CVE-2026 list

CVE-2026 records published in June 2026

Page seven of eight: records 6,001 to 7,000 of the 7,316 published in June 2026, newest first. The first page carries the figures for June 2026.

CVE-2026 records published in June 2026, newest first: records 6,001 to 7,000 of 7,316
CVE Summary CVSS EPSS Published Signals
CVE-2026-21826HCL Software Digital Experience and DX Compose open redirect6.1CNA v3.10.1%2026-06-05Fix
CVE-2026-21825HCL Digital Experience Compose search center reflected cross-site scripting6.1CNA v3.10.2%2026-06-05Fix
CVE-2026-21038Samsung Mobile Samsung Android USB Driver improper input validation5.9CNA v4.00.1%2026-06-05Fix
CVE-2026-21037Samsung Mobile Samsung Members improper input validation6.9CNA v4.00.1%2026-06-05Fix
CVE-2026-21036Samsung Mobile Samsung Internet improper authorization6.3CNA v4.00.1%2026-06-05Fix
CVE-2026-21035Samsung Mobile Samsung Plus TV improper input validation6.5CNA v4.00.3%2026-06-05Fix
CVE-2026-21034Samsung Mobile Samsung Auto improper export of Android application components4.8CNA v4.00.1%2026-06-05Fix
CVE-2026-21033Samsung Mobile Samsung Assistant improper export of Android application components6.9CNA v4.00.1%2026-06-05Fix
CVE-2026-21032Samsung Mobile Samsung Assistant improper export of Android application components6.9CNA v4.00.1%2026-06-05Fix
CVE-2026-21031Samsung Mobile Devices AppBlock improper authorization5.2CNA v4.00.1%2026-06-05Fix
CVE-2026-21030Samsung Mobile Devices MediaTek Audio HAL improper access control6.4CNA v4.00.1%2026-06-05Fix
CVE-2026-21029Samsung Mobile Devices Galaxy Editing service improper export of Android application components6.8CNA v4.00.1%2026-06-05Fix
CVE-2026-21028Samsung Mobile Devices AuditLogService improper access control5.1CNA v4.00.1%2026-06-05Fix
CVE-2026-21027Samsung Mobile Devices ImsSettings improper export of Android application components4.8CNA v4.00.1%2026-06-05Fix
CVE-2026-21026Samsung Mobile Devices SpriteWallpaper improper export of Android application components6.4CNA v4.00.1%2026-06-05Fix
CVE-2026-21025Samsung Mobile Devices Telephony incorrect privilege assignment6.9CNA v4.00.1%2026-06-05Fix
CVE-2026-21017Samsung Mobile Devices SecTelephonyProvider improper handling of insufficient privileges4.6CNA v4.00.1%2026-06-05Fix
CVE-2026-11431Path traversal in Altium Projects service allows arbitrary file read8.3CNA v4.00.5%2026-06-05Fix
CVE-2026-11429Path traversal in Altium Vault ScriptsController allows unauthenticated remote code execution10.0CNA v4.01.1%2026-06-05Fix
CVE-2026-11424Server-side request forgery in Altium Platform Design GraphQL service allows information disclosure8.3CNA v4.00.2%2026-06-05Fix
CVE-2026-11423Path traversal in Altium Enterprise Server Collaboration service allows privilege escalation9.4CNA v4.00.3%2026-06-05Fix
CVE-2026-11422Markdown Preview Enhanced.x code injection via WaveDrom Rendering8.4CNA v4.00.2%2026-06-05Fix
CVE-2026-11420Altium Enterprise Server Network Installation service path traversal10.0CNA v4.00.7%2026-06-05Fix
CVE-2026-11419Path traversal in Altium Enterprise Server Vault UploadController allows arbitrary file write9.4CNA v4.00.5%2026-06-05Fix
CVE-2026-11416MoviePilot path traversal via Cloud Storage Download Handlers7.2CNA v4.00.5%2026-06-05Fix
CVE-2026-11414Altium Enterprise Server Vault service hard-coded cryptographic key10.0CNA v4.00.5%2026-06-05Fix
CVE-2026-11401Privilege escalation in AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL8.6CNA v4.00.3%2026-06-05Fix
CVE-2026-11400Privilege escalation in AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL8.6CNA v4.00.4%2026-06-05Fix
CVE-2026-11369linqi IDOR in Comment API allows Cross-Process Comment Read and Write7.1CNA v4.00.2%2026-06-05Fix
CVE-2026-11362DataDog::DogStatsd versions for Perl allow metric injections from event tags9.8CISA ADP v3.10.4%2026-06-05
CVE-2026-11347Hard-coded cryptographic keys and Weak IV Generation in linqi8.5CNA v4.00.1%2026-06-05Fix
CVE-2026-11346Server-side request forgery (SSRF) allowing Internal Network Probing in linqi5.3CNA v4.00.2%2026-06-05Fix
CVE-2026-11345Improper authentication Bypass in linqi CDN File Access6.9CNA v4.00.4%2026-06-05Fix
CVE-2026-11344code-projects Vehicle Management System new driver registration form unrestricted file upload6.9CNA v4.00.4%2026-06-05
CVE-2026-11342code-projects Hotel and Tourism Reservation System details.php SQL injection6.9CNA v4.00.3%2026-06-05
CVE-2026-11341D-Link DWR-M920 formIMEISetup sub_412DA0 os command injection5.3CNA v4.01.0%2026-06-05
CVE-2026-11339D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection8.8v3.13.1%2026-06-05
CVE-2026-11338SourceCodester Ship Ferry Ticket Reservation System manage_user cross-site scripting4.8CNA v4.00.2%2026-06-05
CVE-2026-11337tittuvarghese CollegeManagementSystem fetch.php cross-site scripting5.3CNA v4.00.3%2026-06-05
CVE-2026-11336tittuvarghese CollegeManagementSystem Admin admin_page.php improper authorization5.3CNA v4.00.2%2026-06-05
CVE-2026-11335tittuvarghese CollegeManagementSystem login-form.php session_start session fixiation5.3CNA v4.00.2%2026-06-05
CVE-2026-11334tittuvarghese CollegeManagementSystem fetch.php SQL injection6.9CNA v4.00.3%2026-06-05
CVE-2026-11333CollegeManagementSystem student data upload endpoint unrestricted file upload5.3CNA v4.00.2%2026-06-05
CVE-2026-11332Red Hat Ansible Automation Platform ansible-galaxy role install argument injection7.8CNA v3.10.2%2026-06-05Fix
CVE-2026-11330thedotmack claude-mem Observation Content Hash store.ts computeObservationContentHash weak hash2.0CNA v4.00.1%2026-06-05Fix
CVE-2026-11329onnx-mlir weak cryptographic algorithm2.0CNA v4.00.1%2026-06-05
CVE-2026-11326OpenAI Atlas cross-site scripting6.0CNA v4.00.2%2026-06-05Fix
CVE-2026-11312ByteDance InfiniStore KV Map InfiniStore.h purge_kv_map algorithmic complexity4.8CNA v4.00.1%2026-06-05
CVE-2026-11309Google Chrome History insufficient policy enforcement4.3CISA ADP v3.10.1%2026-06-05Fix
CVE-2026-11308Google Chrome extensions inappropriate implementation6.3CISA ADP v3.10.1%2026-06-05Fix
CVE-2026-11307Google Chrome PDFium use-after-free8.8CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11306Google Chrome PDFium use-after-free8.8CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11305Google Chrome PDFium use-after-free8.8CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11304Google Chrome PDFium use-after-free8.8CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11303Google Chrome PDFium use-after-free8.8CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11302Google Chrome Chrome for iOS insufficient policy enforcement4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11301Google Chrome LiveCaption inappropriate implementation8.8CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11300Google Chrome Permissions inappropriate implementation4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11299Google Chrome Fonts integer overflow6.5CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11298Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11297Google Chrome improper input validation7.7CISA ADP v3.10.1%2026-06-05Fix
CVE-2026-11296Google Chrome ImageCapture inappropriate implementation7.5CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11295Google Chrome WebView inappropriate implementation8.8CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11294Google Chrome Passwords inappropriate implementation4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11293Google Chrome Input use-after-free9.6CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11292Google Chrome Blink insufficient policy enforcement4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11291Google Chrome Android Autofill inappropriate implementation4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11290Google Chrome WebView integer overflow5.0CISA ADP v3.10.1%2026-06-05Fix
CVE-2026-11289Google Chrome Paint side-channel information leak6.5CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11288Google Chrome CSS insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11287Google Chrome Navigation insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11286Google Chrome spoofing4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11285Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11284Google Chrome PerformanceAPIs side-channel information leak6.5CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11283Google Chrome improper input validation6.5CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11282Google Chrome Sandbox insufficient policy enforcement9.6CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11281Google Chrome Chromoting integer overflow5.0CISA ADP v3.10.1%2026-06-05Fix
CVE-2026-11280Google Chrome Signin inappropriate implementation4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11279Google Chrome DevTools out-of-bounds read8.8CISA ADP v3.10.3%2026-06-05Fix
CVE-2026-11278Google Chrome CustomTabs inappropriate implementation6.5CISA ADP v3.10.1%2026-06-05Fix
CVE-2026-11277Google Chrome Chrome for iOS insufficient policy enforcement4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11276Google Chrome Cast inappropriate implementation5.1CISA ADP v3.10.1%2026-06-05Fix
CVE-2026-11275Google Chrome Page Info inappropriate implementation6.5CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11274Google Chrome DOM Distiller inappropriate implementation4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11273Google Chrome improper input validation6.1CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11272Google Chrome privilege escalation8.8CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11271Google Chrome Passwords inappropriate implementation6.5CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11270Google Chrome UI inappropriate implementation6.5CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11269Google Chrome extensions inappropriate implementation7.1CISA ADP v3.10.1%2026-06-05Fix
CVE-2026-11268Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-05Fix
CVE-2026-11267Google Chrome extensions insufficient policy enforcement4.3CISA ADP v3.10.1%2026-06-05Fix
CVE-2026-11266Google Chrome SafeBrowsing inappropriate implementation4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11265Google Chrome Autofill inappropriate implementation7.5CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11264Google Chrome protection mechanism failure4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11263Google Chrome WebAuthentication insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-05Fix
CVE-2026-11262Google Chrome TabStrip use-after-free8.8CISA ADP v3.10.3%2026-06-05Fix
CVE-2026-11261Google Chrome PDF inappropriate implementation4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11260Google Chrome Permissions inappropriate implementation4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11259Google Chrome improper input validation4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11258Google Chrome File System Access inappropriate implementation6.5CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11257Google Chrome Browser inappropriate implementation4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11256Google Chrome GPU integer overflow8.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11255Google Chrome improper input validation7.5CISA ADP v3.10.3%2026-06-05Fix
CVE-2026-11254Google Chrome Permissions inappropriate implementation4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11253Google Chrome Permissions inappropriate implementation4.3CISA ADP v3.10.1%2026-06-05Fix
CVE-2026-11252Google Chrome Content settings insufficient policy enforcement4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11251Google Chrome Password Manager insufficient policy enforcement3.1CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11250Google Chrome DevTools inappropriate implementation9.6CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11249Google Chrome Network use-after-free4.7CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11248Google Chrome Google Lens inappropriate implementation8.8CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11247Google Chrome CustomTabs insufficient policy enforcement3.1CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11246Google Chrome improper input validation5.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11245Google Chrome Payments inappropriate implementation4.3CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11244Google Chrome improper input validation3.1CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11243Google Chrome Downloads inappropriate implementation5.4CISA ADP v3.10.1%2026-06-05Fix
