability in SAP S/4HANA6.5CNA v3.10.4%2026-06-09Fix
CVE-2026-44743SAP Business Objects information disclosure3.7CNA v3.10.3%2026-06-09Fix
CVE-2026-44275Dell/Alienware Purchased Apps link following6.3CNA v3.10.1%2026-06-09Fix
CVE-2026-44083QNAP QuMagie insecure direct object reference8.7CNA v4.00.6%2026-06-09Fix
CVE-2026-42993Microsoft Windows remote Desktop client remote code execution7.5CNA v3.10.6%2026-06-09Fix
CVE-2026-42992Microsoft Windows remote Desktop Client remote code execution7.5CNA v3.10.6%2026-06-09Fix
CVE-2026-42991Microsoft Windows Push Notifications elevation of privilege7.8CNA v3.10.2%2026-06-09Fix
CVE-2026-42989Microsoft Windows winlogon elevation of privilege7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-42987Microsoft Windows Deployment Services (WDS) remote code execution8.1CNA v3.10.7%2026-06-09Fix
CVE-2026-42986Microsoft Graphics component elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-42985Microsoft Remote Desktop client remote code execution8.8CNA v3.10.8%2026-06-09Fix
CVE-2026-42984Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.3%2026-06-09Fix
CVE-2026-42983Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-42981Microsoft Windows Performance Monitor remote code execution8.1CNA v3.10.7%2026-06-09Fix
CVE-2026-42980Microsoft Windows NT OS Kernel elevation of privilege7.8CNA v3.10.3%2026-06-09Exploit codeFix
CVE-2026-42979Microsoft Windows Push Notifications elevation of privilege7.8CNA v3.10.2%2026-06-09Fix
CVE-2026-42978Microsoft Windows Push Notifications elevation of privilege7.8CNA v3.10.2%2026-06-09Exploit codeFix
CVE-2026-42977Microsoft Windows Push Notifications elevation of privilege7.8CNA v3.10.2%2026-06-09Fix
CVE-2026-42974Microsoft Windows Performance Monitor remote code execution8.1CNA v3.10.7%2026-06-09Fix
CVE-2026-42973Microsoft Windows Push Notification information disclosure5.5CNA v3.10.5%2026-06-09Fix
CVE-2026-42972Microsoft Windows Hyper-V information disclosure5.5CNA v3.10.5%2026-06-09Fix
CVE-2026-42971Microsoft Windows Push Notification information disclosure5.5CNA v3.10.5%2026-06-09Fix
CVE-2026-42970Microsoft Windows Push Notification information disclosure5.5CNA v3.10.5%2026-06-09Fix
CVE-2026-42969Microsoft Windows Push Notification information disclosure5.5CNA v3.10.4%2026-06-09Fix
CVE-2026-42968Microsoft Windows Telephony Server information disclosure5.5CNA v3.10.4%2026-06-09Fix
CVE-2026-42916Microsoft Windows NT OS Kernel elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-42915Microsoft Windows VMSwitch denial of service5.5CNA v3.10.4%2026-06-09Fix
CVE-2026-42914Microsoft Windows Kerberos denial of service5.3CNA v3.10.8%2026-06-09Fix
CVE-2026-42913Microsoft Remote Desktop client remote code execution7.5CNA v3.10.5%2026-06-09Fix
CVE-2026-42912Microsoft Windows Telephony service elevation of privilege7.0CNA v3.10.2%2026-06-09Fix
CVE-2026-42911Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.3%2026-06-09Fix
CVE-2026-42910Microsoft Windows Hotpatch Monitoring service elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-42909Microsoft Remote Desktop client remote code execution7.5CNA v3.10.5%2026-06-09Fix
CVE-2026-42908Microsoft Windows Remote Desktop Protocol (RDP) information disclosure7.5CNA v3.11.0%2026-06-09Fix
CVE-2026-42907Microsoft Windows Shell information disclosure6.5CNA v3.11.0%2026-06-09Fix
CVE-2026-42906Microsoft Windows Shell information disclosure5.5CNA v3.10.5%2026-06-09Fix
CVE-2026-42905Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-42904Microsoft Windows TCP/IP elevation of privilege9.6CNA v3.10.5%2026-06-09Fix
CVE-2026-42903Microsoft Windows Kerberos denial of service6.5CNA v3.11.1%2026-06-09Fix
CVE-2026-42902Microsoft PowerToys elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-42837Microsoft Windows Projected File System elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-42836Microsoft Windows Function Discovery service (fdwsd.dll) elevation of privilege7.0CNA v3.10.2%2026-06-09Fix
CVE-2026-42835Microsoft Teams for Android information disclosure8.1CNA v3.11.2%2026-06-09Fix
CVE-2026-42829Microsoft Windows Administrator Protection Secure Feature Bypass vulnerability7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-42828Microsoft Windows Projected File System elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-42771OpenSSL possible out-of-bounds read in X509_VERIFY_PARAM_set1_email6.2CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-42770OpenSSL FFC-DH Peer Validation Uses Attacker-Supplied q3.7CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-42769OpenSSL Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate5.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-42768OpenSSL Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt and PKCS7_decrypt3.7CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-42767OpenSSL null pointer dereference in CRMF EncryptedValue Decryption5.9CISA ADP v3.10.4%2026-06-09Fix
CVE-2026-42766OpenSSL possible null dereference in Password-Based CMS Decryption5.9CISA ADP v3.11.1%2026-06-09Fix
CVE-2026-42765OpenSSL null dereference in Certificate Verification with OCSP Checking7.5CISA ADP v3.10.5%2026-06-09Fix
CVE-2026-42764OpenSSL null pointer dereference in QUIC Server Initial Packet Handling7.5CISA ADP v3.10.8%2026-06-09Fix
CVE-2026-42599Cross-site scripting via spread attributes in Svelte SSR5.1CNA v4.00.2%2026-06-09Fix
CVE-2026-42573Svelte: XSS via DOM Clobbering of Internal Framework State5.3CNA v4.00.3%2026-06-09Fix
CVE-2026-42570Svelte devalue: DoS via sparse array deserialization7.5CNA v3.10.7%2026-06-09Fix
CVE-2026-42567Svelte svelte:element tag validation denial of service5.9CNA v4.00.4%2026-06-09Fix
CVE-2026-41986Huawei HarmonyOS logic bypass vulnerability in the file system2.4CNA v3.10.2%2026-06-09Fix
CVE-2026-41985Huawei HarmonyOS UAF vulnerability in the package management module5.1CNA v3.10.1%2026-06-09Fix
CVE-2026-41984Huawei HarmonyOS UAF vulnerability in the package management module5.2CNA v3.10.1%2026-06-09Fix
CVE-2026-41983Huawei HarmonyOS DoS vulnerability in the browser kernel4.3CNA v3.10.2%2026-06-09Fix
CVE-2026-41982Huawei HarmonyOS race condition vulnerability in the IPC module6.4CNA v3.10.2%2026-06-09Fix
CVE-2026-41981Huawei HarmonyOS out-of-bounds write vulnerability in the IPC module5.3CNA v3.10.1%2026-06-09Fix
CVE-2026-41980Huawei HarmonyOS permission control vulnerability in the file preview module5.5CNA v3.10.1%2026-06-09Fix
CVE-2026-41979Huawei HarmonyOS permission control vulnerability in the print module5.5CNA v3.10.1%2026-06-09Fix
CVE-2026-41978Huawei HarmonyOS permission weakness4.4CNA v3.10.1%2026-06-09
CVE-2026-41977Huawei HarmonyOS DoS vulnerability in the log service5.0CNA v3.10.1%2026-06-09Fix
CVE-2026-41976Huawei HarmonyOS permission control vulnerability in the audio framework6.6CNA v3.10.1%2026-06-09Fix
CVE-2026-41975Huawei HarmonyOS permission management vulnerability in the network management module6.3CNA v3.10.1%2026-06-09Fix
CVE-2026-41974Huawei HarmonyOS permission control vulnerability in service notifications3.6CNA v3.10.1%2026-06-09Fix
CVE-2026-41973Huawei HarmonyOS permission control vulnerability in calls5.9CNA v3.10.1%2026-06-09Fix
CVE-2026-41972Huawei HarmonyOS path traversal vulnerability in the SMS app5.4CNA v3.10.2%2026-06-09Fix
CVE-2026-41855Spring Framework unsafe deserialization via Jackson JMS Converters8.1CNA v3.10.5%2026-06-09Fix
CVE-2026-41854Spring Framework server-side request forgery via UriComponentsBuilder4.2CNA v3.10.2%2026-06-09Fix
CVE-2026-41853Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux5.3CNA v3.10.3%2026-06-09Fix
CVE-2026-41852Spring Framework arbitrary Method Invocation in SpEL Expressions3.7CNA v3.10.3%2026-06-09Fix
CVE-2026-41851Spring Framework denial of service via Unbounded Cache in SpEL5.3CNA v3.10.5%2026-06-09Fix
CVE-2026-41850Spring Framework Algorithmic denial of service via SpEL Expressions7.5CNA v3.10.5%2026-06-09Fix
CVE-2026-41849Spring Framework denial of service via integer overflow in SpEL Expressions7.5CNA v3.10.5%2026-06-09Fix
CVE-2026-41848Spring Framework denial of service via AntPathMatcher3.7CNA v3.10.4%2026-06-09Fix
CVE-2026-41847Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL4.8CNA v3.10.3%2026-06-09Fix
CVE-2026-41846Spring Framework cross-site scripting via JSP Form Tags5.9CNA v3.10.2%2026-06-09Fix
CVE-2026-41845Spring Framework cross-site scripting via JavaScriptUtils7.1CNA v3.10.3%2026-06-09Fix
CVE-2026-41844Spring Framework open redirect in Spring MVC and WebFlux4.2CNA v3.10.2%2026-06-09Fix
CVE-2026-41843Spring Framework path traversal via Versioned Static Resources in Spring MVC and WebFlux5.9CNA v3.10.4%2026-06-09Fix
CVE-2026-41842Spring Framework denial of service via Versioned Resources in Spring MVC and WebFlux7.5CNA v3.10.5%2026-06-09Fix
CVE-2026-41841Spring Framework information disclosure via Static Resource Cache in Spring MVC and WebFlux5.9CNA v3.10.3%2026-06-09Fix
CVE-2026-41840Spring Framework denial of service via Multipart requests in WebFlux5.9CNA v3.10.4%2026-06-09Fix
CVE-2026-41839Spring Framework Escalation via session fixation in WebFlux4.2CNA v3.10.2%2026-06-09Fix
CVE-2026-41838Spring Framework predictable session ID in WebSocket module4.8CNA v3.10.3%2026-06-09Fix
CVE-2026-41731VMware Spring for Apache Kafka Kafka header mapper deserialization of untrusted data8.1CNA v3.10.6%2026-06-09Fix
CVE-2026-41720Authentication bypass with Empty Password in Spring LDAP7.4CNA v3.10.4%2026-06-09Fix
CVE-2026-41715Reactor Netty HTTP client leaks credentials on Protocol Downgrade Redirect6.1CNA v3.10.2%2026-06-09Fix
CVE-2026-41710Spring Retry Cache Exhaustion in Stateful Retries leads to denial of service5.9CNA v3.10.4%2026-06-09Fix
CVE-2026-41539QNAP QTS and QuTS hero cross-site scripting6.3CNA v4.00.3%2026-06-09Fix
CVE-2026-41116Dell Inventory Collector Client link following6.3CNA v3.10.1%2026-06-09Fix
CVE-2026-41108Microsoft Windows DNS client elevation of privilege7.0CNA v3.10.3%2026-06-09Fix
CVE-2026-41098Microsoft Azure Stack Edge spoofing8.4CNA v3.10.8%2026-06-09Fix
