CVE-2026 records published in July 2026

This page lists the 9,534 CVE-2026 records published in July 2026, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 20 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2026 list filters these records by severity or signal.

Critical
1,25913.2% of these records
Listed in CISA KEV
200.2% of these records
Reported exploited
160.2% of these records
Detection signal
760.8% of these records
Exploit code
2342.5% of these records
Actionable vendor fix
8,18685.9% of these records

Figures as of 2026-10-24 13:48 UTC. Records published in July 2026 have had from about three months to about four months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2026 records published in July 2026, newest first: records 1 to 1,000 of 9,534
CVE Summary CVSS EPSS Published Signals
CVE-2026-68771ComfyUI unauthenticated RCE via LoadTrainingDataset Pickle deserialization9.3CNA v4.01.1%2026-07-31Exploit code
CVE-2026-68770sentence-transformers arbitrary code execution on Local Model Load Despite trust_remote_code=False9.3CNA v4.00.9%2026-07-31Fix
CVE-2026-67822Tenda W6-S /goform/wifiSSIDset endpoint stack-based buffer overflow9.8CISA ADP v3.10.5%2026-07-31
CVE-2026-67607LightFTP race condition DoS via worker_thread_cleanup8.2CNA v4.00.4%2026-07-31
CVE-2026-67350Serendipity open redirect via exit.php2.1CNA v4.00.3%2026-07-31Fix
CVE-2026-65981coturn mobility ticket session resume authorization bypass7.1CNA v3.10.4%2026-07-31Fix
CVE-2026-65841Jodit has cross-site scripting5.3CNA v4.00.5%2026-07-31Fix
CVE-2026-65636YAML injection via unescaped newlines in ymlr document comments2.1CNA v4.00.2%2026-07-31Fix
CVE-2026-65313ANDRITZ HIPASE-250 use of hard-coded VNC credentials in the engineering-workstation provisioning8.1CNA v3.10.3%2026-07-31Fix
CVE-2026-65311ANDRITZ HIPASE-250 missing authentication for logging-configuration endpoint5.3CNA v3.10.5%2026-07-31Fix
CVE-2026-65310ANDRITZ HIPASE-250 missing authentication and permissive CORS policy7.5CNA v3.10.5%2026-07-31Fix
CVE-2026-65309ANDRITZ HIPASE-250 storage of passwords in a reversible format7.5CNA v3.10.2%2026-07-31Fix
CVE-2026-64607Apache HttpComponents Client content-encoding decoding vulnerability5.3CISA ADP v3.10.5%2026-07-31Fix
CVE-2026-63223CodeIgniter4 CodeIgniter: Uploaded file extension validation bypass in is_image and mime_in rules9.8CNA v3.10.8%2026-07-31Exploit codeFix
CVE-2026-63222CodeIgniter4 CodeIgniter: Path traversal in UploadedFile::move when using client-provided filenames7.5CNA v3.10.6%2026-07-31Fix
CVE-2026-63221CodeIgniter4 CodeIgniter: SQL injection is possible9.4CNA v3.10.6%2026-07-31Fix
CVE-2026-63220CodeIgniter4 CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure4.8CNA v3.10.2%2026-07-31Fix
CVE-2026-62999Copier: Percent-encoded dot segments in template URLs can allow trusted-prefix escape7.5CNA v3.10.4%2026-07-31
CVE-2026-62959Coturn: Pre-authentication heap memory disclosure in ACME redirect (`try_acme_redirect`)8.2CNA v4.00.5%2026-07-31Fix
CVE-2026-62391Apache Kyuubi: Kyuubi.session.local.dir.allow.list bypass via unprefixed Spark file-conf aliases8.1CISA ADP v3.10.8%2026-07-31Fix
CVE-2026-62324xdan Jodit sanitizeHTMLElement method cross-site scripting5.4CNA v3.10.3%2026-07-31Fix
CVE-2026-62323Cloudreve: Unauthorized file write via WOPI view sessions whose access token secret is ignored6.3CNA v3.10.3%2026-07-31Fix
CVE-2026-59232Stored cross-site scripting in Prospero Flow CRM lead name field5.3CNA v4.00.5%2026-07-31Fix
CVE-2026-59231Server-side request forgery in Pentestify PDF export via unvalidated image URLs5.3CNA v4.00.5%2026-07-31Fix
CVE-2026-58048WebPros cPanel SQL injection9.4CNA v4.00.6%2026-07-31Exploit codeFix
CVE-2026-58047WebPros cPanel HTTP request smuggling5.6CNA v4.00.5%2026-07-31Fix
CVE-2026-58039Node.js Node improper access control3.3CNA v3.00.2%2026-07-31Fix
CVE-2026-57232Contao: Server-side request forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader module3.1CNA v3.10.3%2026-07-31Fix