CVE-2026-11242Google Chrome improper input validation7.5CISA ADP v3.10.3%2026-06-05Fix
CVE-2026-11241Google Chrome privilege escalation8.0CISA ADP v3.10.1%2026-06-05Fix
CVE-2026-11240Google Chrome improper input validation3.1CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11239Google Chrome extensions inappropriate implementation7.5CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-11238Google Chrome DevTools inappropriate implementation5.9CISA ADP v3.10.2%2026-06-05Fix
CVE-2026-10879DBI versions for Perl have a heap overflow when preparsing SQL statements with more than 9 binders9.8CISA ADP v3.10.5%2026-06-05Fix
CVE-2026-10878D-Link DWR-M920 formSmsManage sub_41C8E8 command injection8.8v3.14.2%2026-06-05
CVE-2026-10877SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php SQL injection6.9CNA v4.00.3%2026-06-05
CVE-2026-10876SourceCodester Ship Ferry Ticket Reservation System admin improper authorization5.3CNA v4.00.3%2026-06-05
CVE-2026-10732decompress path traversal6.1CNA v4.00.5%2026-06-05
CVE-2026-10586Gutenberg Essential Blocks WordPress plugin server-side request forgery7.2CNA v3.10.3%2026-06-05Fix
CVE-2026-10580Hippoo Mobile App for WooCommerce WordPress plugin authentication bypass9.8CNA v3.12.9%2026-06-05NucleiExploit codeFix
CVE-2026-9270DataDog::DogStatsd versions for Perl allow metric injections9.1CISA ADP v3.10.5%2026-06-05
CVE-2026-9088Keycloak: Keycloak: Information disclosure due to user profile permission bypass2.7CNA v3.10.5%2026-06-05Fix
CVE-2026-8914Teltonika Networks RUTOS command injection in Profile change function8.4CNA v4.00.6%2026-06-05
CVE-2026-8714Denial of service vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS7.1CNA v4.00.3%2026-06-05Fix
CVE-2026-7763Morse Micro HaLowLink 2 heap buffer overflow in morse.ko TIM IE processing9.8CISA ADP v3.11.0%2026-06-05Fix
CVE-2026-7762Morse Micro HaLowLink 2 heap buffer overflow in dot11ah.ko S1G Capabilities IE processing9.8CISA ADP v3.11.0%2026-06-05Fix
CVE-2026-7654Admin Columns WordPress plugin PHP object injection to remote code execution8.8CNA v3.11.2%2026-06-05Exploit codeFix
CVE-2026-7523Alba Board WordPress plugin missing authorization authenticated sensitive information disclosure4.3CNA v3.10.4%2026-06-05Fix
CVE-2026-7473Arista Extensible Operating System incomplete comparison6.9CNA v4.00.6%2026-06-05KEVExploit codeFix
CVE-2026-6274Authentication bypass in DTS Electronics' Redline WR32009.8CNA v3.10.6%2026-06-05Exploit codeFix
CVE-2026-5415WP Captcha PRO WordPress plugin authentication bypass8.8CNA v3.10.6%2026-06-05Exploit codeFix
CVE-2026-5411WP Captcha PRO WordPress plugin arbitrary file upload8.8CNA v3.10.8%2026-06-05Exploit codeFix
CVE-2026-2379Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabled8.2CNA v4.00.2%2026-06-05Fix
CVE-2026-50589OpenStack Ironic resource exhaustion7.5v3.10.4%2026-06-04Fix
CVE-2026-50292Freedesktop libinput CRLF injection9.8v3.10.3%2026-06-04Fix
CVE-2026-50266OpenStack Neutron incorrect authorization2.2CNA v3.10.4%2026-06-04Fix
CVE-2026-50226Firmware Theft and IMEI spoofing via Connect-OTA6.9CNA v4.00.3%2026-06-04Fix
CVE-2026-50225Acer Connect M6E 5G Portable WiFi Router Account Creation Exhaustion8.8CNA v4.00.4%2026-06-04Fix
CVE-2026-50224Acer Connect M6E 5G Portable WiFi Router Unauthenticated IPv6 WAN Management Exposure6.9CNA v4.00.4%2026-06-04Fix
CVE-2026-50219libexpat use-after-free5.9v3.10.2%2026-06-04Fix
CVE-2026-50214Acer Connect M6E 5G Portable WiFi Router Shared Secret Quota Inflation9.3CNA v4.00.3%2026-06-04Fix
CVE-2026-50213Acer Connect M6E 5G Portable WiFi Router Bulk User Private Data Harvesting8.7CNA v4.00.4%2026-06-04Fix
CVE-2026-50212Acer Connect M6E 5G Portable WiFi Router Arbitrary Remote Device Unbinding7.1CNA v4.00.3%2026-06-04Fix
CVE-2026-50211Acer Connect M6E 5G Portable WiFi Router Exposed Factory Testing App Boundaries8.8CNA v4.00.5%2026-06-04Fix
CVE-2026-50210Acer Connect M6E 5G Portable WiFi Router Weak Static Cryptographic Initialization Vectors6.9CNA v4.00.4%2026-06-04Fix
CVE-2026-50209Acer Connect M6E 5G Portable WiFi Router MDM Server Registration Overriding9.3CNA v4.00.1%2026-06-04Fix
CVE-2026-50208Acer Connect M6E 5G Portable WiFi Router permissive TrustAllCerts TLS Verification9.2CNA v4.00.2%2026-06-04Fix
CVE-2026-50207Acer Connect M6E 5G Portable WiFi Router Local Modem Manipulation via Binder Interfaces8.5CNA v4.00.2%2026-06-04Fix
CVE-2026-50206Acer Connect M6E 5G Portable WiFi Router VPN command injection8.5CNA v4.01.6%2026-06-04Fix
CVE-2026-50205Acer Connect M6E 5G Portable WiFi Router plaintext Log credential leakage8.8CNA v4.00.4%2026-06-04Fix
CVE-2026-50076Apache Fory: Java ReplaceResolverSerializer deserialization checks bypass9.1CISA ADP v3.10.7%2026-06-04Fix
CVE-2026-49942Net::CIDR::Set versions for Perl did not validate network masks7.3CISA ADP v3.10.5%2026-06-04Fix
CVE-2026-49941Net::CIDR::Set versions for Perl did not validate IP addresses7.5CISA ADP v3.10.5%2026-06-04Fix
CVE-2026-49940Net::CIDR::Set versions for Perl accept non-ASCII IP addresses and netmasks6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-49771Photo Gallery by 10Web WordPress plugin SQL injection7.6CNA v3.10.4%2026-06-04Fix
CVE-2026-49510Samsung Open Source rlottie integer overflow6.1CNA v3.10.1%2026-06-04Fix
CVE-2026-49204Acer Connect M6E 5G Portable WiFi Router Hard-coded AWS Cognito Testing Accounts6.9CNA v4.00.3%2026-06-04Fix
CVE-2026-49203Acer Connect M6E 5G Portable WiFi Router Unauthenticated eSIM Configuration Manipulation7.2CNA v4.00.3%2026-06-04Fix
CVE-2026-49202Acer Connect M6E 5G Portable WiFi Router Unverified Meeting Recording endpoints and Permissive CORS8.8CNA v4.00.5%2026-06-04Fix
CVE-2026-49194Acer Connect M6E 5G Portable WiFi Router SCREEN_CLICK authentication bypass9.4CNA v4.00.4%2026-06-04Fix
CVE-2026-49193Acer Connect M6E 5G Portable WiFi Router Publicly Readable AWS S3 Telemetry Buckets8.7CNA v4.00.4%2026-06-04Fix
CVE-2026-49192Acer Connect M6E 5G Portable WiFi Router summary service insecure direct object reference5.3CNA v4.00.2%2026-06-04Fix
CVE-2026-49191Acer Connect M6E 5G Portable WiFi Router Exposed Hard-coded M3WebServer Backend API Key9.3CNA v4.00.5%2026-06-04Fix
CVE-2026-49190Acer Connect M6E 5G Portable WiFi Router Missing Per-Instruction Authorization Checks9.4CNA v4.00.8%2026-06-04Fix
CVE-2026-49189Acer Connect M6E 5G Portable WiFi Router broadcast Receiver privilege escalation8.5CNA v4.00.1%2026-06-04Fix
CVE-2026-49188Acer Connect M6E 5G Portable WiFi Router Elevated Root command execution via ai_cmd Sockets8.7CNA v4.00.6%2026-06-04Fix
CVE-2026-49187Acer Connect M6E 5G Portable WiFi Router Hard-coded APK Resource Credentials and Scepters8.7CNA v4.00.4%2026-06-04Fix
CVE-2026-49186Acer Connect M6E 5G Portable WiFi Router Lack of MQTT Broker Topic Access Control Lists8.6CNA v4.00.5%2026-06-04Fix
CVE-2026-49185Acer Connect M6E 5G Portable WiFi Router instruction injection via FieldX MDM10.0CNA v4.00.6%2026-06-04Fix
CVE-2026-49077WP eMember WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-06-04
CVE-2026-48681OpenStack Ironic relative path traversal8.1v3.10.6%2026-06-04Fix
CVE-2026-48579Microsoft Exchange Online information disclosure9.1CNA v3.11.0%2026-06-04Fix
CVE-2026-48567Microsoft Azure HorizonDB elevation of privilege10.0CNA v3.10.9%2026-06-04Fix
CVE-2026-48480netty-incubator-codec-ohttp chunked OHTTP codec vulnerability6.6CNA v4.00.3%2026-06-04Fix
CVE-2026-48040netty-incubator-codec-ohttp pooled direct ByteBuf native pointer derivation vulnerability6.8CNA v4.00.3%2026-06-04Fix
CVE-2026-47707Strawberry GraphQL MaxAliasesLimiter alias limiting denial of service5.3CNA v3.10.7%2026-06-04Fix
CVE-2026-47706Strawberry GraphQL has a Circular Fragment Reference DOS5.3CNA v3.10.4%2026-06-04Fix
CVE-2026-47655Microsoft Graph information disclosure6.5CNA v3.11.0%2026-06-04Fix
CVE-2026-47644Copilot Chat (Microsoft Edge) information disclosure6.5CNA v3.10.9%2026-06-04Fix
CVE-2026-47320Samsung Open Source rlottie uncontrolled recursion6.1CNA v3.10.1%2026-06-04Fix
CVE-2026-47319Samsung Open Source rlottie excessive memory allocation6.1CNA v3.10.1%2026-06-04Fix
CVE-2026-47318Samsung Open Source rlottie stack-based buffer overflow6.1CNA v3.10.1%2026-06-04Fix
CVE-2026-47306Samsung Open Source rlottie uncontrolled recursion6.1CNA v3.10.1%2026-06-04Fix
CVE-2026-46741Etsy::StatsD versions for Perl allow metric injections7.5CISA ADP v3.10.4%2026-06-04
CVE-2026-46739Net::Statsd versions for Perl allow metric injections5.3CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-45739Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs3.1CNA v3.10.4%2026-06-04Fix
CVE-2026-45497Microsoft M365 CoPilot remote code execution7.7CNA v3.10.6%2026-06-04Fix
CVE-2026-45433Hard-coded cryptographic key vulnerability in GX Earth ONT Models8.7CNA v4.00.5%2026-06-04Fix
CVE-2026-45432Cleartext transmission of Credentials vulnerability in GX Earth ONT Models8.7CNA v4.00.4%2026-06-04Fix
CVE-2026-45431Command injection vulnerability in GX Earth ONT Models8.7CNA v4.00.6%2026-06-04Fix
CVE-2026-45287OpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parse2.1CNA v4.00.2%2026-06-04Fix
CVE-2026-44917OpenStack Ironic incorrect resource transfer4.9CNA v3.10.5%2026-06-04Fix
CVE-2026-44393OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake7.4CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-43986Tautulli image hash lookup server-side request forgery9.9CNA v3.10.4%2026-06-04Fix
CVE-2026-43985Tautulli taultulli has CSRF in /configUpdate8.8CNA v3.10.2%2026-06-04Fix
CVE-2026-43984Tautulli has stored XSS in logFile via guest-controlled log_js_errors input8.9CNA v3.10.4%2026-06-04Fix
CVE-2026-43926FOSSBilling's password reset confirmation endpoint lacks rate limiting6.3CNA v4.00.3%2026-06-04Fix
CVE-2026-42824M365 CoPilot information disclosure6.5CNA v3.10.9%2026-06-04Fix
CVE-2026-42547dfir-iris iris-web IRIS Alerts can be Falsely Attributed to Customers5.4CNA v3.10.3%2026-06-04Fix
CVE-2026-42543dfir-iris iris-web IRIS has a cross-site request forgery (CSRF) issue4.3CNA v3.10.3%2026-06-04Fix
CVE-2026-42540dfir-iris iris-web IRIS has a mass assignment issue4.3CNA v3.10.3%2026-06-04Fix
CVE-2026-42539dfir-iris iris-web IRIS has an Excessive data exposure issue6.5CNA v3.10.4%2026-06-04Fix
CVE-2026-42538dfir-iris iris-web IRIS has an insecure file upload6.3CNA v3.10.3%2026-06-04Fix
CVE-2026-42329dfir-iris iris-web iris has an open redirect issue4.7CNA v3.10.3%2026-06-04Fix
CVE-2026-41860Cloud Foundry Foundation BOSH inadequate encryption strength7.1CNA v4.00.1%2026-06-04
CVE-2026-41859Cloud Foundry Foundation BOSH improper certificate validation7.1CNA v4.00.1%2026-06-04
CVE-2026-41858Cloud Foundry Foundation windows-utilities-release weak random number generator6.5CNA v3.10.4%2026-06-04
CVE-2026-41522dfir-iris iris-web iris has an improper authorization issue7.1CNA v4.00.4%2026-06-04Fix
CVE-2026-41518Chartbrew has a stored DOM XSS via Chart Tooltip innerHTML (ChartDatasetConfig.legend)7.6CNA v3.10.3%2026-06-04Fix
CVE-2026-41283OpenStack Mistral allows arbitrary remote code execution when the API is exposed9.9CNA v3.10.9%2026-06-04Fix
CVE-2026-41249CoreShop vulnerable to remote code execution (RCE) via Insecure `pull_request_target` Configuration8.2CNA v3.10.5%2026-06-04Exploit code
CVE-2026-41237Froxlor DNS record validators injection8.6CNA v4.00.5%2026-06-04Fix
CVE-2026-41236Froxlor has privilege escalation in SSH key synchronization via symlinked `authorized_keys` path8.8CNA v3.10.6%2026-06-04Fix
CVE-2026-41235Froxlor has an authorization bypass in FTP shell assignment8.6CNA v4.00.4%2026-06-04Fix
CVE-2026-41234Froxlor: BIND Zone file injection via TXT Record Content7.6CNA v3.10.5%2026-06-04Fix
CVE-2026-41207Netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures6.9CNA v4.00.3%2026-06-04Fix
CVE-2026-41178OpenTelemetry-Go's baggage parsing no longer caps raw header length5.3CNA v3.10.3%2026-06-04Fix
CVE-2026-41065Tautulli vulnerable to Unauthenticated/authenticated remote code execution8.9CNA v4.00.7%2026-06-04Fix
CVE-2026-41011Cloud Foundry Foundation BOSH OS command injection8.7CNA v4.00.2%2026-06-04
CVE-2026-41010Cloud Foundry Foundation BOSH Director OS command injection8.7CNA v4.00.2%2026-06-04
CVE-2026-40930LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body5.4CNA v3.10.4%2026-06-04Fix
CVE-2026-40898quic-go HTTP/3 QPACK trailer decoding resource exhaustion5.3CNA v3.10.5%2026-06-04Fix
CVE-2026-40605Tautulli vulnerable to authenticated path traversal in Cache Deletion API5.7CNA v4.00.5%2026-06-04Fix
CVE-2026-38570bacnet_stack BACnet tag number decoder out-of-bounds read7.5CISA ADP v3.10.5%2026-06-04