CVE-2026-41092Microsoft Kinect elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-41031A stored cross-site scripting (XSS) vulnerability occurs in Vinna Process Monitor9.3CNA v4.00.4%2026-06-09Fix
CVE-2026-41007Spring HATEOAS heap exhaustion through unbounded internal caching7.5CNA v3.10.5%2026-06-09Fix
CVE-2026-41006Spring HATEOAS Collection+JSON/UBER deserializers do not honor Jackson configuration7.5CNA v3.10.4%2026-06-09Fix
CVE-2026-40984Micrometer HTTP server instrumentations DoS7.5CNA v3.11.1%2026-06-09Fix
CVE-2026-40983Micrometer gRPC server instrumentation DoS7.5CNA v3.10.8%2026-06-09Fix
CVE-2026-40639Dell Edge Gateway 3000 weak password encoding5.7CNA v3.10.2%2026-06-09Fix
CVE-2026-40409Microsoft Windows Universal Disk Format File System Driver (UDFS) elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-40404Microsoft Windows Universal Disk Format File System Driver (UDFS) elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-40376Microsoft Visual Studio Code elevation of privilege7.5CNA v3.10.7%2026-06-09Fix
CVE-2026-40371Microsoft Dynamics 365 (on-premises) elevation of privilege8.8CNA v3.10.8%2026-06-09Fix
CVE-2026-40128Directory traversal vulnerability in SAP NetWeaver Application Server Java (Web Container)9.0CNA v3.10.6%2026-06-09Fix
CVE-2026-39170SEMCMS admin user management cross-site request forgery6.3CISA ADP v3.10.2%2026-06-09
CVE-2026-39169SEMCMS SEMCMS_copy.php improper access control7.5CISA ADP v3.10.4%2026-06-09
CVE-2026-38615DedeCMS file manager module OS command injection9.8CISA ADP v3.10.9%2026-06-09
CVE-2026-36823Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAuthUserInfo parameter of the formAddWebAuthUser function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36822Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the macAddr parameter of the formDelStaState function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36821Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36820Tenda W20E webAuthWhiteUserInfo parameter stack-based buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36819Tenda W20E bindMACAddr parameter stack-based buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36818Tenda W20E wewifiWhiteUserInfo parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36817Tenda W15E webAuthWhiteUserInfo parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36816Tenda W15E wewifiWhiteUserInfo parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36815Tenda W15E hostname parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36813Tenda W15E picCropName parameter stack-based buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36811Tenda W15E picName parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36810Tenda W15E gotoUrl parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36809Tenda W15E webAuthWhiteID parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36808Tenda W15E webAuthUserInfo parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36807Tenda W15E webAuthUserPwd parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36806Tenda W15E webAuthUserPwd parameter stack-based buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36805Tenda G0 Saveqqlist function stack-based buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36803Tenda PW201A page parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36802Tenda PW201A page parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36801Tenda G0 IPMacBindRule parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36800Tenda G0 IPMacBindIndex parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36799Tenda G0 portalAuth parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36798Tenda G0 formSetDebugCfgr function stack-based buffer overflow6.5CISA ADP v3.10.4%2026-06-09
CVE-2026-36797Tenda G0 IPMacBindRuleIp parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36796Tenda G0 picCropName parameter buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36794Tenda W3 Wireless Router R7WebsSecurityHandler function stack-based buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36793Tenda W3 Wireless Router formwrlSSIDset function stack-based buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36792Tenda W3 Wireless Router wl_radio parameter stack-based buffer overflow7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36791Shenzhen Tenda Technology Co., Ltd Tenda O3v3 v1.0.0.5 was discovered to contain a stack overflow in the save_list_data parameter of the formSetCfm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36784Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the ip parameter of the fromNetToolGet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a HTTP request.7.5CISA ADP v3.10.5%2026-06-09
CVE-2026-36783Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the domain parameter of the fromNetToolGet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36779Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain multiple stack overflows in the fromVirtualSer function via the puVar2, puVar1, __s2, __s1_00, and puVar3 parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a cr7.5CISA ADP v3.10.6%2026-06-09
CVE-2026-36778Tenda O3 Wireless Router web security handler stack-based buffer overflow4.9CISA ADP v3.10.5%2026-06-09
CVE-2026-36777Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the param_1 parameter of the formSetCfm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.6.5CISA ADP v3.10.3%2026-06-09
CVE-2026-36773Tenda W3 Wireless Router reboot function stack-based buffer overflow6.5CISA ADP v3.10.3%2026-06-09
CVE-2026-36772Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl_radio parameter of the formwrlSSIDget function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.6.5CISA ADP v3.10.3%2026-06-09
CVE-2026-36771Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.3(2204) was discovered to contain a stack overflow in the wl_radio parameter of the formwrlSSIDset function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.7.5CISA ADP v3.10.5%2026-06-09
CVE-2026-36770Tenda US_W3V1.0BR reboot function stack-based buffer overflow7.5CISA ADP v3.10.5%2026-06-09
CVE-2026-36728FastapiAdmin AI assistant chat cross-site scripting5.4CISA ADP v3.10.2%2026-06-09
CVE-2026-36727bookcars social sign-in endpoint authentication bypass9.1CISA ADP v3.10.5%2026-06-09
CVE-2026-36726bookcars temporary license file deletion endpoint path traversal5.3CISA ADP v3.10.7%2026-06-09
CVE-2026-36725/system/notice/create endpoint of FastapiAdmin v2.2.0 markdown based cross-site scripting6.1CISA ADP v3.10.3%2026-06-09
CVE-2026-36724FastapiAdmin job update endpoint denial of service6.5CISA ADP v3.10.4%2026-06-09
CVE-2026-36723bookcars create-user API path traversal8.8CISA ADP v3.11.4%2026-06-09
CVE-2026-36722/api/create-car-image component of bookcars v8.3 An arbitrary file upload5.4CISA ADP v3.10.3%2026-06-09
CVE-2026-36721validateAccessToken function of bookcars v8.3 lack of cryptographic improper signature verification9.8CISA ADP v3.10.4%2026-06-09
CVE-2026-36720bookcars v8.3 insecure permissions8.1CISA ADP v3.10.4%2026-06-09
CVE-2026-36719/api/v1/user/info endpoint of AgentChat v2.3.0 An information disclosure7.5CISA ADP v3.10.4%2026-06-09
CVE-2026-35188OpenSSL double free when Checking OCSP Stapled Response5.0CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-34905Apache Answer: Unlisted Questions Accessible via Direct API Access6.5CISA ADP v3.10.5%2026-06-09Fix
CVE-2026-34713Adobe CAI Content Credentials uncontrolled resource consumption7.5CNA v3.10.9%2026-06-09Fix
CVE-2026-34712Adobe CAI Content Credentials improper input validation7.5CNA v3.10.9%2026-06-09Fix
CVE-2026-34711Adobe CAI Content Credentials integer overflow or wraparound7.5CNA v3.11.0%2026-06-09Fix
CVE-2026-34710Substance3D Sampler out-of-bounds write7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-34709Substance3D Sampler out-of-bounds write7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-34708Adobe InCopy stack-based buffer overflow7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-34707Adobe InCopy heap-based buffer overflow7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-34706Adobe InCopy out-of-bounds write7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-34705Adobe InDesign Desktop out-of-bounds read5.5CNA v3.10.3%2026-06-09Fix
CVE-2026-34704Adobe InDesign Desktop null pointer dereference5.5CNA v3.10.2%2026-06-09Fix
CVE-2026-34703Adobe InDesign Desktop null pointer dereference5.5CNA v3.10.2%2026-06-09Fix
CVE-2026-34702Adobe InDesign Desktop stack-based buffer overflow7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-34701Adobe InDesign Desktop heap-based buffer overflow7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-34700Adobe InDesign Desktop out-of-bounds write7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-34699Adobe InDesign Desktop heap-based buffer overflow7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-34698Adobe InDesign Desktop heap-based buffer overflow7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-34697Adobe InDesign Desktop stack-based buffer overflow7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-34696Adobe InDesign Desktop use-after-free7.8CNA v3.10.4%2026-06-09Fix
CVE-2026-34695Adobe InDesign Desktop stack-based buffer overflow7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-34694Adobe Experience Manager Forms JEE cross-site scripting (stored XSS)4.8CNA v3.10.4%2026-06-09Fix
CVE-2026-34693Adobe Experience Manager Forms JEE cross-site scripting (reflected XSS)8.0CNA v3.10.6%2026-06-09Fix
CVE-2026-34692Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-06-09Fix
CVE-2026-34691Adobe Experience Manager Forms JEE cross-site scripting (stored XSS)9.3CNA v3.10.7%2026-06-09Fix
CVE-2026-34657Adobe CAI Content Credentials improper limitation of a pathname to a restricted directory5.5CNA v3.10.3%2026-06-09Fix
CVE-2026-34417OSCAL-GUI reflected XSS via project parameter in oscal-forms.php5.1CNA v4.00.3%2026-06-09
CVE-2026-34416OSCAL-GUI reflected XSS via project parameter in oscal.php5.1CNA v4.00.3%2026-06-09