CVE-2026-36499Open vSwitch udpif_set_threads function resource exhaustion6.5CISA ADP v3.10.4%2026-06-04
CVE-2026-36182GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack.9.8CISA ADP v3.10.3%2026-06-04
CVE-2026-36180A lack of runtime integrity in GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass file system read-only protections and modify system files and binaries for the duration of a boot session via a bind-mount attack.4.6CISA ADP v3.10.2%2026-06-04
CVE-2026-36178GNCC GP5 factory reset function information disclosure4.6CISA ADP v3.10.2%2026-06-04
CVE-2026-36176GNCC GP5 serial console cleartext storage of sensitive information7.1CISA ADP v3.10.1%2026-06-04
CVE-2026-36175GNCC GP5 U-Boot authentication bypass6.8CISA ADP v3.10.3%2026-06-04
CVE-2026-36174GNCC GP5 serial console vulnerability4.6CISA ADP v3.10.2%2026-06-04
CVE-2026-35906An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated attackers to execute arbitrary system commands as root via supplying a crafted HTTP query string.9.6CISA ADP v3.10.8%2026-06-04
CVE-2026-35905T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root access under the "superadmin" account.9.8CISA ADP v3.10.6%2026-06-04KCV
CVE-2026-35904Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component.9.8CISA ADP v3.10.7%2026-06-04KCV
CVE-2026-28318SolarWinds Serv-U uncontrolled resource consumption7.5CNA v3.143.7%2026-06-04KEVExploit codeFix
CVE-2026-25551Seagull Software BarTender deserialization privilege escalation via .NET Remoting service8.5CNA v4.00.4%2026-06-04Fix
CVE-2026-25550Seagull Software BarTender unauthenticated RCE via .NET Remoting service9.3CNA v4.01.4%2026-06-04Fix
CVE-2026-21404Navtor NavBox use of hard-coded credentials5.8CNA v4.00.1%2026-06-04Fix
CVE-2026-20245Cisco Catalyst SD-WAN Manager improper encoding or escaping of output7.8CNA v3.125.3%2026-06-04KEVExploit codeKCVFix
CVE-2026-11322nesquena hermes-webui Hermes WebUI path traversal via Symlink Workspace Bypass7.1CNA v4.00.3%2026-06-04Fix
CVE-2026-11237Google Chrome spoofing8.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11236Google Chrome Web Bluetooth insufficient policy enforcement8.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11235Google Chrome Compositing insufficient policy enforcement8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11234Google Chrome FoldableAPIs inappropriate implementation4.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11233Google Chrome FoldableAPIs insufficient policy enforcement4.7CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11232Google Chrome TabGroups inappropriate implementation5.4CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-11231Google Chrome Safe Browsing inappropriate implementation8.1CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11230Google Chrome extensions use-after-free8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11229Google Chrome Enterprise inappropriate implementation6.1CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-11228Google Chrome File Input inappropriate implementation4.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11227Google Chrome Tab Hover Cards incorrect security UI6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11226Google Chrome PreviewTab insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11225Google Chrome WebUI inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11224Google Chrome Chromoting use-after-free8.1CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11223Google Chrome improper input validation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11222Google Chrome Tab Strip incorrect security UI6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11221Google Chrome spoofing4.3CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-11220Google Chrome improper input validation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11219Google Chrome Navigation inappropriate implementation4.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11218Google Chrome PlatformIntegration inappropriate implementation6.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11217Google Chrome Fenced Frames inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11216Google Chrome File Input incorrect security UI4.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11215Google Chrome Cronet inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11214Google Chrome Chrome for iOS inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11213Google Chrome sandbox escape9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11212Google Chrome DevTools insufficient policy enforcement4.3CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-11211Google Chrome V8 integer overflow8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11210Google Chrome Safe Browsing inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11209Google Chrome Passwords inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11208Google Chrome Codecs use-after-free6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11207Google Chrome sandbox escape9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11206Google Chrome ServiceWorker insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11205Google Chrome improper input validation6.1CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-11204Google Chrome Signin inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11203Google Chrome GPU inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11202Google Chrome Chrome for iOS inappropriate implementation8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11201Google Chrome ServiceWorker use-after-free8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11200Google Chrome WebRTC inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11199Google Chrome WebRTC inappropriate implementation5.9CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11198Google Chrome sandbox escape9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11197Google Chrome Workers insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11196Google Chrome XML type confusion6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11195Google Chrome MHTML inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11194Google Chrome Network inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11193Google Chrome Password Manager insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11192Google Chrome spoofing4.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11191Google Chrome ANGLE out-of-bounds access8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11190Google Chrome extensions inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11189Google Chrome improper input validation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11188Google Chrome USB use-after-free8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11187Google Chrome Glic inappropriate implementation6.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11186Google Chrome CSS inappropriate implementation6.1CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11185Google Chrome V8 use-after-free8.1CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11184Google Chrome Actor insufficient policy enforcement6.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11183Google Chrome GWP-ASan out-of-bounds read6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11182Google Chrome SVG inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11181Google Chrome Media Session inappropriate implementation6.3CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-11180Google Chrome SVG inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11179Google Chrome ORB inappropriate implementation8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11178Google Chrome WebView insufficient policy enforcement4.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11177Google Chrome Omnibox use-after-free8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11176Google Chrome Media inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11175Google Chrome messages incorrect security UI8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11174Google Chrome Site Isolation inappropriate implementation5.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11173Google Chrome V8 out-of-bounds write8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11172Google Chrome Contact Picker incorrect security UI8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11171Google Chrome Blink integer overflow8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11170Google Chrome Chromoting inappropriate implementation8.1CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11169Google Chrome XML inappropriate implementation8.1CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11168Google Chrome extensions inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11167Google Chrome WebView inappropriate implementation9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11166Google Chrome SVG inappropriate implementation6.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11165Google Chrome WebMIDI use-after-free9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11164Google Chrome Blink use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11163Google Chrome messages use-after-free9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11162Google Chrome CSS inappropriate implementation4.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11161Google Chrome DataTransfer inappropriate implementation4.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11160Google Chrome Input out-of-bounds read6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11159Google Chrome uninitialized variable use4.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11158Google Chrome sandbox escape8.6CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-11157Google Chrome Accessibility injection5.4CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-11156Google Chrome CSS inappropriate implementation4.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11155Google Chrome CSS inappropriate implementation4.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11154Google Chrome Dawn use-after-free7.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11153Google Chrome forms side-channel information leak9.1CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11152Google Chrome Dawn object lifecycle issue9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11151Google Chrome sandbox escape7.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11150Google Chrome XML inappropriate implementation6.1CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11149Google Chrome privilege escalation7.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11148Google Chrome Payments inappropriate implementation6.5CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-11147Google Chrome WebML use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-11146Google Chrome sandbox escape9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11145Google Chrome race condition5.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11144Google Chrome Media use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11143Google Chrome extensions out-of-bounds read6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11142Google Chrome Paint insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11141Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11140Google Chrome Chromecast out-of-bounds read6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11139Google Chrome Paint inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11138Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11137Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11136Google Chrome Canvas use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11135Google Chrome Autofill insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11134Google Chrome Media inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11133Google Chrome Paint insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11132Google Chrome Paint insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11131Google Chrome Autofill use-after-free9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11130Google Chrome Media use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11129Google Chrome extensions inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11128Google Chrome Web Share inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11127Google Chrome WebAPKs inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11126Google Chrome DevTools inappropriate implementation4.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11125Google Chrome Compositing use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11124Google Chrome Skia integer overflow8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11123Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11122Google Chrome Keyboard inappropriate implementation6.1CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11121Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11120Google Chrome sandbox escape9.6v3.10.3%2026-06-04Fix
CVE-2026-11119Google Chrome GPU inappropriate implementation9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11118Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-11117Google Chrome Views use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11116Google Chrome Chromoting use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11115Google Chrome Updater use-after-free7.3CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-11114Google Chrome Device Trust use-after-free9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11113Google Chrome sandbox escape9.6v3.10.3%2026-06-04Fix
CVE-2026-11112Google Chrome sandbox escape9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11111Google Chrome ANGLE out-of-bounds read8.1CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11110Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11109Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11108Google Chrome NFC inappropriate implementation8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11107Google Chrome Downloads inappropriate implementation4.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11106Google Chrome Media inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11105Google Chrome improper input validation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11104Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11103Google Chrome Installer inappropriate implementation7.8CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-11102Google Chrome Isolated Web Apps inappropriate implementation8.8v3.10.4%2026-06-04Fix
CVE-2026-11101Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11100Google Chrome File Input use-after-free9.6CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11098Google Chrome improper input validation5.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11097Google Chrome WebView inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11096Google Chrome WebRTC out-of-bounds read6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11095Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11094Google Chrome Codecs use-after-free9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11093Google Chrome Printing inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11092Google Chrome DevTools insufficient policy enforcement8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11091Google Chrome Dawn inappropriate implementation8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11090Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11089Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11088Google Chrome ANGLE integer overflow9.6CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11087Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11086Google Chrome Dawn inappropriate implementation8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11085Google Chrome GPU integer overflow8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11084Google Chrome Password Manager inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11083Google Chrome Password Manager inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11082Google Chrome use-after-free9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11081Google Chrome Canvas inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11080Google Chrome WebView use-after-free8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11079Google Chrome improper input validation8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11078Google Chrome FileSystem inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11077Google Chrome out-of-bounds read8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11076Google Chrome CSS type confusion8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11075Google Chrome V8 out-of-bounds read6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11074Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-11073Google Chrome WebGL use-after-free6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11072Google Chrome WebView use-after-free7.8CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-11071Google Chrome Base use-after-free8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11070Google Chrome sandbox escape9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11069Google Chrome improper input validation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11068Google Chrome WebSockets use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-11067Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11066Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11065Google Chrome ANGLE use-after-free9.6CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11064Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11063Google Chrome sandbox escape9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11062Google Chrome extensions insufficient policy enforcement4.3CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-11061Google Chrome ANGLE type confusion9.6CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11060Google Chrome Media use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11059Google Chrome Blink use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11058Google Chrome CredentialProvider integer overflow7.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11057Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11056Google Chrome sandbox escape9.6CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11055Google Chrome ANGLE use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11054Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-11052Google Chrome GPU type confusion9.6CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11051Google Chrome ANGLE out-of-bounds read6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11050Google Chrome V8 use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11049Google Chrome Password Manager use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11048Google Chrome extensions inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11047Google Chrome Base inappropriate implementation9.6CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11046Google Chrome arbitrary code execution8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-11045Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11044Google Chrome ANGLE integer overflow6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11043Google Chrome ANGLE out-of-bounds write9.6CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11042Google Chrome Views use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11041Google Chrome sandbox escape8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11040Google Chrome ANGLE use-after-free8.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11039Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11038Google Chrome Subresource Integrity insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11037Google Chrome Codecs out-of-bounds write9.6CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11036Google Chrome DOM inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11035Google Chrome Custom Tabs inappropriate implementation7.3CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-11034Google Chrome improper input validation6.1CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11033Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11032Google Chrome Password Manager inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11031Google Chrome spoofing4.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11030Google Chrome Network use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11029Google Chrome sandbox escape9.6v3.10.2%2026-06-04Fix
CVE-2026-11028Google ChromeOS use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-11027Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11026Google Chrome extensions inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11025Google Chrome Navigation insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11024Google Chrome Skia stack-based buffer overflow8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-11023Google Chrome WebAppInstalls inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11022Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11021Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11020Google Chrome extensions inappropriate implementation6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11019Google Chrome Payments inappropriate implementation6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11018Google Chrome Actor insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11017Google Chrome Link Preview inappropriate implementation6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11016Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11015Google Chrome WebGPU out-of-bounds read8.1CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11014Google Chrome extensions insufficient policy enforcement6.5CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-11013Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11012Google Chrome Serial use-after-free8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11011Google Chrome Password Manager insufficient policy enforcement8.1CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11010Google Chrome WebShare use-after-free8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11009Google Chrome USB use-after-free9.6CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11008Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11007Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11006Google Chrome Dawn out-of-bounds read6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11005Google Chrome ANGLE out-of-bounds read5.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11004Google Chrome ANGLE out-of-bounds read5.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-11003Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.5%2026-06-04Fix
CVE-2026-11002Google Chrome Autofill use-after-free9.6v3.10.3%2026-06-04Fix
CVE-2026-11001Google Chrome Payments inappropriate implementation6.5v3.10.2%2026-06-04Fix
CVE-2026-11000Google Chrome Fonts use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10999Google Chrome ANGLE integer overflow6.5v3.10.3%2026-06-04Fix
CVE-2026-10998Google Chrome Media out-of-bounds read4.0CISA ADP v3.10.1%2026-06-04Fix
CVE-2026-10997Google Chrome extensions insufficient policy enforcement6.5v3.10.2%2026-06-04Fix
CVE-2026-10996Google Chrome Workers inappropriate implementation6.5v3.10.3%2026-06-04Fix
CVE-2026-10995Google Chrome TabStrip heap-based buffer overflow8.8v3.10.4%2026-06-04Fix
CVE-2026-10994Google Chrome uninitialized variable use6.5v3.10.3%2026-06-04Fix
CVE-2026-10993Google Chrome Skia heap-based buffer overflow6.5v3.10.3%2026-06-04Fix
CVE-2026-10992Google Chrome Animation improper input validation6.5v3.10.3%2026-06-04Fix
CVE-2026-10991Google Chrome V8 use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10990Google Chrome Glic use-after-free9.6v3.10.3%2026-06-04Fix
CVE-2026-10989Google Chrome V8 inappropriate implementation8.8v3.10.3%2026-06-04Fix
CVE-2026-10988Google Chrome Views use-after-free8.8v3.10.3%2026-06-04Fix
CVE-2026-10987Google Chrome V8 integer overflow8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10986Google Chrome Media integer overflow8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10985Google Chrome Skia out-of-bounds read6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10984Google Chrome Accessibility inappropriate implementation5.4CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-10983Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10982Google Chrome WebXR use-after-free8.8CISA ADP v3.10.5%2026-06-04Fix
CVE-2026-10981Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10980Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10979Google Chrome ANGLE out-of-bounds read6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10978Google Chrome Chromoting use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10977Google Chrome uninitialized variable use6.5CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10976Google Chrome uninitialized variable use7.4v3.10.3%2026-06-04Fix