CVE-2026-34335Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.3%2026-06-09Fix
CVE-2026-34183OpenSSL Unbounded Memory Growth in the QUIC PATH_CHALLENGE handler7.5CISA ADP v3.11.0%2026-06-09Fix
CVE-2026-34182OpenSSL CMS AuthEnvelopedData Processing may Accept Forged messages9.1CISA ADP v3.11.1%2026-06-09Fix
CVE-2026-34181OpenSSL PKCS#12 files with PBMAC1 are Accepted with Short HMAC Keys7.4CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-34180OpenSSL heap buffer over-read in ASN.1 Content Parsing7.5CISA ADP v3.11.3%2026-06-09Fix
CVE-2026-34033Apache Answer: HTML content injection in Email5.4CISA ADP v3.10.5%2026-06-09Fix
CVE-2026-34031Apache Answer: The custom avatar was not properly validated6.5CISA ADP v3.10.6%2026-06-09Fix
CVE-2026-33828Microsoft Windows Device Health Attestation (DHA) elevation of privilege7.8CNA v3.10.3%2026-06-09Fix
CVE-2026-33582Apache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory error6.5CISA ADP v3.10.7%2026-06-09Fix
CVE-2026-33113Microsoft SharePoint server spoofing5.4CNA v3.10.6%2026-06-09Fix
CVE-2026-32856Ellucian Banner Self-Service reflected XSS via dateConverter5.1CNA v4.00.4%2026-06-09Fix
CVE-2026-32193Microsoft Azure Kubernetes Service (AKS) remote code execution8.8CNA v3.10.4%2026-06-09Fix
CVE-2026-30141An issue was discovered in bitbank2 AnimatedGIF v2.2.0. A buffer overflow in the DecodeLZW function allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via a crafted GIF file.9.8CISA ADP v3.10.8%2026-06-09
CVE-2026-28301SolarWinds Observability Self-Hosted open redirect4.8CNA v3.10.4%2026-06-09Fix
CVE-2026-28262Dell iDRAC Tools link following6.0CNA v3.10.1%2026-06-09Fix
CVE-2026-28237AMD μProf resource exhaustion6.8CNA v4.00.1%2026-06-09Fix
CVE-2026-27671Memory corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform9.8CNA v3.10.6%2026-06-09Fix
CVE-2026-26236QNAP QuMagie missing authorization6.6CNA v4.00.5%2026-06-09Fix
CVE-2026-26142Microsoft Nuance PowerScribe remote code execution9.8CNA v3.11.5%2026-06-09Fix
CVE-2026-25860OpenClinic GA reflected XSS via DICOM Image upload handler5.3CNA v4.00.3%2026-06-09Exploit code
CVE-2026-25699Apache Answer: Authorization bypass in Timeline API6.1CISA ADP v3.10.6%2026-06-09Fix
CVE-2026-25688Apache Answer: XSS in AI Answer Rendering6.1CISA ADP v3.10.6%2026-06-09Fix
CVE-2026-25557Evoluted PHP Directory Listing Script reflected XSS via dir parameter5.1CNA v4.00.3%2026-06-09
CVE-2026-25089Fortinet FortiSandbox OS command injection9.1CNA v3.176.1%2026-06-09KEVExploit codeFix
CVE-2026-24349Siemens SIMATIC WinCC Unified PC Runtime V16 cleartext storage of sensitive information8.2CNA v4.00.1%2026-06-09Fix
CVE-2026-24315Path traversal vulnerability in SAP Fiori (launchpad)4.2CNA v3.10.2%2026-06-09Fix
CVE-2026-24181NVIDIA DALI improper array index validation7.3CNA v3.10.1%2026-06-09Fix
CVE-2026-24180NVIDIA DALI heap-based buffer overflow7.3CNA v3.10.2%2026-06-09Fix
CVE-2026-24065Local privilege escalation via Insecure XPC Client Validation in Waves Central for macOS8.1CISA ADP v3.10.3%2026-06-09
CVE-2026-24064Local privilege escalation via Dynamic library injection in Waves Central for macOS7.8CISA ADP v3.10.2%2026-06-09
CVE-2026-22926Omnissa Workspace ONE® Assist for macOS path traversal7.8CNA v3.10.1%2026-06-09
CVE-2026-11824SQLite heap buffer overflow via FTS5 fts5ChunkIterate8.5CNA v4.00.2%2026-06-09Fix
CVE-2026-11822SQLite memory corruption in FTS5 extension8.5CNA v4.00.3%2026-06-09Fix
CVE-2026-11799Mozilla UXSS in Focus for iOS / Klar Webkit navigation7.5CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11793Red Hat Directory Server 11 stack-based buffer overflow4.9CNA v3.10.3%2026-06-09Fix
CVE-2026-11792Red Hat Directory Server 11 heap-based buffer overflow3.3CNA v3.10.3%2026-06-09Fix
CVE-2026-11790Red Hat Directory Server PBKDF2 password storage plugin denial of service4.9CNA v3.10.3%2026-06-09Fix
CVE-2026-11789Red Hat Directory Server SMD5 password storage plugin integer underflow4.9CNA v3.10.3%2026-06-09Fix
CVE-2026-11788Red Hat Directory Server null pointer dereference5.9CNA v3.10.6%2026-06-09Fix
CVE-2026-11787Red Hat Directory Server 11 389-ds-base: 389-ds-base: Heap buffer over-read in ldap_utf8prev5.0CNA v3.10.2%2026-06-09Fix
CVE-2026-11786Red Hat Directory Server LDIF parser out-of-bounds read1.9CNA v3.10.2%2026-06-09Fix
CVE-2026-11785Red Hat Directory Server 11 389-ds-base: 389-ds-base: Partial stack address information leak4.3CNA v3.10.2%2026-06-09Fix
CVE-2026-11764pretix data exposed without proper permission3.6CNA v4.00.2%2026-06-09Fix
CVE-2026-11701Google Chrome Guest view inappropriate implementation5.4CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11700Google Chrome Tracing use-after-free8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11699Google Chrome Bluetooth use-after-free8.8CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11698Google Chrome Bluetooth use-after-free8.8CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11697Google Chrome sandbox escape9.6CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11696Google Chrome uninitialized variable use5.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11695Google Chrome Passwords inappropriate implementation4.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11694Google Chrome ServiceWorker use-after-free7.5CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11693Google Chrome plugins inappropriate implementation8.1CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11692Google Chrome Read Anything use-after-free8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11691Google Chrome improper input validation3.1CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11690Google Chrome Media out-of-bounds read7.5CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11689Google Chrome Passwords insufficient policy enforcement8.1CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11688Google Chrome SVG inappropriate implementation8.8CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11687Google Chrome Dawn use-after-free8.8CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11686Google Chrome improper input validation3.1CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11685Google Chrome MediaCapture inappropriate implementation4.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11684Google Chrome Network insufficient policy enforcement3.1CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11683Google Chrome WebCodecs use-after-free8.8CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11682Google Chrome Views inappropriate implementation8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11681Google Chrome Ozone use-after-free8.8CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11680Google Chrome Media use-after-free8.8CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11679Google Chrome Codecs use-after-free8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11678Google Chrome libyuv integer overflow5.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11677Google Chrome race condition8.3CISA ADP v3.10.1%2026-06-09Fix
CVE-2026-11676Google Chrome sandbox escape8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11675Google Chrome Skia out-of-bounds read3.1CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11674Google Chrome Guest view use-after-free8.8CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11673Google Chrome InterestGroups use-after-free8.8CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11672Google Chrome GPU heap-based buffer overflow8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11671Google Chrome Navigation use-after-free9.6CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11670Google Chrome PDF use-after-free8.8CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11669Google Chrome Media out-of-bounds read5.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11668Google Chrome uninitialized variable use4.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11667Google Chrome WebRTC out-of-bounds read7.5CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11666Google Chrome spoofing5.4v3.10.2%2026-06-09Fix
CVE-2026-11665Google Chrome Dawn out-of-bounds read4.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11664Google Chrome Payments use-after-free8.8CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11663Google Chrome Skia use-after-free8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11662Google Chrome Bindings type confusion8.8CISA ADP v3.10.4%2026-06-09Fix
CVE-2026-11661Google Chrome Views use-after-free8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11660Google Chrome sandbox escape8.3CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11659Google Chrome UI integer overflow9.6CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11658Google Chrome improper input validation6.5v3.10.2%2026-06-09Fix
CVE-2026-11657Google Chrome Payments use-after-free8.8CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11656Google Chrome ServiceWorker use-after-free8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11655Google Chrome Media integer overflow8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11654Google Chrome CameraCapture use-after-free9.6CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11653Google Chrome extensions inappropriate implementation6.5v3.10.2%2026-06-09Fix
CVE-2026-11652Google Chrome extensions use-after-free8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11651Google Chrome Network use-after-free9.6CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11650Google Chrome V8 use-after-free8.8CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11649Google Chrome V8 use-after-free8.8CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11648Google Chrome FullScreen use-after-free8.8CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11647Google Chrome Printing use-after-free8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11646Google Chrome ViewTransitions use-after-free8.8CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11645Google Chromium V8 out-of-bounds read and Write8.8CISA ADP v3.12.4%2026-06-09KEVExploit codeFix