CVE-2026-10975Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.5%2026-06-04Fix
CVE-2026-10974Google Chrome sandbox escape9.6v3.10.3%2026-06-04Fix
CVE-2026-10973Google Chrome uninitialized variable use7.4v3.11.0%2026-06-04Fix
CVE-2026-10972Google Chrome Ozone use-after-free9.6v3.10.3%2026-06-04Fix
CVE-2026-10971Google Chrome sandbox escape9.6v3.10.3%2026-06-04Fix
CVE-2026-10970Google Chrome sandbox escape8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10969Google Chrome privilege escalation7.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10968Google Chrome improper input validation7.4v3.10.3%2026-06-04Fix
CVE-2026-10967Google Chrome SurfaceCapture use-after-free8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10966Google Chrome Codecs inappropriate implementation9.6v3.10.3%2026-06-04Fix
CVE-2026-10965Google Chrome DevTools integer overflow8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10964Google Chrome V8 integer overflow8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10963Google Chrome V8 integer overflow8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10962Google Chrome Media type confusion8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10961Google Chrome Chrome for iOS use-after-free8.3CISA ADP v3.10.3%2026-06-04Exploit codeFix
CVE-2026-10960Google Chrome uninitialized variable use8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10959Google Chrome Input use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10958Google Chrome Chrome for iOS use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10957Google Chrome Glic use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10956Google Chrome MimeHandlerView use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10955Google Chrome ANGLE type confusion8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10954Google Chrome Actor use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10953Google Chrome Core use-after-free8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10952Google Chrome Chrome for iOS use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10951Google Chrome Autofill use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10950Google Chrome Autofill insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10949Google Chrome Video heap-based buffer overflow8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10948Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.5%2026-06-04Fix
CVE-2026-10947Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.5%2026-06-04Fix
CVE-2026-10946Google Chrome Media heap-based buffer overflow7.5CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10945Google Chrome PDF use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10944Google Chrome Autofill insufficient policy enforcement6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10943Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.5%2026-06-04Fix
CVE-2026-10942Google Chrome UI inappropriate implementation7.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-10941Google Chrome Skia out-of-bounds access8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10940Google Chrome race condition8.3CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-10939Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.5%2026-06-04Fix
CVE-2026-10938Google Chrome Input inappropriate implementation6.5NVD v3.10.4%2026-06-04Fix
CVE-2026-10937Google Chrome Passwords inappropriate implementation6.5NVD v3.10.3%2026-06-04Fix
CVE-2026-10936Google Chrome V8 type confusion8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10935Google Chrome V8 type confusion8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10934Google Chrome Autofill use-after-free8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10933Google Chrome Audio use-after-free8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10932Google Chrome UI use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10931Google Chrome FileSystem use-after-free9.6v3.10.3%2026-06-04Fix
CVE-2026-10930Google Chrome ANGLE out-of-bounds read8.1v3.10.3%2026-06-04Fix
CVE-2026-10929Google Chrome ANGLE heap-based buffer overflow8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10928Google Chrome Headless injection8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10927Google Chrome Dawn out-of-bounds read8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10926Google Chrome Cast use-after-free8.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-10925Google Chrome Skia out-of-bounds write8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10924Google Chrome Chromecast integer overflow8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10923Google Chrome WebAppInstalls use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10922Google Chrome improper input validation8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10921Google Chrome Dawn integer overflow8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10920Google Chrome sandbox escape8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10919Google Chrome ANGLE use-after-free8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10918Google Chrome Viz use-after-free8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10917Google Chrome sandbox escape8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10916Google Chrome improper input validation6.1CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-10915Google Chrome Core use-after-free8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10914Google Chrome ANGLE use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10913Google Chrome ANGLE use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10912Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10911Google Chrome sandbox escape8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10910Google Chrome V8 type confusion8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10909Google Chrome Dawn use-after-free8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10908Google Chrome FullScreen use-after-free8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10907Google Chrome ANGLE out-of-bounds write8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10906Google Chrome WebAuthentication use-after-free7.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10905Google Chrome Network use-after-free8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10904Google Chrome V8 inappropriate implementation8.8CISA ADP v3.10.5%2026-06-04Fix
CVE-2026-10903Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.5%2026-06-04Fix
CVE-2026-10902Google Chrome Ozone use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10901Google Chrome Passwords use-after-free7.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10900Google Chrome Passwords use-after-free7.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10899Google Chrome Ozone use-after-free7.5CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10898Google Chrome GPU stack-based buffer overflow8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10897Google Chrome GPU inappropriate implementation8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10896Google Chrome Chrome for iOS use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10895Google Chrome Ozone use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10894Google Chrome Printing use-after-free8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10893Google Chrome Chromoting use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10892Google Chrome GPU out-of-bounds write9.6CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10891Google Chrome GFX use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10890Google Chrome Cast use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10889Google Chrome ANGLE out-of-bounds read8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10888Google Chrome Cast Streaming use-after-free8.8CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10887Google Chrome Chromoting use-after-free8.1CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10886Google Chrome FileSystem use-after-free9.6CISA ADP v3.16.2%2026-06-04Fix
CVE-2026-10885Google Chrome Chrome for iOS use-after-free8.8CISA ADP v3.10.4%2026-06-04Fix
CVE-2026-10884Google Chrome Chromecast use-after-free8.3CISA ADP v3.10.3%2026-06-04Fix
CVE-2026-10883Google Chrome ANGLE type confusion8.8CISA ADP v3.10.6%2026-06-04Fix
CVE-2026-10882Google Chrome Network use-after-free8.8CISA ADP v3.10.5%2026-06-04Fix
CVE-2026-10881Google Chrome ANGLE out-of-bounds read9.6CISA ADP v3.10.6%2026-06-04Fix
CVE-2026-10880Unauthenticated SQL injection in Osnexus QuantaStor9.8CNA v3.10.4%2026-06-04Fix
CVE-2026-10875Projectworlds Online Art Gallery Shop Project adminHome.ph SQL injection5.3CNA v4.00.3%2026-06-04
CVE-2026-10874Projectworlds Online Art Gallery Shop Project adminHome.php SQL injection5.3CNA v4.00.3%2026-06-04
CVE-2026-10873Shibby Tomato Web UI rstats rstats_path os command injection8.6CNA v4.02.7%2026-06-04
CVE-2026-10872Shibby Tomato Web UI rc start_vpnserver os command injection8.6CNA v4.02.6%2026-06-04
CVE-2026-10871Shibby Tomato Web UI rc start_6rd_tunnel os command injection8.6CNA v4.02.2%2026-06-04
CVE-2026-10870Shibby Tomato Web UI rc start_dhcpc os command injection8.6CNA v4.02.2%2026-06-04
CVE-2026-10868MISP user edit endpoint mass assignment vulnerability allows unauthorized user account modification9.0CNA v4.00.2%2026-06-04
CVE-2026-10864MISP Dashboard widget field selection may expose restricted user and organisation data4.3v3.10.2%2026-06-04
CVE-2026-10863MISP User-controlled order parameter in correlations over-correlation endpoint8.1v3.10.2%2026-06-04
CVE-2026-10861MISP post-login open redirect via pre_login_requested_url6.1v3.10.2%2026-06-04
CVE-2026-10860MISP CRUDComponent delete validation bypass via operator precedence error6.5NVD v3.10.2%2026-06-04
CVE-2026-10856Open redirect in MISP dashboard button widget URL handling6.1v3.10.1%2026-06-04
CVE-2026-10855MISP Event template importer authorization bypass4.3v3.10.2%2026-06-04
CVE-2026-10854Unauthorized exposure of private galaxies in MISP event template creation4.3v3.10.2%2026-06-04
CVE-2026-10843Red Hat OpenShift Container Platform Cloud Credential Operator vulnerability7.2CNA v3.10.3%2026-06-04
CVE-2026-10840Red Hat OpenShift Pipelines tekton-scheduler-rolebinding incorrect permission assignment7.1CNA v3.10.2%2026-06-04Fix
CVE-2026-10815LakshayD02 Hostel-Management-System-PHP Admin Dashboard index.php authorization5.3CNA v4.00.2%2026-06-04
CVE-2026-10814milvus-io Milvus Grantee ID Hash kv_catalog.go weak hash7.0v3.10.1%2026-06-04Fix
CVE-2026-10813LMCache KV Cache utils.py hex_hash_to_int16 weak hash2.0CNA v4.00.1%2026-06-04Fix
CVE-2026-10812zilliztech GPTCache Cache Key pre.py BufferedReader.peek weak hash2.0CNA v4.00.1%2026-06-04
CVE-2026-10811itsourcecode Fees Management System receipt.php SQL injection5.3CNA v4.00.2%2026-06-04
CVE-2026-10810itsourcecode Fees Management System navbar.php cross-site scripting5.3CNA v4.00.3%2026-06-04
CVE-2026-10809itsourcecode Fees Management System manage_user.php SQL injection5.3CNA v4.00.2%2026-06-04
CVE-2026-10808itsourcecode Fees Management System manage_student.php SQL injection5.3CNA v4.00.2%2026-06-04
CVE-2026-10807mjperpinosa stumasy change_profile_image.php unrestricted upload5.3CNA v4.00.2%2026-06-04
CVE-2026-10806mjperpinosa stumasy add_post.php unrestricted upload5.3CNA v4.00.2%2026-06-04
CVE-2026-10805Red Hat Enterprise Linux 8 networkmanager: Networkmanager: Local privilege escalation6.7CNA v3.10.2%2026-06-04Fix
CVE-2026-10804Streamlit Palette hashing.py weak hash4.7v3.10.1%2026-06-04Fix
CVE-2026-10803MLflow Dataset Digest Computation digest_utils.py MLflow.data.digest_utils weak hash2.0CNA v4.00.1%2026-06-04Fix
CVE-2026-10802keystonejs keystone GraphQL API endpoint output-field.ts resource consumption5.3CNA v4.00.3%2026-06-04
CVE-2026-10801modelscope ms-swift PIL Image Cache Key base.py Template._save_pil_image weak hash2.0CNA v4.00.1%2026-06-04
CVE-2026-10800PaddlePaddle FastDeploy MultimodalHasher hasher.py hash_features weak hash2.0CNA v4.00.1%2026-06-04
CVE-2026-10796nvm executes commands from a malicious Node.js mirror's version strings7.5CNA v4.05.0%2026-06-04
CVE-2026-10783gradio-app Gradio Audio Cache Key save_audio_to_cache weak hash2.0CNA v4.00.1%2026-06-04Fix
CVE-2026-10737SP Project and Document Manager WordPress plugin unauthorized access7.5CNA v3.10.5%2026-06-04
CVE-2026-10597ITPison｜OMICARD EDM insecure direct object reference6.9CNA v4.00.2%2026-06-04Fix
CVE-2026-10305Samsung Open Source rlottie out-of-bounds read6.1CNA v3.10.1%2026-06-04Fix
CVE-2026-8916Samsung Open Source rlottie out-of-bounds write6.1CNA v3.10.1%2026-06-04Fix
CVE-2026-8829HTML::Entities versions for Perl read freed heap memory in _decode_entities7.5CISA ADP v3.10.5%2026-06-04Fix
CVE-2026-8722Net::Async::Statsd::Client versions for Perl allow metric injections6.5CISA ADP v3.10.3%2026-06-04
CVE-2026-8653MasterStudy LMS Pro Plus WordPress plugin SQL injection6.5CNA v3.10.4%2026-06-04Fix
CVE-2026-8037Progress LoadMaster command injection9.6CNA v3.177.4%2026-06-04KEVNucleiEmerging ThreatsExploit codeFix
CVE-2026-7774CPython tarfile module path traversal6.9CNA v4.00.8%2026-06-04Fix
CVE-2026-7764Morse Micro HaLowLink 2 out-of-bounds read in morse.ko Vendor IE processing6.8CISA ADP v3.10.2%2026-06-04Fix
CVE-2026-5589zephyrproject-rtos Zephyr An integer underflow6.3CISA ADP v3.10.4%2026-06-04
CVE-2026-5228Improper access control in Kurt Software Studio's WriteUp Mobile App8.8CNA v3.10.4%2026-06-04
CVE-2026-5066zephyrproject-rtos Zephyr potential out-of-bounds write6.3CNA v3.10.5%2026-06-04
CVE-2026-4881Octopus Deploy Octopus Server missing authorization6.0CNA v4.00.4%2026-06-04Fix
CVE-2026-4104SQLi in Akmer Informatics' TeknoPass9.8CNA v3.10.5%2026-06-04
CVE-2026-3820SMCI AS-2115HS-TNR supermicro BMC's SMTP service contains a command injection7.2CNA v3.10.7%2026-06-04
CVE-2026-50052The Vinyl Cache Project Vinyl Cache HTTP request smuggling2.3CNA v4.00.5%2026-06-03Fix
CVE-2026-50033Acronis DeviceLock DLP uncontrolled search path7.3CNA v3.00.2%2026-06-03Fix
CVE-2026-50031FreeIPMI stack-based buffer overflow7.5CNA v3.10.5%2026-06-03Fix
CVE-2026-48587Django potential exposure of private data via whitespace padding in Vary header2.3CNA v4.00.4%2026-06-03Fix
CVE-2026-47325Weak password policy in ProjectsAndPrograms school-management-system6.9CNA v4.00.4%2026-06-03
CVE-2026-47324Stored XSS in multiple Points in ProjectsAndPrograms school-management-system5.1CNA v4.00.5%2026-06-03
CVE-2026-47065Apache Mina: Critical deserialization Allow-list Bypass via resolveProxyClass ZDRES-2329.8CNA v3.10.5%2026-06-03Fix
CVE-2026-46447OpenStack Ironic allows Boot script injection7.7v3.10.3%2026-06-03Fix
CVE-2026-46273Linux kernel ibmveth network driver denial of service8.6CNA v3.10.7%2026-06-03Fix
CVE-2026-46272Linux kernel TMC-ETR CoreSight driver race condition4.7NVD v3.10.1%2026-06-03Fix
CVE-2026-46271Linux kernel ath12k Wi-Fi driver denial of service7.8CNA v3.10.1%2026-06-03Fix
CVE-2026-46270Linux kernel rt9455 power supply driver use-after-free8.4CNA v3.10.2%2026-06-03Fix
CVE-2026-46269Linux kernel Canaan K230 pinctrl driver null pointer dereference5.5v3.10.1%2026-06-03Fix
CVE-2026-46268In the Linux kernel, the following vulnerability has been resolved: PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition Commit b7e282378773 has already changed the initial page refcount of p2pdma page from one to zero, however, in p2pmem_alloc_mmap() it uses "VM_WARN_ON_ONCE_PAGE(!page_ref_count5.5v3.10.1%2026-06-03Fix
CVE-2026-46267Linux kernel NFC HCI SHDLC use-after-free7.8v3.10.1%2026-06-03Fix
CVE-2026-46266Linux kernel RAW IPPROTO_RAW socket vulnerability9.1CNA v3.10.4%2026-06-03Fix
CVE-2026-46265Linux kernel RDMA hns driver vulnerability7.5CNA v3.10.7%2026-06-03Fix
CVE-2026-46264Linux kernel xe SR-IOV PF sysfs use-after-free8.8CNA v3.10.2%2026-06-03Fix
CVE-2026-46263Linux kernel AMD display stream encoder out-of-bounds read7.8CNA v3.10.2%2026-06-03Fix
CVE-2026-46262Linux kernel fsl_xcvr ASoC driver deadlock5.5v3.10.1%2026-06-03Fix
CVE-2026-46261Linux kernel wpcm-fiu SPI driver null pointer dereference5.5v3.10.1%2026-06-03Fix
CVE-2026-46260Linux kernel IPv6 FIB out-of-bounds read7.8CNA v3.10.2%2026-06-03Fix
CVE-2026-46259Linux kernel procfs task stat use-after-free7.8CNA v3.10.2%2026-06-03Fix
CVE-2026-46258Linux kernel cdev null pointer dereference5.5v3.10.1%2026-06-03Fix
CVE-2026-46257Linux kernel timer-sp804 clocksource driver vulnerability5.5v3.10.1%2026-06-03Fix
CVE-2026-46256Linux kernel NFS LOCALIO deadlock5.5NVD v3.10.1%2026-06-03Fix
CVE-2026-46255Linux kernel fsl-edma driver vulnerability5.5v3.10.1%2026-06-03Fix
CVE-2026-46254Linux kernel AppArmor DFA parser vulnerability5.5NVD v3.10.1%2026-06-03Fix
CVE-2026-46253Linux kernel pstore RAM backend out-of-bounds write7.8CNA v3.10.1%2026-06-03Fix
CVE-2026-46252Linux kernel regulator core improper locking5.5v3.10.1%2026-06-03Fix
CVE-2026-46251Linux kernel btrfs block group tree vulnerability8.4CNA v3.10.2%2026-06-03Fix
CVE-2026-46250Linux kernel MIPS kernel relocation denial of service7.3CNA v3.10.2%2026-06-03Fix
CVE-2026-46249Linux kernel octeontx2-af driver improper initialization5.5v3.10.1%2026-06-03Fix
CVE-2026-46248Linux kernel ath12k Wi-Fi driver vulnerability5.5v3.10.1%2026-06-03Fix
CVE-2026-46247Linux kernel gfx3d clock driver vulnerability5.5v3.10.1%2026-06-03Fix
CVE-2026-46246Linux kernel pm8916_lbc use-after-free7.8v3.10.1%2026-06-03Fix
CVE-2026-46245Linux kernel AMD display HPD initialization null pointer dereference5.5NVD v3.10.2%2026-06-03Fix
CVE-2026-46244Linux kernel netfilter nft_inner parser out-of-range pointer offset9.1CNA v3.10.3%2026-06-03Fix
CVE-2026-45702OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic4.4CNA v3.10.2%2026-06-03Fix
CVE-2026-45614OP-TEE vulnerable to ECDH private key recovery4.7CNA v3.10.1%2026-06-03Fix
CVE-2026-44682Acronis DeviceLock DLP uncontrolled search path7.3CNA v3.00.2%2026-06-03Fix
CVE-2026-44609Acronis DeviceLock DLP uncontrolled search path7.3CNA v3.00.2%2026-06-03Fix
CVE-2026-44546Django daphne header injection3.7CNA v3.10.3%2026-06-03Fix
CVE-2026-44545Django Daphne WebSocket message size limits denial of service5.3CNA v3.10.6%2026-06-03Fix
CVE-2026-44281GLPI vulnerable to unauthorized reading of a specific asset object7.0CNA v4.00.4%2026-06-03Fix
CVE-2026-43924FOSSBilling has an open redirect via administrator-configured redirect targets4.8CNA v4.00.4%2026-06-03Fix
CVE-2026-42840Frappe ERPNext point of sale customer section stored cross-site scripting5.1CNA v4.00.4%2026-06-03
CVE-2026-42839ERPNext stored XSS in POS cart item rendering4.8CNA v4.00.4%2026-06-03
CVE-2026-42321GLPI has stored XSS in asset locks8.4CNA v4.00.4%2026-06-03Fix
CVE-2026-42320glpi missing authorization5.9CNA v4.00.3%2026-06-03Fix
CVE-2026-42318GLPI vulnerable to arbitrary Item Deletion via Planning endpoint7.0CNA v4.00.4%2026-06-03Fix
CVE-2026-42317GLPI vulnerable to arbitrary files deletion by technician7.0CNA v4.00.4%2026-06-03Fix
CVE-2026-42061Acronis DeviceLock DLP execution with unnecessary privileges7.3CNA v3.00.2%2026-06-03Fix
CVE-2026-41032Phoenix Contact CHARX SEC-3150 information disclosure7.5CNA v3.10.4%2026-06-03Fix
CVE-2026-40495FOSSBilling version exposed via asset cache buster6.9CNA v4.00.5%2026-06-03Fix
CVE-2026-40290OP-TEE has a use-after-free race in FF-A shared-memory teardown7.8CNA v3.10.2%2026-06-03Fix
CVE-2026-39107Kimi AI Preview feature cross-site scripting6.3CISA ADP v3.10.3%2026-06-03
CVE-2026-37700MaxSite CMS v.109.2 cross-site scripting4.1CISA ADP v3.10.3%2026-06-03
CVE-2026-37462GoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function7.5CISA ADP v3.10.5%2026-06-03Fix
CVE-2026-37460FRRouting BGP RFAPI RIB handling denial of service7.5CISA ADP v3.10.6%2026-06-03Fix
CVE-2026-36748RockRMS user profile social media links cross-site scripting9.0CISA ADP v3.10.4%2026-06-03
CVE-2026-36618Mercusys AC12G (EU) V1 DNS resolver information disclosure4.3CISA ADP v3.10.2%2026-06-03
CVE-2026-36616Mercusys AC12G (EU) V1 WiFi driver hard-coded credentials5.9CISA ADP v3.10.2%2026-06-03
CVE-2026-36615Mercusys AC12G (EU) V1 agileconfigreset endpoint information disclosure4.3CISA ADP v3.10.2%2026-06-03
CVE-2026-36613Mercusys AC12G (EU) V1 HTTP request handler out-of-bounds read4.3CISA ADP v3.10.2%2026-06-03
CVE-2026-36612Mercusys AC12G (EU) V1 WPS vulnerability6.4CISA ADP v3.10.2%2026-06-03
CVE-2026-36611Mercusys AC12G (EU) V1 UPnP service information disclosure7.3CISA ADP v3.10.3%2026-06-03
CVE-2026-36610Mercusys AC12G (EU) V1 DDNS credential transmission vulnerability5.9CISA ADP v3.10.2%2026-06-03
CVE-2026-36609Mercusys AC12G (EU) V1 authentication token generation weak cryptographic algorithm7.3CISA ADP v3.10.2%2026-06-03
CVE-2026-36608Mercusys AC12G (EU) V1 UPnP AddPortMapping confused deputy8.8CISA ADP v3.10.3%2026-06-03
CVE-2026-36607Mercusys AC12G (EU) V1 TDDP password change endpoint vulnerability8.8CISA ADP v3.10.3%2026-06-03
CVE-2026-36606Mercusys AC12G (EU) V1 configuration backup encryption hard-coded credentials7.1CISA ADP v3.10.1%2026-06-03
CVE-2026-36605Mercusys AC12G (EU) V1 HTTP request handler denial of service6.5CISA ADP v3.10.3%2026-06-03
CVE-2026-36604Mercusys AC12G (EU) V1 HTTP Host header validation vulnerability6.5CISA ADP v3.10.4%2026-06-03
CVE-2026-36603Mercusys AC12G (EU) V1 UPnP IGD service missing authentication8.1CISA ADP v3.10.3%2026-06-03
CVE-2026-36602Mercusys AC12G (EU) V1 UPnP GetStatusInfo action information disclosure4.3CISA ADP v3.10.2%2026-06-03
CVE-2026-36576openlabs docker-wkhtmltopdf-aas app.py OS command injection9.8CISA ADP v3.13.0%2026-06-03
CVE-2026-36574Wassimulator DLL hijacking7.8CISA ADP v3.10.2%2026-06-03
CVE-2026-36460Dovestones Softwares ADPhonebook Admin Save API cross-site scripting4.8CISA ADP v3.10.3%2026-06-03
CVE-2026-35193Django potential exposure of private data via missing Vary: Authorization in UpdateCacheMiddleware2.3CNA v4.00.4%2026-06-03Fix
CVE-2026-35085MBS Single-A stack buffer overflow in method gdv-serverconfig8.7CNA v4.00.6%2026-06-03Fix
CVE-2026-35084MBS Single-A stack buffer overflow in method dali-devconfig8.7CNA v4.00.6%2026-06-03Fix
CVE-2026-35083MBS Single-A stack buffer overflow in method bac-deviceobject8.7CNA v4.00.6%2026-06-03Fix
CVE-2026-35082MBS Single-A local file inclusion vulnerability and deletion in ugw-logread method8.7CNA v4.00.7%2026-06-03Fix
CVE-2026-35081MBS Single-A arbitrary process termination vulnerability in method ugw-logstop7.2CNA v4.00.5%2026-06-03Fix
CVE-2026-35080MBS Single-A arbitrary file delete vulnerability in method ugw-restoreinfo7.2CNA v4.00.5%2026-06-03Fix
CVE-2026-35079MBS Single-A arbitrary file delete vulnerability in method ugw-restore7.2CNA v4.00.5%2026-06-03Fix
CVE-2026-35078MBS Single-A arbitrary file delete vulnerability in method ugw-logstop7.2CNA v4.00.5%2026-06-03Fix
CVE-2026-35077MBS Single-A arbitrary file delete vulnerability in method ugw-delete-file7.2CNA v4.00.5%2026-06-03Fix
CVE-2026-35076MBS Single-A arbitrary file delete vulnerability in method bac-scanresult7.2CNA v4.00.5%2026-06-03Fix
CVE-2026-35075MBS Single-A Hard-coded default password for Service Account9.3CNA v4.00.6%2026-06-03Fix
CVE-2026-26825libxls use-of- uninitialized memory use5.3v3.10.4%2026-06-03Fix
CVE-2026-26824libxls uninitialized variable use6.5CISA ADP v3.10.5%2026-06-03Fix
CVE-2026-26379Koha server-side request forgery6.5CISA ADP v3.10.4%2026-06-03
CVE-2026-26378Koha cross-site scripting5.4CISA ADP v3.10.5%2026-06-03
CVE-2026-22055NetApp Active IQ OneCollect hard-coded password5.3CNA v4.00.2%2026-06-03Fix
CVE-2026-22054NetApp Active IQ Config Advisor hard-coded password5.3CNA v4.00.2%2026-06-03Fix
CVE-2026-20233Cisco Webex Meetings cross-site scripting6.1CNA v3.10.2%2026-06-03Fix
CVE-2026-20230Cisco Unified Communications Manager server-side request forgery (SSRF)8.6CNA v3.188.2%2026-06-03KEVEmerging ThreatsExploit codeFix
CVE-2026-20175Cisco Finesse file inclusion6.1CNA v3.10.2%2026-06-03Fix
CVE-2026-10777ealpha072 Student-Management-System Administrative Backend config.php improper authentication6.9CNA v4.00.4%2026-06-03
CVE-2026-10775sgl-project SGLang Cache data_hash denial of service5.3v3.10.1%2026-06-03
CVE-2026-10771crmeb_java server-side request forgery6.9CNA v4.00.3%2026-06-03
CVE-2026-10766mlrun DataFrame Hash helpers.py mlrun.utils.helpers.calculate_dataframe_hash weak hash2.0CNA v4.00.1%2026-06-03
CVE-2026-10729HTML injection in the notification email for Slow Redirect and Cloned Website Canarytokens1.2CNA v4.00.2%2026-06-03Fix
CVE-2026-10722cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow5.5v3.10.2%2026-06-03Fix
CVE-2026-10705Dask HLL hyperloglog.py nunique_approx resource consumption2.3CNA v4.00.3%2026-06-03
CVE-2026-10704SourceCodester Pizzafy E-Commerce System administrative login SQL injection6.9CNA v4.00.3%2026-06-03
CVE-2026-10703EIPStackGroup OpENer SendRRData handler use-after-free5.3CNA v4.00.2%2026-06-03
CVE-2026-10694SourceCodester Online Food Ordering System index.php include file inclusion6.9CNA v4.00.3%2026-06-03
CVE-2026-10693SourceCodester Online Boat Reservation System Administrative endpoint improper authorization5.3CNA v4.00.2%2026-06-03
CVE-2026-10692johnhuang316 code-index-mcp search_code_advanced is_safe_regex_pattern redos5.3CNA v4.00.3%2026-06-03Fix