CVE-2026-11644Google Chrome Views use-after-free7.5CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11643Google Chrome Proxy use-after-free8.1CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11642Google Chrome Web Apps use-after-free8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11641Google Chrome Bluetooth use-after-free7.5CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11640Google Chrome libyuv integer overflow8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11639Google Chrome Compositing use-after-free7.5CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11638Google Chrome Printing use-after-free9.6CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11637Google Chrome Views use-after-free8.8CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11636Google Chrome Autofill use-after-free7.5CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11635Google Chrome Bluetooth use-after-free8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11634Google Chrome Gamepad use-after-free9.6CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11633Google Chrome Bluetooth use-after-free8.8CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11632Google Chrome TabStrip use-after-free7.5CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11631Google Chrome Aura use-after-free8.3CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11630Google Chrome File Input use-after-free8.8CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11629Google Chrome Ozone use-after-free8.8CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-11628Google Chrome Ozone use-after-free6.8CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-11623tmux image.c image_free use-after-free2.0CNA v4.00.1%2026-06-09Fix
CVE-2026-11621Dcat-Admin User setting upload editorMDUpload unrestricted upload5.1CNA v4.00.2%2026-06-09
CVE-2026-11620TOTOLINK EX200 vsftpd vsftpd.conf least privilege violation6.9CNA v4.00.3%2026-06-09
CVE-2026-11619Dolibarr ERP CRM Legacy Filemanager config.inc.php improper authorization5.3CNA v4.00.2%2026-06-09Fix
CVE-2026-11618DTStack Taier source connection test endpoint improper authentication6.9CNA v4.00.4%2026-06-09
CVE-2026-11616Events Calendar for GeoDirectory WordPress plugin authenticated (Subscriber+) privilege escalation8.8CNA v3.10.3%2026-06-09Fix
CVE-2026-11607TYPO3 CMS broken access control in Form Framework7.6CNA v4.00.2%2026-06-09Fix
CVE-2026-11603Product Filter Widget for Elementor WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2026-06-09
CVE-2026-11572degit has a command injection issue8.7CNA v4.01.0%2026-06-09Fix
CVE-2026-10862Accordions WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-06-09Fix
CVE-2026-10738jQuery Hover Footnotes WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-09
CVE-2026-10731SQL injection in Nemon products9.3CNA v4.00.3%2026-06-09Fix
CVE-2026-10727Ivanti Endpoint Manager Mobile OS command injection7.2CNA v3.113.6%2026-06-09Fix
CVE-2026-10553jQuery Hover Footnotes WordPress plugin cross-site request forgery to plugin settings update4.3CNA v3.10.1%2026-06-09
CVE-2026-10523Ivanti Sentry authentication bypass9.9CNA v3.153.1%2026-06-09Exploit codeKCVFix
CVE-2026-10520Ivanti Sentry OS command injection10.0CNA v3.199.9%2026-06-09KEVNucleiEmerging ThreatsExploit codeKCVFix
CVE-2026-10045Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. These vulnerabilities allow attackers to read and write to memory, modify firmware stored in flash, i9.8CISA ADP v3.10.2%2026-06-09
CVE-2026-10024TinyMCE shortcode Addon WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-06-09
CVE-2026-9754MongoDB stack memory disclosure in filemd5 command7.1CNA v4.00.4%2026-06-09Fix
CVE-2026-9753MongoDB Server server crash via malformed binary diff passed to $_internalApplyOplogUpdate7.2CNA v4.00.5%2026-06-09Fix
CVE-2026-9752MongoDB Server 2dsphere index key generation null pointer dereference7.1CNA v4.00.5%2026-06-09Fix
CVE-2026-9751MongoDB Server sensitive data could be written to mongod.log6.8CNA v4.00.2%2026-06-09Fix
CVE-2026-9750MongoDB Server metadata name collision on $-prefixed fields causes post-auth server crash7.1CNA v4.00.6%2026-06-09Fix
CVE-2026-9749MongoDB Server using MaxKey may crash the server7.1CNA v4.00.5%2026-06-09Fix
CVE-2026-9748MongoDB Server bucket index stats stage reachable assertion7.1CNA v4.00.6%2026-06-09Fix
CVE-2026-9747Crafted cross-shard merge aggregation crashes MongoDB Server7.1CNA v4.00.5%2026-06-09Fix
CVE-2026-9746MongoDB Server server crashes in case of the use of exchange7.1CNA v4.00.5%2026-06-09Fix
CVE-2026-9743MongoDB Server aggregation sub-pipeline null dereference may allow DoS via crafted getMore7.1CNA v4.00.5%2026-06-09Fix
CVE-2026-9742MongoDB Server authenticate command with specific mechanism parameter can trigger server crash8.2CNA v4.00.5%2026-06-09Fix
CVE-2026-9741MongoDB Server client side encryption fails to encrypt values in a $vectorSearch7.1CNA v4.00.2%2026-06-09Fix
CVE-2026-9740MongoDB Server BSON validator uncontrolled recursion8.7CNA v4.00.5%2026-06-09Fix
CVE-2026-9735Keyfile contents are in MongoDB Server logs6.8CNA v4.00.2%2026-06-09Fix
CVE-2026-9698DBI versions for Perl saved errors in a limited-sized buffer9.8NVD v3.10.8%2026-06-09Fix
CVE-2026-9662Recover Exit For WooCommerce WordPress plugin unauthenticated local file inclusion via tpf parameter8.1CNA v3.10.9%2026-06-09
CVE-2026-9279Shell command injection in Logseq8.7CNA v4.00.3%2026-06-09
CVE-2026-9213Insufficient input validation in certain NETGEAR routers6.9CNA v4.00.7%2026-06-09Fix
CVE-2026-9212Insufficient authentication and input validation in certain NETGEAR products5.6CNA v4.00.5%2026-06-09Fix
CVE-2026-9211Certain NETGEAR routers allow unauthenticated users to gain control of the router5.2CNA v4.00.4%2026-06-09Fix
CVE-2026-9210Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router4.9CNA v4.00.3%2026-06-09Fix
CVE-2026-91856Storage Rentals WordPress plugin insecure direct object reference7.5CNA v3.10.7%2026-06-09Fix
CVE-2026-9076OpenSSL out-of-bounds read in CMS Password-Based Decryption7.5CISA ADP v3.11.0%2026-06-09Fix
CVE-2026-8981Lazy Blocks WordPress plugin Admin+ stored XSS via Custom block Frontend HTML3.5CISA ADP v3.10.2%2026-06-09Fix
CVE-2026-8977WP GDPR Cookie Consent WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-09
CVE-2026-8940WP Meta Sort Posts WordPress plugin cross-site request forgery to plugin settings update4.3CNA v3.10.2%2026-06-09
CVE-2026-8910WP Emoticon Rating WordPress plugin cross-site request forgery to reflected cross-site scripting6.1CNA v3.10.2%2026-06-09
CVE-2026-8909WpMobi WordPress plugin cross-site request forgery via save_general_settings action4.3CNA v3.10.2%2026-06-09
CVE-2026-8907WP-Ultimate-Map WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2026-06-09
CVE-2026-8904yuluma FastPicker settings page cross-site request forgery4.3CNA v3.10.2%2026-06-09
CVE-2026-8902AJAX Report Comments WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2026-06-09
CVE-2026-8895kk blog card WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-09
CVE-2026-8883Global Body Mass Index Calculator WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-09Fix
CVE-2026-8882WP ApplicantStack Jobs Display WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-09
CVE-2026-8880RomanCart Ecommerce WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-09
CVE-2026-8863OracleLinux(7.2) shim arbitrary code execution7.8CISA ADP v3.10.1%2026-06-09Fix
CVE-2026-8841Extra Settings for RocketChat WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-09
CVE-2026-8795Rapid7 Velociraptor Windows.Collectors.Remapping artifact injection7.8CNA v3.10.2%2026-06-09Fix
CVE-2026-8677Prime Elementor Addons WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-06-09Fix
CVE-2026-8599MailerPress WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-06-09Fix
CVE-2026-8499Helpfulcrowd Product Reviews WordPress plugin authorization bypass5.3CNA v3.10.5%2026-06-09Fix
CVE-2026-8365Blocksy WordPress theme PHP object injection8.8CNA v3.11.6%2026-06-09Fix
CVE-2026-8045Schneider Electric EcoStruxure™ IT Data Center Expert XML external entity injection7.1CNA v4.00.4%2026-06-09Fix
CVE-2026-8025SQLi in MOSK Informatics' CBS Platform9.8CNA v3.10.5%2026-06-09
CVE-2026-7662ePaperFlip Publisher WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-09
CVE-2026-7556FV Flowplayer Video Player WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-06-09Fix
CVE-2026-7542Slider Revolution - Authenticated (Subscriber+) sensitive information disclosure6.5CNA v3.10.4%2026-06-09Fix
CVE-2026-7486SQLi in Netcad's E-İmar9.8CNA v3.10.5%2026-06-09Fix
CVE-2026-7383OpenSSL possible heap buffer overflow in ASN.1 Multibyte String Conversion8.1CISA ADP v3.10.7%2026-06-09Fix
CVE-2026-6899Improper Check for Certificate Revocation in S2OPC5.6CNA v3.10.2%2026-06-09Fix
CVE-2026-6445FlashArray Purity data path filtering information disclosure8.7CNA v4.00.4%2026-06-09
CVE-2026-6444Everpure FlashArray insecure direct object reference8.6CNA v4.00.4%2026-06-09
CVE-2026-5714Enable Media Replace WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-09Fix
CVE-2026-5068zephyrproject-rtos Zephyr bt: L2cap le coc: Remote OOB write7.6CNA v3.10.3%2026-06-09
CVE-2026-5067zephyrproject-rtos Zephyr out-of-bounds read/write in HTTP WebSocket upgrade9.8CNA v3.10.9%2026-06-09
CVE-2026-4986WPForms Lite Unauthenticated PayPal Webhook Forgery5.3CISA ADP v3.10.3%2026-06-09Fix
CVE-2026-4058User Frontend: AI Powered Frontend Posting WordPress plugin unauthorized access4.3CNA v3.10.3%2026-06-09Fix
CVE-2026-3088NETGEAR RBR860 unauthenticated users can disrupt router operation4.9CNA v4.00.4%2026-06-09Fix
CVE-2026-2638X-VPN macOS website versions local privilege escalation7.3CNA v4.00.1%2026-06-09Fix
CVE-2026-0466AMD Uprof improper access control6.8CNA v4.00.1%2026-06-09Fix
CVE-2026-0420Missing TLS certificate validation in NETGEAR's ReadyCloud client app4.6CNA v4.00.1%2026-06-09Fix
CVE-2026-0419Insufficient input validation vulnerability in NETGEAR JR61504.4CNA v4.00.3%2026-06-09