CVE-2026-10691wonderwhy-er DesktopCommanderMCP start_search search-manager.ts redos5.3CNA v4.00.4%2026-06-03Fix
CVE-2026-10690wonderwhy-er DesktopCommanderMCP read_file filesystem.ts readFileFromUrl server-side request forgery5.3CNA v4.00.2%2026-06-03
CVE-2026-9732EmergencyWP WordPress plugin cross-site request forgery to plugin settings update4.3CNA v3.10.2%2026-06-03
CVE-2026-9516CPanel::JSON::XS versions for Perl allow denial of service7.5CISA ADP v3.10.6%2026-06-03Fix
CVE-2026-9334CPanel::JSON::XS versions for Perl allow type confusion7.3CISA ADP v3.10.4%2026-06-03Fix
CVE-2026-8889Securly Chrome Extension blocklist hash matching vulnerability7.5v3.10.2%2026-06-03
CVE-2026-8888Securly Chrome Extension config pattern matching regular expression denial of service7.5v3.10.4%2026-06-03
CVE-2026-8881Securly Chrome Extension key derivation vulnerability7.5CISA ADP v3.10.2%2026-06-03
CVE-2026-8879Securly Chrome Extension dynamic content script registration inclusion of untrusted functionality7.5CISA ADP v3.10.5%2026-06-03
CVE-2026-8878Securly Chrome Extension inadequate encryption strength7.5CISA ADP v3.10.3%2026-06-03
CVE-2026-8876Securly Chrome Extension securly.min.js hard-coded credentials7.3CISA ADP v3.10.3%2026-06-03
CVE-2026-8874Securly Chrome Extension crisis alert keyword feed cleartext transmission7.1CISA ADP v3.10.2%2026-06-03Fix
CVE-2026-8404Django cache middleware information disclosure2.3CNA v4.00.4%2026-06-03Fix
CVE-2026-7888Concrete CMS is vulnerable to PHP object injection8.4CNA v4.00.4%2026-06-03Fix
CVE-2026-7666Django potential unencrypted email transmission via STARTTLS in the SMTP backend2.3CNA v4.00.2%2026-06-03Fix
CVE-2026-7421Passeum Ticketing WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-06-03
CVE-2026-6873Django signed cookie salt namespace collision in Django.http.HttpRequest.get_signed_cookie2.3CNA v4.00.3%2026-06-03Fix
CVE-2026-6657jupyter/jupyter CORS Origin Validation Bypass in jupyter-server8.8v3.10.2%2026-06-03
CVE-2026-5241Policy Bypass in LightGlue Nested Config Resolution in huggingface/Transformers9.6v3.10.9%2026-06-03Fix
CVE-2026-5078morgan vulnerable to Log Forging via unneutralized control characters in :remote-user5.3CNA v3.10.4%2026-06-03Fix
CVE-2026-4035Environment Variable Resolution vulnerability in MLflow/MLflow7.7NVD v3.10.7%2026-06-03Fix
CVE-2026-3276Python CPython potential DoS via quadratic complexity in unicodedata.normalize6.3CNA v4.00.7%2026-06-03Fix
CVE-2026-49943nic BIRD stack-based buffer overflow6.3CNA v3.10.4%2026-06-02Exploit code
CVE-2026-49782Elementor Website Builder WordPress plugin broken access control5.4CNA v3.10.3%2026-06-02Fix
CVE-2026-49754HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulation8.2CNA v4.00.5%2026-06-02Fix
CVE-2026-49753HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsing6.3CNA v4.00.5%2026-06-02Fix
CVE-2026-49448authentik source stage authentication bypass9.8CNA v3.10.6%2026-06-02Fix
CVE-2026-49443authentik source connection API improper authentication8.8CNA v3.10.4%2026-06-02Fix
CVE-2026-49144BrowserStack Runner path traversal via _default HTTP handler7.1CNA v4.00.4%2026-06-02
CVE-2026-49143BrowserStack Runner Unauthenticated RCE via /_log HTTP handler8.7CNA v4.00.8%2026-06-02
CVE-2026-49120Medplum SSRF via FHIR Subscription endpoint6.3CNA v4.00.4%2026-06-02Fix
CVE-2026-48862Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrency8.2CNA v4.00.5%2026-06-02Fix
CVE-2026-48861CRLF injection in HTTP/1 request line via unvalidated method in Mint2.1CNA v4.00.2%2026-06-02Fix
CVE-2026-48682FastNetMon Community Edition IPv4 packet parser out-of-bounds read5.9CISA ADP v3.10.4%2026-06-02
CVE-2026-48598Tesla vulnerable to multipart part smuggling via unescaped `content-disposition` values2.1CNA v4.00.3%2026-06-02Fix
CVE-2026-48597elixir-tesla tesla atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint8.2CNA v4.00.6%2026-06-02Fix
CVE-2026-48596Tesla has CRLF injection in request `Content-Type` header via `add_content_type_param`2.1CNA v4.00.3%2026-06-02Fix
CVE-2026-48595Tesla: Authorization header leaks on cross-origin redirect via case-sensitive filtering8.2CNA v4.00.7%2026-06-02Fix
CVE-2026-48594Tesla has decompression bomb on response body8.2CNA v4.00.7%2026-06-02Fix
CVE-2026-47265Aiohttp vulnerable to cross-origin redirect with per-request cookies6.6CNA v4.00.2%2026-06-02Fix
CVE-2026-47201authentik SAML source ACS endpoint vulnerability8.5CNA v3.10.3%2026-06-02Fix
CVE-2026-47117OpenMed remote code execution via PII Model Loading9.3CNA v4.01.3%2026-06-02Exploit codeFix
CVE-2026-46718Apache Calcite: A user-controled model can load arbitrary classes, leading to code execution6.5CISA ADP v3.10.7%2026-06-02Fix
CVE-2026-45686OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI7.5CNA v3.10.5%2026-06-02Fix
CVE-2026-45685OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages7.5CNA v3.10.6%2026-06-02Fix
CVE-2026-45684OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers4.9CNA v3.10.2%2026-06-02Fix
CVE-2026-45683OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure3.8CNA v3.10.2%2026-06-02Fix
CVE-2026-45682OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals5.1CNA v3.10.2%2026-06-02Fix
CVE-2026-45681OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size5.9CNA v3.10.4%2026-06-02Fix
CVE-2026-45680OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU5.9CNA v3.10.5%2026-06-02Fix
CVE-2026-45679OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages6.5CNA v3.10.3%2026-06-02Fix
CVE-2026-45678OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads7.5CNA v3.10.5%2026-06-02Fix
CVE-2026-45676OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent5.5CNA v3.10.2%2026-06-02Fix
CVE-2026-45554NiceGUI: Unauthenticated log-flood DoS via trailing slash on ESM and per-component resource routes5.3CNA v3.10.6%2026-06-02Fix
CVE-2026-45553NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text7.5CNA v3.10.4%2026-06-02Fix
CVE-2026-45289CloudburstMC Protocol: Partially missing validation for FULL type authentication tokens5.3CNA v3.10.2%2026-06-02Fix
CVE-2026-45080Klaw: Improper access control allows Disclosure of Password Hash6.9CNA v4.00.4%2026-06-02Fix
CVE-2026-44654danny-avila LibreChat file deletion endpoint incorrect authorization5.7CNA v4.00.4%2026-06-02Fix
CVE-2026-44653LibreChat Shared MCP Server view leaks decrypted admin secrets6.5CNA v3.10.4%2026-06-02Fix
CVE-2026-44367Klaw: User lockout due to case sensitivity inconsistency2.7CNA v3.10.4%2026-06-02Fix
CVE-2026-43965Gleam path traversal in build/packages/packages.toml allows arbitrary Directory Deletion5.6CNA v4.00.2%2026-06-02Fix
CVE-2026-42849authentik SFE autosubmit stage reflected cross-site scripting9.3CNA v3.10.5%2026-06-02Fix
CVE-2026-42795Gleam symlink following in Hex Package Export allows Embedding Files Outside Project Root5.1CNA v4.00.2%2026-06-02Fix
CVE-2026-42685WP Job Portal WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-02Fix
CVE-2026-42684WP Job Portal WordPress plugin SQL injection9.3CNA v3.10.4%2026-06-02Fix
CVE-2026-42670Five Star Restaurant Reservations WordPress plugin Payment bypass vulnerability7.5CISA ADP v3.10.4%2026-06-02Fix
CVE-2026-42669EventPrime WordPress plugin broken access control7.5CNA v3.10.3%2026-06-02Fix
CVE-2026-42654Wallet System for WooCommerce WordPress plugin broken authentication7.1CNA v3.10.4%2026-06-02Fix
CVE-2026-42507Arbitrary inputs are included in errors without any escaping in net/textproto5.3CISA ADP v3.10.4%2026-06-02Fix
CVE-2026-42504Quadratic complexity in WordDecoder.DecodeHeader in mime7.5CISA ADP v3.10.6%2026-06-02Fix
CVE-2026-42342remix-run react-router react Router vulnerable to DoS7.5CNA v3.10.5%2026-06-02Fix
CVE-2026-42211Remix React Router vendored turbo-stream deserialization deserialization of untrusted data8.1CNA v3.10.6%2026-06-02Fix
CVE-2026-42074OpenClaude: Sandbox bypass via Model-Controlled `dangerouslyDisableSandbox` Input9.3CNA v4.00.7%2026-06-02Fix
CVE-2026-42073OpenClaude's MCP OAuth Callback: State Check Bypass via error Param leads to DoS6.5CNA v3.10.3%2026-06-02Fix
CVE-2026-41918Siemens RUGGEDCOM RST2428P sensitive information in browser cache5.9CNA v4.00.3%2026-06-02Fix
CVE-2026-41577authentik SAML source insufficient verification of data authenticity6.9CNA v4.00.2%2026-06-02Fix
CVE-2026-41569authentik WS-Federation provider open redirect6.9CNA v4.00.3%2026-06-02Fix
CVE-2026-41412alf.io vulnerable to arbitrary file read and Exfil via simpleHttpClient extension script4.9CNA v3.10.5%2026-06-02Fix
CVE-2026-41115Apache Kafka: Improper authorization in CONSUMER_GROUP_DESCRIBE API4.3CISA ADP v3.10.5%2026-06-02Fix
CVE-2026-40780BookIt WordPress plugin broken authentication7.5CNA v3.10.5%2026-06-02Fix
CVE-2026-40715Dell ThinOS 10 improper access control7.8CNA v3.10.1%2026-06-02Fix
CVE-2026-40713Dell ThinOS 10 improper access control6.1CNA v3.10.2%2026-06-02Fix
CVE-2026-40619Genetec Security Center sensitive information in log files7.8CNA v3.10.2%2026-06-02
CVE-2026-40571NamelessMC Nameless profile post reactions missing authorization5.3CNA v4.00.4%2026-06-02
CVE-2026-40314NamelessMC profile post reactions missing authorization6.9CNA v4.00.4%2026-06-02
CVE-2026-40181React Router's same-origin redirect with path starting // causes open redirect6.6CNA v4.00.3%2026-06-02Fix
CVE-2026-40108GLPI vulnerable to stored XSS in ITIL Costs7.1CNA v4.00.3%2026-06-02Fix
CVE-2026-39555Askka WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-02Fix
CVE-2026-39553WaveRide WordPress theme local file inclusion8.1CNA v3.10.6%2026-06-02Fix
CVE-2026-39552Blueprint WordPress theme local file inclusion8.1CNA v3.10.6%2026-06-02Fix
CVE-2026-39551Töbel WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-02Fix
CVE-2026-39550Aperitif WordPress theme PHP object injection8.1CNA v3.10.4%2026-06-02Fix
CVE-2026-38978transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths.5.3CISA ADP v3.10.4%2026-06-02Fix
CVE-2026-38967CrowCpp Crow HTTP response header handling HTTP response splitting9.8CISA ADP v3.10.6%2026-06-02
CVE-2026-35718Vivotek FD8136 /admin/downloadMedias.cgi endpoint path traversal6.5v3.10.7%2026-06-02
CVE-2026-35717Vivotek FD8136 Firmware export_language.cgi binary stack-based buffer overflow6.3CISA ADP v3.10.4%2026-06-02
CVE-2026-35716Vivotek FD8136 Firmware motion_privacy.cgi binary stack-based buffer overflow6.3CISA ADP v3.10.4%2026-06-02
CVE-2026-35482Alf.io has an authenticated RCE via extension script sandbox escape8.0CNA v3.10.4%2026-06-02Fix
CVE-2026-35447NamelessMC profile page wall posts missing authorization5.3CNA v4.00.4%2026-06-02
CVE-2026-35443NamelessMC: Forum reactions bypass the view own topics only restriction5.3CNA v4.00.4%2026-06-02
CVE-2026-35212OpenCTI has XSS in the rendering of email-message observable body data5.3CNA v4.00.3%2026-06-02Fix
CVE-2026-35202Pterodactyl has a database resource limit bypass via race condition in Client API2.3CNA v4.00.3%2026-06-02Fix
CVE-2026-35049wire-ios has Persistent Remote DoS via integer underflow6.5CNA v3.10.4%2026-06-02Fix
CVE-2026-34993Aiohttp vulnerable to deserialization of untrusted data6.4CNA v3.10.5%2026-06-02Fix
CVE-2026-34907Reflected cross-site scripting (XSS) in Wirtualna Uczelnia5.1CNA v4.00.5%2026-06-02
CVE-2026-34906Server-side template injection (SSTI) in Wirtualna Uczelnia9.3CNA v4.00.9%2026-06-02
CVE-2026-34460NamelessMC: OAuth callback `state` is not validated, allowing login CSRF / session swapping5.4CNA v3.10.1%2026-06-02Fix
CVE-2026-34077remix-run react-router react Router vulnerable to denial of service7.5CNA v3.10.5%2026-06-02Fix
CVE-2026-33553Northern.tech CFEngine Enterprise cross-site scripting6.1CISA ADP v3.10.3%2026-06-02
CVE-2026-33398NamelessMC Nameless authenticated users can read hidden forum posts through `/forum/get_quotes`7.1CNA v4.00.4%2026-06-02
CVE-2026-33245remix-run react-router react Router vulnerable to XSS in unstable RSC redirect handling8.0CNA v3.10.2%2026-06-02Fix
CVE-2026-33244remix-run react-router react Router has stored XSS5.4CNA v3.10.1%2026-06-02Fix
CVE-2026-32685Path traversal in Gleam docs build via documentation.pages Allows arbitrary file read and Write4.6CNA v4.00.2%2026-06-02Fix
CVE-2026-32625LibreChat Exfiltrates Server Secrets via MCP Server URL injection9.6CNA v3.10.4%2026-06-02Fix
CVE-2026-32250NamelessMC has reflected cross-site scripting in id parameter of /index.php?route=/queries/user/4.3CNA v3.10.3%2026-06-02
CVE-2026-31942LibreChat API keys management insecure direct object reference7.1CNA v3.10.3%2026-06-02Fix
CVE-2026-30652Vivotek FD8136 buffer overflow8.8v3.10.5%2026-06-02
CVE-2026-30650Vivotek FD8136 buffer overflow8.8CISA ADP v3.10.9%2026-06-02