CVE-2026-0418Certain NETGEAR devices allow administrators to tamper with system4.3CNA v4.00.2%2026-06-09Fix
CVE-2026-0417Insufficient input validation in certain NETGEAR routers4.3CNA v4.00.2%2026-06-09Fix
CVE-2026-0416NETGEAR RAXE450 certain improper input validation4.3CNA v4.00.2%2026-06-09Fix
CVE-2026-0415NETGEAR RBE970 insufficient input validation vulnerability in certain Orbi routers4.3CNA v4.00.2%2026-06-09Fix
CVE-2026-0414NETGEAR RBE970 listed improper input validation4.3CNA v4.00.2%2026-06-09Fix
CVE-2026-0413Buffer overflow vulnerability in certain NETGEAR Nighthawk routers4.3CNA v4.00.3%2026-06-09Fix
CVE-2026-0412Insufficient input validation vulnerability in NETGEAR JR6150 Web UI4.3CNA v4.00.2%2026-06-09Fix
CVE-2026-0411A sensitive information disclosure vulnerability in NETGEAR Orbi Satellites4.2CNA v4.00.3%2026-06-09Fix
CVE-2026-0410Insufficient input validation in certain NETGEAR routers1.9CNA v4.00.2%2026-06-09Fix
CVE-2026-0409Netgear Orbi 370 Series remote code execution4.8CNA v4.00.3%2026-06-09Fix
CVE-2026-52778YesWiki has Unsafe eval in Formula Calculator remote code execution (RCE) & denial of service (DoS)9.8CNA v3.10.8%2026-06-08Fix
CVE-2026-50752A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow7.4CNA v3.10.3%2026-06-08Reported exploited
CVE-2026-50751Check Point Security Gateway improper authentication9.3CISA ADP v3.185.3%2026-06-08KEVNucleiEmerging ThreatsExploit codeFix
CVE-2026-49975Apache HTTP Server: Mod_http2 denial of service7.5CISA ADP v3.14.2%2026-06-08Exploit codeFix
CVE-2026-49756Multipart form-data header injection in Req via unescaped name/filename/content_type2.1CNA v4.00.3%2026-06-08Fix
CVE-2026-49755Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies8.2CNA v4.00.7%2026-06-08Fix
CVE-2026-49235Routinator crashes on specifically crafted RRDP XML files8.7CNA v4.00.5%2026-06-08Fix
CVE-2026-49234Routinator crashes on specifically crafted ASN strings in the API8.2CNA v4.00.3%2026-06-08Fix
CVE-2026-49233Routinator cache path traversal using rogue rsync URIs8.3CNA v4.00.5%2026-06-08Fix
CVE-2026-49232Routinator exits when accepting an incoming HTTP or RTR connection fails8.7CNA v4.00.4%2026-06-08Fix
CVE-2026-49141WACRM authorization bypass via Automation Engine endpoint5.1CNA v4.00.3%2026-06-08
CVE-2026-48913Apache HTTP Server: Mod_http2 memory corruption when file handles exhausted7.3CISA ADP v3.11.1%2026-06-08Fix
CVE-2026-48507Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users7.1CNA v3.10.4%2026-06-08Fix
CVE-2026-48488phpMyFAQ has weak cryptography SHA1 for Password Hashing2.7CNA v4.00.3%2026-06-08Fix
CVE-2026-47430Apache Cordova InAppBrowser plugin iOS WKScriptMessage callback dispatch improper input validation9.5CNA v4.00.8%2026-06-08Fix
CVE-2026-47345TYPO3 HTML Sanitizer allows cross-site scripting5.1CNA v4.00.4%2026-06-08Fix
CVE-2026-47344TYPO3 HTML Sanitizer allows cross-site scripting2.1CNA v4.00.4%2026-06-08Fix
CVE-2026-46657Bludit's persistent authentication tokens not revoked upon account disablement7.1CNA v3.10.4%2026-06-08Fix
CVE-2026-46656Bludit CMS has improper authorization and mediation failure leading to persistent ghost sessions8.8CNA v3.10.5%2026-06-08Fix
CVE-2026-46490samlify SAML assertion template XML injection8.7CNA v4.00.6%2026-06-08Exploit codeFix
CVE-2026-46486Mobile Verification Toolkit iOS backup processing path traversal5.3CNA v4.00.5%2026-06-08Fix
CVE-2026-46484Headplane Headscale API client path traversal8.1CNA v3.10.6%2026-06-08Fix
CVE-2026-46481OpenMetadata connection test workflow information disclosure8.3CNA v3.10.4%2026-06-08Fix
CVE-2026-46480Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover7.7CNA v4.00.6%2026-06-08Fix
CVE-2026-46479Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover7.7CNA v4.00.6%2026-06-08Fix
CVE-2026-46478Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeover7.7CNA v4.00.6%2026-06-08Fix
CVE-2026-46477Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeover7.7CNA v4.00.6%2026-06-08Fix
CVE-2026-46476Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeover7.7CNA v4.00.6%2026-06-08Fix
CVE-2026-46475Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeover7.7CNA v4.00.6%2026-06-08Fix
CVE-2026-46444Flowise: Vector Store no Permission Checks8.7CNA v4.00.6%2026-06-08Fix
CVE-2026-46443Flowise: Credential data leak7.0CNA v4.00.4%2026-06-08Fix
CVE-2026-46442Flowise: Authenticated host RCE via POST /API/v1/node-custom-function and NodeVM sandbox escape9.4CNA v4.03.4%2026-06-08NucleiEmerging ThreatsExploit codeFix
CVE-2026-46441Flowise: Mass assignment in Assistant Update endpoint allows Cross-Workspace Resource Reassignment7.6CNA v4.00.4%2026-06-08Fix
CVE-2026-46440Flowise: Basic Auth Credentials Exposed via API7.5CNA v3.00.4%2026-06-08Fix
CVE-2026-46314Linux kernel V3D GPU driver multisync ioctl infinite loop5.5v3.10.1%2026-06-08Fix
CVE-2026-46313Linux kernel Intel IPU6 camera driver probe null pointer dereference5.5v3.10.1%2026-06-08Fix
CVE-2026-46312Linux kernel videobuf2 dma-sg mmap vulnerability5.5v3.10.1%2026-06-08Fix
CVE-2026-46311Linux kernel amdgpu user queue write pointer mapping vulnerability7.8CNA v3.10.1%2026-06-08Fix
CVE-2026-46310Linux kernel Renesas VSP1 video driver null pointer dereference5.5v3.10.1%2026-06-08Fix
CVE-2026-46309Linux kernel Xe GPU driver madvise ioctl information disclosure7.0v3.10.1%2026-06-08Fix
CVE-2026-46308Linux kernel MediaTek SCPSYS power domain driver use-after-free7.8v3.10.1%2026-06-08Fix
CVE-2026-46307Linux kernel ath5k Wi-Fi driver vulnerability8.3CNA v3.10.4%2026-06-08Fix
CVE-2026-46306Linux kernel PPPoE flow dissector vulnerability7.5CNA v3.10.4%2026-06-08Fix
CVE-2026-46305Linux kernel rtl8723bs Wi-Fi driver null pointer dereference5.5v3.10.1%2026-06-08Fix
CVE-2026-46304Linux kernel NVMe target TCP controller teardown vulnerability7.5CNA v3.10.3%2026-06-08Fix
CVE-2026-46303Linux kernel isofs Rock Ridge extension handling vulnerability8.2CNA v3.10.6%2026-06-08Fix
CVE-2026-46302Linux kernel SELinux policy file interface vulnerability5.5NVD v3.10.1%2026-06-08Fix
CVE-2026-46301Linux kernel Topcliff PCH SPI driver use-after-free7.8v3.10.1%2026-06-08Fix
CVE-2026-46299Linux kernel HFS+ filesystem improper locking7.0CNA v3.10.1%2026-06-08Fix
CVE-2026-46298Linux kernel pseries PAPR hvpipe driver deadlock4.7NVD v3.10.1%2026-06-08Fix
CVE-2026-46297Linux kernel libwx VF misc interrupt handler vulnerability5.5v3.10.1%2026-06-08Fix
CVE-2026-46296Linux kernel s3c64xx null pointer dereference5.5v3.10.1%2026-06-08Fix
CVE-2026-46295Linux kernel KVM x86 APIC interrupt injection vulnerability5.5v3.10.1%2026-06-08Fix
CVE-2026-46294Linux kernel device-mapper ioctl interface out-of-bounds write7.8NVD v3.10.2%2026-06-08Fix
CVE-2026-46293Linux kernel Microchip mpfs-ccc clock driver out-of-bounds read7.1v3.10.1%2026-06-08Fix
CVE-2026-46292Linux kernel pmdomain core null pointer dereference5.5v3.10.1%2026-06-08Fix
CVE-2026-46291Linux kernel CAAM crypto driver information disclosure5.5v3.10.1%2026-06-08Fix
CVE-2026-46290Linux kernel EFI page fault handler vulnerability5.5v3.10.1%2026-06-08Fix
CVE-2026-46289Linux kernel scatterlist kvec extraction memory leak9.8CNA v3.10.7%2026-06-08Fix
CVE-2026-46288Linux kernel OF unittest changeset use-after-free8.4CNA v3.10.2%2026-06-08Fix
CVE-2026-46287Linux kernel txgbe reachable assertion5.5v3.10.1%2026-06-08Fix
CVE-2026-46286In the Linux kernel, the following vulnerability has been resolved: leds: qcom-lpg: Check for array overflow when selecting the high resolution When selecting the high resolution values from the array, FIELD_GET() is used to pull from a 3 bit register, yet the array being indexed has only 5 values5.5v3.10.1%2026-06-08Fix
CVE-2026-46285Linux kernel docg3 MTD driver use-after-free7.8v3.10.1%2026-06-08Fix
CVE-2026-46284Linux kernel hugetlb parameter parsing null pointer dereference5.5v3.10.1%2026-06-08Fix
CVE-2026-46283Linux kernel TPM auth session cleanup vulnerability5.5v3.10.1%2026-06-08Fix
CVE-2026-46282Linux kernel admv1013 IIO driver null pointer dereference5.5NVD v3.10.2%2026-06-08Fix
CVE-2026-46281Linux kernel vmalloc allocator out-of-bounds write7.8v3.10.1%2026-06-08Fix
CVE-2026-46280Linux kernel HMM test driver use-after-free7.8CNA v3.10.2%2026-06-08Fix
CVE-2026-46279Linux kernel page allocation tag tracking double free7.8v3.10.1%2026-06-08Fix
CVE-2026-46278Linux kernel Imagination GPU driver null pointer dereference5.5v3.10.1%2026-06-08Fix
CVE-2026-46277Linux kernel zone device memory management vulnerability7.8CNA v3.10.2%2026-06-08Fix
CVE-2026-46276Linux kernel amdgpu GDS driver vulnerability5.5v3.10.1%2026-06-08Fix
CVE-2026-46275Linux kernel hci_uart Bluetooth driver race condition7.8CNA v3.10.2%2026-06-08Fix
CVE-2026-46274Linux kernel io-wq work queue use-after-free7.8CNA v3.10.2%2026-06-08Fix
CVE-2026-45581Hyperledger Fabric Chaincode Java chaincode server startup logs information disclosure5.5CNA v3.10.2%2026-06-08Fix
CVE-2026-44631Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow9.8CISA ADP v3.10.7%2026-06-08Fix
CVE-2026-44541Fides: DOM-based XSS vulnerability in fides.js via fides_description override7.0CNA v4.00.5%2026-06-08Fix
CVE-2026-44186Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp7.3CISA ADP v3.11.1%2026-06-08Fix
CVE-2026-44185Apache HTTP Server: Stack buffer over-read in mod_ssl OCSP `send_request`7.3CISA ADP v3.11.8%2026-06-08Fix
CVE-2026-44119Apache HTTP Server: Escalation of privilege through expressions in .htaccess in multiple modules5.5CISA ADP v3.10.3%2026-06-08Fix
CVE-2026-43974gun has an Unexpected Status Code or Return Value vulnerability7.5NVD v3.10.6%2026-06-08Fix
CVE-2026-43973gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion7.5NVD v3.10.6%2026-06-08Fix
CVE-2026-43972ninenines gun gun_http2 has an origin validation error7.2NVD v3.10.2%2026-06-08Fix
CVE-2026-43966ninenines cowlib HTTP response splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/25.3NVD v3.10.5%2026-06-08Fix
CVE-2026-43951Apache HTTP Server: OOB read in `merge_response_headers` can cause crash6.5CISA ADP v3.11.0%2026-06-08Fix