CVE-2026-30649Vivotek FD8136 buffer overflow7.3CISA ADP v3.10.5%2026-06-02
CVE-2026-30586usememos Memos v.0.26.0 cross-site scripting6.1CISA ADP v3.10.3%2026-06-02
CVE-2026-28299SolarWinds Web Help Desk denial of service8.2CNA v3.10.7%2026-06-02Fix
CVE-2026-28116Progress Planner WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-06-02Fix
CVE-2026-27351Crew HRM WordPress plugin broken access control5.4CNA v3.10.3%2026-06-02Fix
CVE-2026-27145Inefficient candidate hostname parsing in crypto/x5096.5CISA ADP v3.10.6%2026-06-02Fix
CVE-2026-25861QloApps weak password Hashing via MD5 in Tools.php8.2CNA v4.00.3%2026-06-02
CVE-2026-24237NVIDIA NVTabular deserialization of untrusted data7.8CNA v3.10.2%2026-06-02Fix
CVE-2026-24221NVIDIA NVTabular deserialization of untrusted data7.8CNA v3.10.2%2026-06-02Fix
CVE-2026-10719Open Seachest/Seachest NVMe show Format Descriptors vulnerability1.8CNA v4.00.1%2026-06-02
CVE-2026-10718Open Seachest/Seachest NVMe Trim (Deallocate) vulnerability4.6CNA v4.00.1%2026-06-02
CVE-2026-10717Open-Seachest/Seachest show SCSI Defect List vulnerability1.8CNA v4.00.1%2026-06-02
CVE-2026-10702Mozilla Firefox JIT miscompilation in the JavaScript Engine: JIT component4.3CISA ADP v3.10.9%2026-06-02Exploit codeKCVFix
CVE-2026-10701Mozilla Firefox incorrect boundary conditions in the Graphics: Text component7.5CISA ADP v3.10.3%2026-06-02Fix
CVE-2026-10688ahujasid blender-mcp server.py execute_blender_code code injection5.1CNA v4.00.2%2026-06-02
CVE-2026-10662ahujasid blender-mcp ZIP file server.py requests.get server-side request forgery5.3CNA v4.00.2%2026-06-02
CVE-2026-10661ahujasid blender-mcp server.py open injection5.3CNA v4.00.2%2026-06-02
CVE-2026-10650warmcat libwebsockets SSH protocol sshd.c lws_ssh_parse_plaintext resource consumption6.9CNA v4.00.4%2026-06-02Fix
CVE-2026-10629Verizon VoLTE SIP signaling vulnerability7.4CISA ADP v3.10.2%2026-06-02
CVE-2026-10624SourceCodester Human Resource Management Employee view detailview.php resource injection5.3CNA v4.00.2%2026-06-02
CVE-2026-10622Collibra Platform (on-prem) REST API improper authentication8.2CISA ADP v3.10.4%2026-06-02Fix
CVE-2026-10621Collibra Platform (SaaS) restore handler path traversal7.5CISA ADP v3.10.4%2026-06-02Fix
CVE-2026-10620code-projects Student Admission System index.php SQL injection6.9CNA v4.00.3%2026-06-02
CVE-2026-10619sayan365 student-management-system improper authentication6.9CNA v4.00.5%2026-06-02
CVE-2026-10617nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication6.9CNA v4.00.4%2026-06-02
CVE-2026-10616nextlevelbuilder GoClaw team task completion handler missing authorization5.3CNA v4.00.2%2026-06-02
CVE-2026-10611OTP bypass via plugin-based LDAP authentication in MISP when LDAP mixed authentication is enabled10.0v3.10.4%2026-06-02
CVE-2026-10608DedeCMS carbuyaction.php RemoveXSS SQL injection6.9CNA v4.00.3%2026-06-02
CVE-2026-10607DedeCMS flink.php dede_htmlspecialchars SQL injection6.9CNA v4.00.3%2026-06-02
CVE-2026-10606DedeCMS Feedback feedback.php TrimMsg SQL injection6.9CNA v4.00.3%2026-06-02
CVE-2026-10591Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths8.6CNA v4.00.7%2026-06-02Fix
CVE-2026-10584HTTPS Fallback to HTTP in Graph Explorer8.2CNA v4.00.1%2026-06-02Fix
CVE-2026-10583nextlevelbuilder GoClaw TTS Configuration endpoint tts_config.go import server-side request forgery5.1CNA v4.00.2%2026-06-02
CVE-2026-10581DedeCMS download.php base64_decode server-side request forgery5.3CNA v4.00.2%2026-06-02
CVE-2026-10568itsourcecode Fees Management System manage_payment.php SQL injection5.3CNA v4.00.2%2026-06-02
CVE-2026-105671Panel-dev CordysCRM ModuleFormController ModuleFormService.java save cross-site scripting5.1CNA v4.00.2%2026-06-02Fix
CVE-2026-10566FoundationAgents MetaGPT schema.py Message.check_instruct_content deserialization4.8CNA v4.00.1%2026-06-02
CVE-2026-10565Open5GS NGAP Handover gmm-sm.c gmm_state_security_mode race condition2.3CNA v4.00.2%2026-06-02
CVE-2026-10559SourceCodester Pizzafy Ecommerce System index.php file inclusion5.3CNA v4.00.2%2026-06-02
CVE-2026-10558SourceCodester Pizzafy Ecommerce System index.php file inclusion5.3CNA v4.00.2%2026-06-02
CVE-2026-10550elunez eladmin Application Deployment App.java command injection5.3CNA v4.01.1%2026-06-02
CVE-2026-10549Privilege escalation in Yandex Database5.3CNA v4.00.3%2026-06-02Fix
CVE-2026-10548NousResearch hermes-agent credential pool synchronization improper authentication4.8CNA v4.00.1%2026-06-02
CVE-2026-10529westboy CicadasCMS Task Scheduling Management ScheduleJobController.java cross-site scripting4.8CNA v4.00.2%2026-06-02
CVE-2026-10528Orthanc DICOM Server DCMTK FromDcmtkBridge.cpp read stack-based overflow4.8CNA v4.00.1%2026-06-02Fix
CVE-2026-105141Panel-dev CordysCRM RequestParamTrimConfig.java cross-site scripting4.8CNA v4.00.3%2026-06-02Fix
CVE-2026-10510GeniexWebView XSS in com.transsion.aiassistantlifestyle6.1CISA ADP v3.10.2%2026-06-02
CVE-2026-10302itsourcecode Fees Management System manage_fee.php SQL injection5.3CNA v4.00.2%2026-06-02
CVE-2026-10301itsourcecode Fees Management System index.php cross-site scripting5.3CNA v4.00.3%2026-06-02
CVE-2026-10100Simple Custom Login Page WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.2%2026-06-02Fix
CVE-2026-10047Out-of-bounds write in Napoca real-mode hook handler via guest-controlled SS:SP (VA-13905)8.5CNA v4.00.1%2026-06-02
CVE-2026-10046Out-of-bounds write in Napoca BIOS INT 0x15 E820 memory map handler (VA-13905)8.5CNA v4.00.1%2026-06-02
CVE-2026-9844Roche Diagnostics navify Digital Pathology default credentials8.8CNA v4.00.4%2026-06-02Fix
CVE-2026-9730jamesmuga Remove NoFollow Commenter URL comment settings cross-site request forgery4.3CNA v3.10.2%2026-06-02
CVE-2026-9723Google Plus One Bottom WordPress plugin cross-site request forgery to plugin settings update4.3CNA v3.10.2%2026-06-02
CVE-2026-9722Laiser Tag WordPress plugin cross-site request forgery to plugin settings update via settings form4.3CNA v3.10.2%2026-06-02
CVE-2026-9599Tectite Forms WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2026-06-02
CVE-2026-9590Devolutions Server permission validation component improper access control5.3CISA ADP v3.10.3%2026-06-02Fix
CVE-2026-9522Devolutions Server PAM account discovery feature improper access control5.4CISA ADP v3.10.2%2026-06-02Fix
CVE-2026-9234JTL-Connector for WooCommerce WordPress plugin missing authorization4.3CNA v3.10.4%2026-06-02Fix
CVE-2026-9050Slider Revolution and missing authorization to Authenticated arbitrary Plugin Deactivation4.3CNA v3.10.3%2026-06-02Fix
CVE-2026-9048Slider Revolution - incorrect authorization to Authenticated sensitive information exposure4.3CNA v3.10.3%2026-06-02Fix
CVE-2026-8993Improper URL Handler Processing in D.Launcher 2 enables NTLM credential disclosure and SSRF attacks6.5CNA v3.10.4%2026-06-02Fix
CVE-2026-8936Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM8.2CNA v4.00.1%2026-06-02Fix
CVE-2026-8885DeMomentSomTres Shortcodes WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-02
CVE-2026-8422mr_mat Remove meta boxes per user role settings page cross-site request forgery4.3CNA v3.10.2%2026-06-02
CVE-2026-8293Really Simple Security WordPress plugin authentication bypass via Two-Factor OTP Skip7.5CISA ADP v3.10.4%2026-06-02Fix
CVE-2026-8206Kirki - unauthenticated privilege escalation via handle_forgot_password9.8CNA v3.10.8%2026-06-02Exploit codeFix
CVE-2026-8036Local privilege escalation in NI-PAL8.4CNA v4.00.2%2026-06-02Fix
CVE-2026-8035Null pointer dereference in NI-PAL6.9CNA v4.00.1%2026-06-02Fix
CVE-2026-7313CWE‑522: Insufficiently protected credentials in web services in Progress Sitefinity8.7CNA v3.10.5%2026-06-02Fix
CVE-2026-7312CWE‑522: Insufficiently protected credentials in web services in Progress Sitefinity10.0CNA v3.10.6%2026-06-02Fix
CVE-2026-7299Appsmith SQL query editor autocomplete stored cross-site scripting5.4v3.10.3%2026-06-02Exploit codeFix
CVE-2026-7201Authorization bypass through user-controlled key in web services in Progress Sitefinity8.8CNA v3.10.5%2026-06-02Fix
CVE-2026-7198Improper access control in web services in Progress Sitefinity9.8CNA v3.10.6%2026-06-02Fix
CVE-2026-7195Improper input validation in web services in Progress Sitefinity8.8CNA v3.10.6%2026-06-02Fix
CVE-2026-5422Path traversal in jupyter/jupyter8.1v3.10.4%2026-06-02Fix
CVE-2026-5385GLPI stored XSS in knowledge base8.4CNA v4.00.6%2026-06-02Fix
CVE-2026-5191Tiled Gallery Carousel Without JetPack WordPress plugin stored cross-site scripting5.4CNA v3.10.2%2026-06-02
CVE-2026-5076ARMember Premium password reset mechanism improper authentication9.8CNA v3.10.5%2026-06-02Exploit codeKCVFix
CVE-2026-5074ARMember Premium WordPress plugin authenticated (Subscriber+) SQL injection via sSortDir_0 parameter6.5CNA v3.10.4%2026-06-02Fix
CVE-2026-5073ARMember Premium WordPress plugin unauthenticated SQL injection via order parameter7.5CNA v3.11.6%2026-06-02NucleiKCVFix
CVE-2026-4081ZeM STL WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-06-02
CVE-2026-4080Easy Cart WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-06-02Fix
CVE-2026-4071BirdSeed WordPress plugin cross-site request forgery via BirdSeed Token Change4.3CNA v3.10.2%2026-06-02
CVE-2026-3871Zyxel VMG4005-B50B firmware UPnP DeletePortMapping command buffer overflow6.5CNA v3.10.3%2026-06-02Fix
CVE-2026-3870Zyxel VMG4005-B50B firmware UPnP AddPortMapping command buffer overflow6.5CNA v3.10.3%2026-06-02Fix
CVE-2026-3722Auto Image Attributes From Filename With Bulk Updater WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-06-02Fix
CVE-2026-3620Word Replacer WordPress plugin stored cross-site scripting4.4CNA v3.10.4%2026-06-02
CVE-2026-3514Authentication bypass in PrefectHQ/Prefect7.5CNA v3.00.6%2026-06-02Fix
CVE-2026-3198Improper access control in MLflow/MLflow6.5CNA v3.00.4%2026-06-02Fix
CVE-2026-2425hiWeb Migration Simple WordPress plugin reflected cross-site scripting via new_domain parameter6.1CNA v3.10.2%2026-06-02
CVE-2026-2382FPW Category Thumbnails WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-06-02
CVE-2026-1871Authenticated stack-based buffer overflow in RTSP Authentication of Tapo C2007.1CNA v4.00.3%2026-06-02Fix
CVE-2026-1829Content Visibility for Divi Builder WordPress plugin remote code execution8.8CNA v3.10.7%2026-06-02Fix
CVE-2026-1784Red Hat OpenShift Container Platform ose-cluster-ingress-operator: Remote code execution8.8CNA v3.10.2%2026-06-02Fix
CVE-2026-1451rognone WordPress plugin reflected cross-site scripting via a parameter6.1CNA v3.10.2%2026-06-02
CVE-2026-1450rognone WordPress plugin reflected cross-site scripting via mode parameter6.1CNA v3.10.2%2026-06-02
CVE-2026-0611Spacelabs Healthcare Sentinel.x unauthenticated RCE via .NET Remoting9.2CNA v4.00.7%2026-06-02Fix
CVE-2026-49491Pixa Bank SQL injection via agence-ajax.php API8.8CNA v4.00.4%2026-06-01
CVE-2026-49433DeepAI api.DeepAI.org/change_user_email CSRF2.3CNA v4.00.2%2026-06-01Fix
CVE-2026-49361Apache Fluss Netty Frame Decoder memory exhaustion7.5CISA ADP v3.10.9%2026-06-01Fix
CVE-2026-49328Apache Fesod (Incubating): Improper validation of user-supplied URLs leading to SSRF5.3CISA ADP v3.10.7%2026-06-01Fix
CVE-2026-49298Apache Airflow: JWT token exposure in KubernetesExecutor Command-Line arguments8.8CISA ADP v3.10.8%2026-06-01Fix
CVE-2026-49270Apache ActiveMQ Broker information disclosure5.9CISA ADP v3.10.5%2026-06-01Fix
CVE-2026-49267Apache Airflow: No certificate validation on SMTP STARTTLS connections5.9CISA ADP v3.10.3%2026-06-01Fix
CVE-2026-49157Apache ActiveMQ has an incorrect default permissions8.8CISA ADP v3.10.6%2026-06-01Fix
CVE-2026-49140Nanobot denial of service via Matrix Media Download handler5.3CNA v4.00.5%2026-06-01Fix
CVE-2026-49139Nanobot SSRF via Microsoft Teams Channel serviceUrl Poisoning7.0CNA v4.00.7%2026-06-01Fix
CVE-2026-49138Nanobot SSRF via web_fetch Tool Redirect Following5.3CNA v4.00.5%2026-06-01Fix
CVE-2026-49136Anionex banana-slides banana Slides path traversal via generate_image in ai_service.py8.7CNA v4.00.6%2026-06-01
CVE-2026-49135CodexBar insecure temporary file Handling in Notarization Workflow7.2CNA v4.00.2%2026-06-01Fix
CVE-2026-49134CodexBar privilege escalation via CLI Installer Temp file7.5CNA v4.00.5%2026-06-01Fix
CVE-2026-49121AI Tensor Engine for ROCm (AITER) unauthenticated RCE via MessageQueue.recv Pickle deserialization9.8v3.11.5%2026-06-01
CVE-2026-48879AIWU WordPress plugin privilege escalation9.8CNA v3.10.5%2026-06-01Fix
CVE-2026-48866Gravity Forms WordPress plugin arbitrary file deletion9.6CNA v3.10.5%2026-06-01Exploit codeFix
CVE-2026-48865LearnPress WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-06-01Fix