CVE-2026-42863Flowise: Mass assignment in Chatflow Update endpoint allows Cross-Workspace AgentFlow Reassignment7.6CNA v4.00.4%2026-06-08Fix
CVE-2026-42862Flowise: Mass assignment in Tool Update endpoint allows Cross-Workspace Resource Reassignment7.6CNA v4.00.3%2026-06-08Fix
CVE-2026-42861Flowise: Mass assignment in Variable Update endpoint allows Cross-Workspace Resource Reassignment7.6CNA v4.00.4%2026-06-08Fix
CVE-2026-42536Apache HTTP Server: Mod_xml2enc heap overflow7.5CISA ADP v3.12.7%2026-06-08Exploit codeFix
CVE-2026-42535Apache HTTP Server: Mod_dav_fs protected directory access9.1CISA ADP v3.10.7%2026-06-08Fix
CVE-2026-41724VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (, and)8.0CNA v3.10.3%2026-06-08
CVE-2026-41723VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (, and)8.0CNA v3.10.4%2026-06-08
CVE-2026-41722VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (, and)8.0CNA v3.10.3%2026-06-08Fix
CVE-2026-41448AdguardTeam AdGuardHome AdGuard Home authentication bypass via path traversal in Admin-Token Cookie9.2CNA v4.00.8%2026-06-08Fix
CVE-2026-40519nginx-proxy-manager Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins7.7CNA v4.01.7%2026-06-08
CVE-2026-40215OpenVPN A race condition6.1CNA v4.00.6%2026-06-08Fix
CVE-2026-39910STACKIT IaaS API privilege escalation via Service Account Attachment8.7CNA v4.00.5%2026-06-08Fix
CVE-2026-39908OpenBullet2 NTLMv2 hash disclosure via UNC Path Proxy Source7.1CNA v4.00.5%2026-06-08
CVE-2026-36789Shenzhen Tenda Technology Co., Ltd Tenda AC1206 v15.03.06.23 was discovered to contain multiple stack overflows in the fromGstDhcpSetSer function via the username and password parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request.7.5CISA ADP v3.10.6%2026-06-08
CVE-2026-36786Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the list1 parameter of the fromDhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.7.5CISA ADP v3.10.6%2026-06-08
CVE-2026-35058OpenVPN reachable assertion6.9CNA v4.00.6%2026-06-08Fix
CVE-2026-34356Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow7.5CISA ADP v3.11.2%2026-06-08Fix
CVE-2026-34355Apache HTTP Server: Mod_proxy_html buffer overflow7.5CISA ADP v3.12.7%2026-06-08Fix
CVE-2026-34194Imagination Technologies Graphics DDK sparse memory allocation use-after-free7.1CISA ADP v3.10.1%2026-06-08Fix
CVE-2026-29170Apache HTTP Server: Mod_proxy_ftp XSS6.1CISA ADP v3.11.0%2026-06-08Fix
CVE-2026-29167Apache HTTP Server: Mod_ldap per-dir use-after-free9.8CISA ADP v3.10.7%2026-06-08Fix
CVE-2026-25856OpenBullet2 authenticated RCE via Job Configuration interface8.7CNA v4.00.9%2026-06-08Fix
CVE-2026-25855OpenBullet2 authenticated RCE via FileProxySource script upload8.7CNA v4.01.1%2026-06-08
CVE-2026-25559OpenBullet2 path traversal via Wordlist endpoint8.7CNA v4.00.9%2026-06-08
CVE-2026-25558QloApps stored XSS via SVG file upload in Admin File Manager4.8CNA v4.00.3%2026-06-08
CVE-2026-25555OpenBullet2 authentication bypass via X-Api-Key header9.3CNA v4.02.7%2026-06-08Nuclei
CVE-2026-22164GPU DDK Kernel heap OOB write in DevmemIntComputeVirtualIndicesFromLogical7.5CISA ADP v3.10.3%2026-06-08Fix
CVE-2026-11611Red Hat Directory Server content synchronization plugin resource exhaustion6.5CNA v3.10.2%2026-06-08Fix
CVE-2026-11585CodeAstro Student Attendance Management System createClassArms.php SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11584CodeAstro Student Attendance Management System createClass.php edit SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11583CodeAstro Student Attendance Management System createClass.php SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11582CodeAstro Student Attendance Management System index.php SQL injection6.9CNA v4.00.3%2026-06-08
CVE-2026-11569Quay: Quay: Stored XSS via filedrop svg upload5.4CNA v3.10.1%2026-06-08
CVE-2026-11559CodeAstro Payroll System view_account.php SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11558CodeAstro Payroll System home_salary.php SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11557Tenda F451 Web Management Natlimit fromNatlimit stack-based overflow8.7CNA v4.00.5%2026-06-08
CVE-2026-11556Tenda F451 Web Management WriteFacMac formWriteFacMac os command injection8.7CNA v4.01.6%2026-06-08
CVE-2026-11555D-Link DGS-1100-08PD Web boa.conf least privilege violation7.5v3.10.4%2026-06-08
CVE-2026-11554TOTOLINK CP450 vsftpd vsftpd.conf least privilege violation5.3CNA v4.00.2%2026-06-08
CVE-2026-11553Tenda HG7/HG9/HG10 formPPPEdit stack-based overflow8.7CNA v4.00.5%2026-06-08
CVE-2026-11552SourceCodester Onlne Examination and Learning Management System import_users.php hard-coded password6.9CNA v4.00.3%2026-06-08
CVE-2026-11534imvks786 student_management_system add.php cross-site scripting5.1CNA v4.00.2%2026-06-08
CVE-2026-11533imvks786 student_management_system Student Deletion endpoint see.php improper authorization5.3CNA v4.00.2%2026-06-08
CVE-2026-11532imvks786 student_management_system Student Record add.php access control5.3CNA v4.00.3%2026-06-08
CVE-2026-11531imvks786 student_management_system Administrator Login endpoint admin_login.php SQL injection6.9CNA v4.00.3%2026-06-08
CVE-2026-11530imvks786 student_management_system Login index.ph SQL injection6.9CNA v4.00.3%2026-06-08
CVE-2026-11529designcomputer mysql-mcp-server mysql URI server.py read_resource SQL injection5.3CNA v4.00.2%2026-06-08Fix
CVE-2026-11528Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow8.7CNA v4.00.5%2026-06-08
CVE-2026-11524Tenda W20E Web Management modifyWifiFilterRules stack-based overflow8.7CNA v4.00.5%2026-06-08
CVE-2026-11523Tenda W20E Web Management PortalAuth formPortalAuth stack-based overflow8.7CNA v4.00.5%2026-06-08
CVE-2026-11522Tenda W20E setPortMirror formSetPortMirror stack-based overflow8.7CNA v4.00.5%2026-06-08
CVE-2026-11521bank-management-system-springboot transaction endpoint improper authorization5.3CNA v4.00.3%2026-06-08
CVE-2026-11520SourceCodester Inventory System header.php cross-site scripting5.1CNA v4.00.2%2026-06-08
CVE-2026-11519SourceCodester Inventory System Account Creation users_handler.php improper authorization5.3CNA v4.00.3%2026-06-08
CVE-2026-11518SourceCodester Inventory System User Management users.php cross-site scripting5.3CNA v4.00.4%2026-06-08
CVE-2026-11517UTT HiPER 2610G formConfigDnsFilterGlobal strcpy buffer overflow8.7CNA v4.00.6%2026-06-08
CVE-2026-11516UTT HiPER 2610G formNatStaticMap strcpy buffer overflow5.1CNA v4.00.4%2026-06-08
CVE-2026-11515SourceCodester Barangay Resident Profiling and Information Management System hard-coded password6.9CNA v4.00.3%2026-06-08
CVE-2026-11514itsourcecode Hospital Management System addpatient.php SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11513itsourcecode Hospital Management System adminaccount.php SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11512itsourcecode Hospital Management System billing.php cross-site scripting5.3CNA v4.00.3%2026-06-08
CVE-2026-11511Bolt CMS HTML Attribute TextType.php HTML injection5.1CNA v4.00.2%2026-06-08
CVE-2026-11510CodeAstro Leave Management System add_leave.php SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11509CodeAstro Leave Management System search_staff_for_updation.php SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11508CodeAstro Leave Management System search_staff_to_assign_pc.php SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11507CodeAstro Leave Management System delete_leave_type.php SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11506CodeAstro Leave Management System search_staff_for_deletion.php SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11505GL.iNet XE3000 glnassys hard-coded key2.3CNA v4.00.2%2026-06-08Fix
CVE-2026-11504Tenda CX12L Wi-Fi Schedule Configuration endpoint openSchedWifi setSchedWifi stack-based overflow8.7CNA v4.00.5%2026-06-08
CVE-2026-11503Tenda CX12L Wi-Fi configuration endpoint stack-based buffer overflow8.7CNA v4.00.5%2026-06-08
CVE-2026-11502JeecgBoot Third-Party Login ThirdLoginController.java HttpServletResponse.sendRedirect redirect2.3CNA v4.00.3%2026-06-08
CVE-2026-11501SourceCodester Hospitals Patient Records Management System Master.php save_patient SQL injection6.9CNA v4.00.3%2026-06-08
CVE-2026-11500Weaviate Static API Key client.go validateConfig authorization2.3CNA v4.00.3%2026-06-08Fix
CVE-2026-11499Tenda HG7/HG9/HG10 formDOMAINBLK stack-based overflow9.3CNA v4.06.6%2026-06-08Emerging ThreatsExploit code
CVE-2026-11498Tenda HG7/HG9/HG10 Web Management voip_other_set asp_voip_OtherSet stack-based overflow8.7CNA v4.03.8%2026-06-08Emerging Threats
CVE-2026-11497D-Link DCS-5615 Boa Webserver boa.conf least privilege violation8.8v3.10.4%2026-06-08
CVE-2026-11495CodeAstro Ingredients Stock Management System add_stock.php SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11494TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violation5.3CNA v4.00.2%2026-06-08
CVE-2026-11493Tenda AC15 Samba smb.conf weak password2.3CNA v4.00.2%2026-06-08
CVE-2026-11492D-Link DIR-823G vsftpd vsftpd.conf least privilege violation8.8v3.10.5%2026-06-08
CVE-2026-11491CodeAstro Human Resource Management System Notice Board Management All_notice cross-site scripting4.8CNA v4.00.2%2026-06-08
CVE-2026-11490code-projects Online Music Site Search.php SQL injection6.9CNA v4.00.3%2026-06-08
CVE-2026-11489code-projects Online Music Site AdminDeleteAlbum.php SQL injection6.9CNA v4.00.3%2026-06-08
CVE-2026-11488code-projects Simple Flight Ticket Booking System POST parameter checkUser.php SQL injection6.9CNA v4.00.3%2026-06-08
CVE-2026-11487Neovim View Branch secure.lua M.read command injection4.8CNA v4.00.9%2026-06-08Fix
CVE-2026-11486SourceCodester Class and Exam Timetabling System archive1.php SQL injection6.9CNA v4.00.3%2026-06-08
CVE-2026-11485SourceCodester Class and Exam Timetabling System archive2.php SQL injection6.9CNA v4.00.3%2026-06-08
CVE-2026-11484SourceCodester Class and Exam Timetabling System archive3.php SQL injection6.9CNA v4.00.3%2026-06-08
CVE-2026-11483SourceCodester Class and Exam Timetabling System archive4.php SQL injection6.9CNA v4.00.3%2026-06-08
CVE-2026-11482SourceCodester Class and Exam Timetabling System archive5.php SQL injection6.9CNA v4.00.3%2026-06-08
CVE-2026-11481yoanbernabeu grepai Postgres Embedding Cache chunker.go PostgresStore.LookupByContentHash weak hash2.0CNA v4.00.1%2026-06-08
CVE-2026-11480Chengdu Everbrite Network Technology BeikeShop Admin Design Builder endpoint admin.php SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11479yoanbernabeu grepai Qdrant Backend chunker.go weak hash2.3CNA v4.00.2%2026-06-08
CVE-2026-11478kokke tiny-regex-c Pattern re.c matchstar redos4.8CNA v4.00.1%2026-06-08
CVE-2026-11477hs-web hsweb-framework OAuth2 Client OAuth2Client.java OAuth2Client redirect5.3CNA v4.00.3%2026-06-08
CVE-2026-11476student-management-system profile update endpoint improper authorization5.3CNA v4.00.2%2026-06-08
CVE-2026-11475student-management-system certificate verification endpoint SQL injection5.3CNA v4.00.1%2026-06-08
CVE-2026-11474Kushan2k student-management-system Registration Endpoint RegisterService.php unrestricted upload6.9CNA v4.00.3%2026-06-08
CVE-2026-11473jflyfox jfinal_cms AdvicefeedbackController.java list SQL injection5.3CNA v4.00.2%2026-06-08
CVE-2026-11472SourceCodester Class and Exam Timetabling System index1.php SQL injection6.9CNA v4.00.3%2026-06-08
CVE-2026-11471SourceCodester Class and Exam Timetabling System index2.php SQL injection6.9CNA v4.00.3%2026-06-08
CVE-2026-11470hs-web hsweb-framework file upload FileUploadProperties.java denied path traversal5.3CNA v4.00.3%2026-06-08
CVE-2026-11469jishenghua jshERP platformConfig add endpoint server-side request forgery5.1CNA v4.00.2%2026-06-08
CVE-2026-11468SourceCodester Hospitals Patient Records Management System page room_types cross-site scripting4.8CNA v4.00.2%2026-06-08
CVE-2026-11467jishenghua jshERP addAccountHeadAndDetail Endpoint AccountHeadService.java path traversal5.3CNA v4.00.3%2026-06-08
CVE-2026-11393Code injection via improper triple-quote escaping in AgentCore CLI Bedrock agent import8.8CNA v4.00.3%2026-06-08Fix
CVE-2026-10787Devolutions Server deleted user groups API missing authorization4.3CISA ADP v3.10.2%2026-06-08Fix
CVE-2026-10786Devolutions Server ticketing integration settings improper access control6.5CISA ADP v3.10.1%2026-06-08Fix
CVE-2026-10544Devolutions Server improper neutralization6.5CISA ADP v3.10.2%2026-06-08Fix
CVE-2026-9669Python CPython bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow8.2CNA v4.00.6%2026-06-08Fix
CVE-2026-9549Checkmk fix XSS in service discovery active check output4.8CNA v4.00.2%2026-06-08Fix
CVE-2026-9506Path traversal vulnerability in Bagisto8.7CNA v4.01.8%2026-06-08NucleiFix
CVE-2026-8913Command injection in TP-Link's Archer MR600 WireGuard Client Configuration8.5CNA v4.02.2%2026-06-08Fix
CVE-2026-8833Checkmk URL validation function cross-site scripting8.5CNA v4.00.2%2026-06-08Fix
CVE-2026-8078Checkmk fix stored XSS in global settings change log4.8CNA v4.00.2%2026-06-08Fix
CVE-2026-7765Checkmk user messages widget leaked issuer messages on shared dashboards6.3CNA v4.00.3%2026-06-08Fix
CVE-2026-7186Checkmk fix stored XSS in URL dashboard widget via dangerous URI schemes8.5CNA v4.00.2%2026-06-08Fix
CVE-2026-3238Red Hat Enterprise Linux 10 samba: Denial of service against ad dc wins server7.5CNA v3.12.0%2026-06-08Fix
CVE-2026-3011Recipe Card Blocks Lite WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-08Fix
CVE-2026-49494Xcitium Client Security / Comodo Internet Security Remote denial of service8.7CNA v4.00.8%2026-06-07Fix
CVE-2026-11466zilliztech deep-searcher collection_router.py CollectionRouter.invoke access control5.3CNA v4.00.3%2026-06-07
CVE-2026-11465songquanpeng one-api Redemption Code Top-Up endpoint redemption.go Redeem logic error2.3CNA v4.00.2%2026-06-07
CVE-2026-11464JeecgBoot User List Endpoint SysUserController.java queryPageList information disclosure2.3CNA v4.00.2%2026-06-07
CVE-2026-11463USCiLab Cereal Shared Pointer type confusion6.3CNA v4.00.3%2026-06-07
CVE-2026-11462Chengdu Everbrite Network Technology BeikeShop improper authorization6.9CNA v4.00.3%2026-06-07
CVE-2026-11461NousResearch hermes-agent resume endpoint hermes_state.py resolve_session_by_title authorization5.3CNA v4.00.2%2026-06-07
CVE-2026-11460Boost Serialization improper validation of specified type of input6.3CNA v4.00.3%2026-06-07
CVE-2026-11459SecureAge CatchPulse IOCTL saappctl.sys information disclosure4.8CNA v4.00.1%2026-06-07
CVE-2026-11458erzhongxmu JeeWMS Boot Actuator endpoint actuator information disclosure6.9CNA v4.00.3%2026-06-07
CVE-2026-11457erzhongxmu JeeWMS JimuReport test-connection endpoint testConnection injection6.9CNA v4.00.3%2026-06-07
CVE-2026-11456Chanjet CRM HTTP GET request jxf_dump_systable.php SQL injection6.9CNA v4.00.3%2026-06-07
CVE-2026-11455FoundationAgents MetaGPT common.py check_cmd_exists command injection2.3CNA v4.00.9%2026-06-07
CVE-2026-11453Tiobon Employee Self-Service System Login Endpoint BlogSearch.aspx SQL injection5.3CNA v4.00.2%2026-06-07
CVE-2026-11452GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection6.9CNA v4.01.7%2026-06-07
CVE-2026-11451GL.iNet GL-MT3000 FTP protocol glc snprintf command injection6.9CNA v4.02.0%2026-06-07
CVE-2026-11450GL.iNet GL-MT3000 Path Normalization dlopen command injection6.9CNA v4.01.6%2026-06-07Exploit code
CVE-2026-11449GL.iNet GL-MT3000 LuCI JSON-RPC RPC rpc_sys command injection5.3CNA v4.01.1%2026-06-07Fix
CVE-2026-11448GL.iNet GL-MT3000 Minidlna service RPC realpath command injection5.1CNA v4.01.6%2026-06-07
CVE-2026-11447GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection5.3CNA v4.01.1%2026-06-07
CVE-2026-34123Whitelist Validation Bypass in TP-Link Tapo C520WS7.0CNA v4.00.2%2026-06-06Fix
CVE-2026-26422Clash Verge Rev clash-verge-service-ipc incorrect permission assignment8.4CNA v3.10.2%2026-06-06Fix
CVE-2026-11441theonedev Pull request issues canAccessIssue improper authorization5.3CNA v4.00.2%2026-06-06Fix
CVE-2026-11440theonedev REST API default-branch improper authorization5.3CNA v4.00.2%2026-06-06Fix
CVE-2026-11439theonedev Parent Project projects improper authorization5.3CNA v4.00.2%2026-06-06Fix
CVE-2026-11438theonedev projects improper authorization5.3CNA v4.00.2%2026-06-06Fix
CVE-2026-11437perfree go-fastdfs-web Installation endpoint checkServer server-side request forgery6.9CNA v4.00.4%2026-06-06
CVE-2026-11436Mage AI Sign-in Flow index.tsx useMutation cross-site scripting5.3CNA v4.00.3%2026-06-06
CVE-2026-11435Jinher OA nextselectplan.aspx SQL injection6.9CNA v4.00.3%2026-06-06
CVE-2026-11434FluentCMS blocks plugin blocks cross-site scripting4.8CNA v4.00.3%2026-06-06
CVE-2026-11413JingDong JD Cloud Box AX6600 jdcweb_rpc set_macfilter stack-based overflow8.7CNA v4.00.5%2026-06-06
CVE-2026-11412Jinher OA GetFormSn.aspx SQL injection5.3CNA v4.00.2%2026-06-06
CVE-2026-11411iAI Lab PDF AI App chatpdf.pro getExternalCacheDir path traversal4.8CNA v4.00.2%2026-06-06
CVE-2026-11408vertex-app vertex Log Viewer Endpoint LogMod.js os command injection5.3CNA v4.01.1%2026-06-06
CVE-2026-11406GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection5.3CNA v4.01.2%2026-06-06Fix
CVE-2026-10725Protocol::HTTP2 versions for Perl is vulnerable to a HTTP/2 Bomb7.5CISA ADP v3.10.4%2026-06-06Fix
CVE-2026-10038Charitable WordPress plugin insecure direct object reference to arbitrary Attachment deletion4.3CNA v3.10.3%2026-06-06Fix
CVE-2026-9851Booking Package WordPress plugin privilege escalation7.2CNA v3.10.6%2026-06-06Fix
CVE-2026-9829Photo Gallery by 10Web WordPress plugin SQL injection6.5CNA v3.10.6%2026-06-06Fix
CVE-2026-9719LatePoint WordPress plugin cross-site request forgery via invoices__change_status action4.3CNA v3.10.2%2026-06-06Fix
CVE-2026-9594WP Maps WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-06-06Fix
CVE-2026-9290WP User Manager WordPress plugin unauthenticated path traversal to local file inclusion7.5CNA v3.12.7%2026-06-06NucleiExploit codeFix
CVE-2026-9281Master Addons For Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-06-06Fix
CVE-2026-9280Ad Inserter WordPress plugin reflected cross-site scripting via URL parameters in iframe Mode6.1CNA v3.10.4%2026-06-06Fix
CVE-2026-9197Smart Slider 3 WordPress plugin path traversal to arbitrary file read4.9CNA v3.10.8%2026-06-06Fix
CVE-2026-9016Debug Log Manager WordPress plugin unauthenticated improper output neutralization for logs5.3CNA v3.10.4%2026-06-06Fix
CVE-2026-9008Page-list WordPress plugin missing authorization authenticated sensitive information disclosure4.3CNA v3.10.4%2026-06-06Fix
CVE-2026-8991Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-06-06Fix
CVE-2026-8978OptinCraft WordPress plugin authenticated (Administrator+) SQL injection via order_by parameter4.9CNA v3.10.4%2026-06-06Fix
CVE-2026-8976RSS Aggregator by Feedzy WordPress plugin authorization bypass4.3CNA v3.10.5%2026-06-06Fix
CVE-2026-8901Integration for Freshsales WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.5%2026-06-06Fix
CVE-2026-8900Simple SEO Slideshow WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-06Fix
CVE-2026-8893Express Payment For Stripe WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-06Fix
CVE-2026-8839MapPress Maps for WordPress plugin unauthenticated insecure direct object reference5.3CNA v3.11.3%2026-06-06NucleiFix
CVE-2026-8611Klamra Paycal for Aspaclaria WordPress plugin insecure direct object reference4.3CNA v3.10.4%2026-06-06Fix
CVE-2026-8608Event Monster WordPress plugin insufficient verification of data authenticity5.3CNA v3.10.2%2026-06-06Fix
CVE-2026-8502LearnPress WordPress plugin unauthenticated sensitive information exposure5.3CNA v3.10.6%2026-06-06Fix
CVE-2026-8438All-In-One Security (AIOS) WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.6%2026-06-06Fix
CVE-2026-7796EmbedPress WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-06-06Fix
CVE-2026-7795Click to Chat WordPress plugin stored cross-site scripting6.4CNA v3.10.5%2026-06-06Fix
CVE-2026-7792WPForms WordPress plugin unauthenticated insufficient verification of data authenticity5.3CNA v3.10.3%2026-06-06Fix
CVE-2026-7665Essential Addons for Elementor WordPress plugin information disclosure5.3CNA v3.10.6%2026-06-06Fix
CVE-2026-7624SEO Plugin by Squirrly SEO WordPress plugin authorization bypass4.3CNA v3.10.5%2026-06-06Fix
CVE-2026-7566LearnPress Backup and Migration Tool WordPress plugin PHP object injection6.6CNA v3.10.8%2026-06-06Fix
CVE-2026-7565LearnPress WordPress plugin path traversal to arbitrary file read4.9CNA v3.11.0%2026-06-06Fix
CVE-2026-7537MDJM Event Management WordPress plugin arbitrary file upload7.2CNA v3.11.3%2026-06-06Exploit codeFix
CVE-2026-7047Frontend User Notes WordPress plugin cross-site request forgery to Note content modification4.3CNA v3.10.2%2026-06-06Fix
CVE-2026-6448Quiz and Survey Master (QSM) WordPress plugin SQL injection4.9CNA v3.10.6%2026-06-06Fix
CVE-2026-6242Authenticated format string vulnerability in ONVIF Subscribe service on TP-Link Tapo C520WS6.8CNA v4.00.3%2026-06-06Fix
CVE-2026-6241Authenticated format string vulnerability in ONVIF AddScopes method on TP-Link Tapo C520WS6.8CNA v4.00.3%2026-06-06Fix
CVE-2026-6240Authenticated stack-based buffer overflow in ONVIF DeleteUsers service on TP-Link Tapo C520WS6.8CNA v4.00.3%2026-06-06Fix
CVE-2026-6239Authenticated stack-based buffer overflow in ONVIF CreateUsers service in TP-Link Tao C520WS6.8CNA v4.00.3%2026-06-06Fix
CVE-2026-2500Quick Playground WordPress plugin arbitrary file read4.4CNA v3.10.3%2026-06-06Fix
CVE-2026-50733Markdown Preview Enhanced arbitrary code execution via WaveDrom eval8.6CNA v4.00.6%2026-06-05Fix
CVE-2026-50593Graphite integer underflow7.3CNA v3.10.2%2026-06-05Fix
CVE-2026-50592Znuny cross-site scripting6.4CNA v3.10.2%2026-06-05Fix
CVE-2026-50591Znuny cross-site scripting5.4CNA v3.10.2%2026-06-05Fix
CVE-2026-50590Mimecast Incydr incorrect permission assignment4.5CNA v3.10.1%2026-06-05Fix
CVE-2026-50264X.Org X server out-of-bounds write7.8CNA v3.10.2%2026-06-05Fix
CVE-2026-50263X.Org X server use-after-free5.5CNA v3.10.1%2026-06-05Fix
CVE-2026-50262X.Org X server out-of-bounds read5.5CNA v3.10.1%2026-06-05Fix
CVE-2026-50261X.Org X server use-after-free7.8CNA v3.10.2%2026-06-05Fix
CVE-2026-50260X.Org X server use-after-free7.8CNA v3.10.2%2026-06-05Fix
CVE-2026-50259X.Org X server stack-based buffer overflow7.8CNA v3.10.2%2026-06-05Fix
CVE-2026-50258X.Org X server stack-based buffer overflow7.8CNA v3.10.2%2026-06-05Fix
CVE-2026-50257X.Org X server use-after-free7.8CNA v3.10.2%2026-06-05Fix
CVE-2026-50256X.Org X server stack-based buffer overflow7.8CNA v3.10.2%2026-06-05Fix
CVE-2026-50235Lyrion Music Server reflected XSS via search parameters5.1CNA v4.00.3%2026-06-05
CVE-2026-50234Lyrion Music Server path traversal File Read8.7CNA v4.00.9%2026-06-05
CVE-2026-50233Lyrion Music Server arbitrary directory listing6.9CNA v4.00.5%2026-06-05
CVE-2026-50232Lyrion Music Server stored XSS via Metadata Tags5.1CNA v4.00.3%2026-06-05
CVE-2026-50231Lyrion Music Server Unauthenticated stored XSS via server.log5.1CNA v4.00.3%2026-06-05
CVE-2026-50230Lyrion Music Server reflected XSS via server.log5.1CNA v4.00.5%2026-06-05Nuclei
CVE-2026-49777Product Slider Pro for WooCommerce WordPress plugin backdoor10.0CNA v3.12.0%2026-06-05NucleiExploit codeFix
CVE-2026-49493Markdown Preview Enhanced arbitrary code execution via Bitfield interpretJS8.6CNA v4.00.6%2026-06-05Fix
CVE-2026-49492Markdown Preview Enhanced OS command injection in External file and Link Opening8.6CNA v4.00.5%2026-06-05Fix
CVE-2026-48907Widget Factory Joomla Content Editor improper access control9.8NVD v3.116.2%2026-06-05KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2026-48112GHSL-2026-122 7-Zip Ar SYMDEF OOB read6.5CNA v3.10.4%2026-06-05Fix
CVE-2026-48111GHSL-2026-121 7-Zip UEFI DEPEX OOB read7.1NVD v3.10.3%2026-06-05Fix
CVE-2026-48104GHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap read4.2CNA v3.10.2%2026-06-05Fix
CVE-2026-48103GHSL-2026-119 7-Zip WIM SecurityId OOB read7.1NVD v3.10.3%2026-06-05Fix
CVE-2026-48102GHSL-2026-118: 7-Zip UDF field OOB read4.3NVD v3.10.3%2026-06-05Fix
CVE-2026-48101GHSL-2026-117: 7-Zip UEFI Capsule uninitialized heap memory disclosure6.5CNA v3.10.4%2026-06-05Fix
CVE-2026-48095GHSL-2026-140_7-Zip: 7-Zip has a heap buffer overflow8.8CNA v3.10.6%2026-06-05Exploit codeFix
CVE-2026-480927-Zip SquashFS Fragment Offset Overflow (GHSL-2026-116)8.1NVD v3.10.5%2026-06-05Fix
CVE-2026-46511haxtheweb haxcms-nodejs HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack8.7CNA v4.00.5%2026-06-05Fix
CVE-2026-46496HAX CMS video-player element stored cross-site scripting9.3CNA v4.00.4%2026-06-05Fix
CVE-2026-46493Haxtheweb/haxcms-php uses insecure method for generating salt7.5CNA v3.10.5%2026-06-05Fix
CVE-2026-46401haxtheweb issues HAX CMS PHP has insufficient session expiration5.3CNA v4.00.5%2026-06-05Fix
CVE-2026-46400haxtheweb haxcms-php HAXCMS PHP has a file upload Validation Bypass8.7CNA v4.00.6%2026-06-05Fix
CVE-2026-46399haxtheweb haxcms-nodejs authenticated remote code execution via File Overwrite9.4CNA v4.00.5%2026-06-05Fix
CVE-2026-46398haxtheweb haxcms-php HAX CMS Missing Secure Flag on Cookie8.8CNA v4.00.3%2026-06-05Fix
CVE-2026-46397haxcms-php local file inclusion via saveOutline API Location parameter6.5CNA v3.10.4%2026-06-05Fix
CVE-2026-46396haxtheweb haxcms-nodejs HAX CMS has a stored XSS9.3CNA v4.00.4%2026-06-05Fix
CVE-2026-46395haxtheweb haxcms-nodejs HAX CMS vulnerable to Private key disclosure via Broken HMAC Implementation9.3CNA v4.00.3%2026-06-05Exploit codeFix
CVE-2026-46394haxtheweb haxcms-php HAX CMS vulnerable to command injection using Git.php7.7CNA v4.00.9%2026-06-05Exploit codeFix
CVE-2026-46393haxtheweb haxcms-nodejs HAXcms createSite SSRF enables arbitrary file read7.1CNA v4.00.4%2026-06-05Fix
CVE-2026-46392haxtheweb haxcms-php HAX CMS PHP has a stored XSS8.7CNA v3.10.4%2026-06-05Fix
CVE-2026-46391HAX open-apis: Credential Theft via server-side request forgery (SSRF) in open-apis8.7CNA v4.00.5%2026-06-05Exploit codeFix
CVE-2026-46390haxtheweb haxcms-php HAX CMS has Unauthenticated Git Access via User-Controlled Key6.9CNA v4.00.4%2026-06-05Fix
CVE-2026-46389Defense Unicorns UDS Identity Config Kubernetes secret client authenticator authentication bypass10.0CNA v3.10.6%2026-06-05Fix
CVE-2026-46357haxtheweb haxcms-nodejs HAX CMS NodeJS application vulnerable to denial of service6.5CNA v3.10.4%2026-06-05Fix
CVE-2026-45779Open XDMoD vulnerable to unauthenticated SQL injection leading to Full Database Compromise9.3CNA v4.00.9%2026-06-05Fix
CVE-2026-45778Open XDMoD vulnerable to reflected cross-site scripting (XSS) in Password Reset8.6CNA v4.00.2%2026-06-05Fix
CVE-2026-45777Open XDMoD vulnerable to unauthenticated remote code execution (RCE) via OS command injection9.3CNA v4.00.7%2026-06-05Fix
CVE-2026-45776Open XDMoD has broken access control via Client-Controlled Session variable5.3CNA v4.00.4%2026-06-05Fix
CVE-2026-45758guardrails malicious code in guardrails-ai (supply chain compromise)9.6CNA v3.10.5%2026-06-05Fix
CVE-2026-45750Termix vulnerable to arbitrary command execution in File Manager9.0CNA v3.10.4%2026-06-05Fix
CVE-2026-45749Termix's TOTP two-factor authentication can be disabled or bypassed using only the account password8.1CNA v3.10.5%2026-06-05Fix
CVE-2026-45748Termix vulnerable to remote code execution via SSH Tunnel Forward command injection9.8CNA v3.12.5%2026-06-05Fix
CVE-2026-45746Termix vulnerable to arbitrary command execution via session hijacking9.0CNA v3.10.6%2026-06-05Exploit codeFix
CVE-2026-45745Termix Electron desktop client improper certificate validation8.0CNA v3.10.2%2026-06-05
CVE-2026-45744Termix has an OS command injection in File Manager resolvePath endpoint9.9CNA v3.13.0%2026-06-05Fix
CVE-2026-45743Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)8.1CNA v3.10.4%2026-06-05Fix
CVE-2026-45409idna encode function denial of service6.9CNA v4.00.5%2026-06-05Fix
CVE-2026-45327TinyIce: Missing authentication on WebRTC ingest endpoint allows unauthorized stream injection8.2CNA v3.10.6%2026-06-05Fix
CVE-2026-45300AsyncHttpClient redirect header handling information disclosure7.4CNA v3.10.5%2026-06-05Fix
CVE-2026-45291Cloudburst Network erroneously handles invalid connections7.5CNA v3.10.5%2026-06-05Fix
CVE-2026-45290Cloudburst Network has DoS in RakNet connection handling due to missing bound checks7.5CNA v3.10.5%2026-06-05Fix
CVE-2026-41567Docker Engine archive extraction uncontrolled search path7.2CNA v3.10.2%2026-06-05Exploit codeFix
CVE-2026-38579damasac thaipalliative_lte Multiple reflected cross-site scripting6.1CISA ADP v3.10.3%2026-06-05
CVE-2026-37737Sanic-cors contains an improper regular expression in the try_match function6.5CISA ADP v3.10.2%2026-06-05
CVE-2026-36785Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the page parameter of the fromDhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.7.5CISA ADP v3.10.6%2026-06-05
CVE-2026-36501Controller Externalizable.readExternal denial of service7.5CISA ADP v3.10.5%2026-06-05
CVE-2026-36500Controller backup-datastore component path traversal9.1CISA ADP v3.11.1%2026-06-05
CVE-2026-25659Ericsson Packet Core Gateway (PCG) Improper handling of missing values vulnerability7.1CNA v4.00.3%2026-06-05Fix
CVE-2026-25658Ericsson Packet Core Gateway (PCG) Improper handling of missing values vulnerability7.1CNA v4.00.3%2026-06-05Fix
CVE-2026-25657Ericsson Packet Core Gateway Improper Handling of Syntactically Invalid Structure vulnerability7.1CNA v4.00.3%2026-06-05Fix
CVE-2026-25624Arista Edge Threat Management NGFW UI Administrative cross-site scripting5.8CNA v4.00.3%2026-06-05Fix
CVE-2026-25623Arista Edge Threat Management NGFW UI arbitrary command execution7.0CNA v4.00.6%2026-06-05Fix
CVE-2026-25622Arista Edge Threat Management NGFW Captive Portal Custom handler command injection7.0CNA v4.01.0%2026-06-05Fix
CVE-2026-25621Arista Edge Threat Management NGFW Reports Application Insecure Input Validation7.0CNA v4.00.4%2026-06-05Fix
CVE-2026-25620Arista Edge Threat Management NGFW Captive Portal Encrypted Password command injection7.0CNA v4.01.0%2026-06-05Fix
CVE-2026-21837HCL Digital Experience Digital Asset Management API OS command injection8.7CNA v4.00.9%2026-06-05Fix