CVE-2026-56673ComfyUI: Path traversal in LoadImage7.5CNA v3.10.6%2026-07-31Fix
CVE-2026-56672Comfy-Org ComfyUI /userdata endpoint stored cross-site scripting8.2CNA v3.10.4%2026-07-31Fix
CVE-2026-56671ComfyUI: Path traversal in /experiment/models/preview allows arbitrary image file read7.5CNA v3.11.0%2026-07-31Fix
CVE-2026-56670ComfyUI: Stored XSS via SVG file upload on the /view endpoint8.2CNA v3.10.4%2026-07-31Fix
CVE-2026-56571HCL iControl error handling vulnerability3.7CNA v3.10.3%2026-07-31Fix
CVE-2026-56570HCL iControl login form information disclosure3.7CNA v3.10.3%2026-07-31Fix
CVE-2026-56569HCL iControl configuration files information disclosure4.0CNA v3.10.1%2026-07-31Fix
CVE-2026-56568HCL iControl client-side API error messages information disclosure3.7CNA v3.10.3%2026-07-31Fix
CVE-2026-56567HCL iControl configuration files information disclosure5.1CNA v3.10.1%2026-07-31Fix
CVE-2026-55825Contao: Possible path traversal in job download URIs3.1CNA v3.10.3%2026-07-31Fix
CVE-2026-55824Contao crawler leaks auth credentials to external hosts2.6CNA v3.10.2%2026-07-31Fix
CVE-2026-55502Cloudreve: OAuth Admin.Read scope can update OneDrive storage policy credentials7.1CNA v3.10.3%2026-07-31Fix
CVE-2026-55499Cloudreve file event stream incorrect authorization4.3CNA v3.10.3%2026-07-31Fix
CVE-2026-55497Cloudreve: Server crash6.5CNA v3.10.5%2026-07-31Fix
CVE-2026-55496Cloudreve user search endpoint information disclosure4.3CNA v3.10.4%2026-07-31Fix
CVE-2026-55495Cloudreve: Path traversal in WOPI PUT_RELATIVE allows arbitrary file creation in Owner Account4.3CNA v3.10.4%2026-07-31Fix
CVE-2026-55100hashi-vault-js has a path traversal and query parameter injection8.7CNA v4.00.6%2026-07-31Fix
CVE-2026-54909Pion STUN vulnerable to remote denial of service5.3CNA v3.10.6%2026-07-31Fix
CVE-2026-54787sigstore-go fails to check signature timestamps against a signing key's validity period3.1CNA v3.10.1%2026-07-31Fix
CVE-2026-54785gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode6.2CNA v3.10.2%2026-07-31Fix
CVE-2026-54768WPGraphQL password reset mutation vulnerability6.9CNA v4.00.4%2026-07-31Fix
CVE-2026-54737@phun-ky/defaults-deep has a prototype pollution issue via Unsafe Recursive Property Merging7.3CNA v3.10.5%2026-07-31Fix
CVE-2026-54729HackingRepo dssrf-js dssrf: Any users using DNS is impacted by SSRF8.7CNA v4.00.5%2026-07-31Fix
CVE-2026-54725bank-vaults vault-secrets-webhook admission webhook server-side request forgery9.6CNA v3.10.4%2026-07-31Fix
CVE-2026-54707OnionShare Receive mode writes uploaded files even when file uploads are disabled5.4CNA v3.10.4%2026-07-31Fix
CVE-2026-54706OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files4.8CNA v3.10.3%2026-07-31Fix
CVE-2026-53599REDAXO Mediapool file upload vulnerability7.5CNA v3.10.5%2026-07-31Fix
CVE-2026-53573core-geonetwork has an open redirect Bypass4.8CNA v4.00.6%2026-07-31Fix
CVE-2026-53551free5GC AUSF: Null byte injection in supiOrSuci causes HTTP 500 internal service failure6.9CNA v4.00.7%2026-07-31Fix
CVE-2026-53510Savon::Model evaluates WSDL operation names as Ruby source8.1CNA v3.10.7%2026-07-31Fix
CVE-2026-53505Thumbor proportion filter allows unbounded post-transform resize leading to remote DoS7.5CNA v3.10.6%2026-07-31Fix
CVE-2026-53504Thumbor has Regex denial of service (ReDoS) in `convolution` filter7.5CNA v3.10.6%2026-07-31Fix
CVE-2026-53503Thumbor convolution filter allows divide-by-zero in C extension leading to remote DoS7.5CNA v3.10.8%2026-07-31Fix
CVE-2026-53502Thumbor has path traversal via post-validation URL decoding bypass in file_loader8.7CNA v4.00.5%2026-07-31Fix
CVE-2026-53501Thumbor has HMAC validation bypass via multiple .replace calls when removing URL signature8.2CNA v3.10.4%2026-07-31Fix
CVE-2026-53500Thumbor ALLOWED_SOURCES hostname allowlist server-side request forgery8.2CNA v3.10.5%2026-07-31Fix
CVE-2026-52857Wings: Maliciously or erroneously created parsed config files can cause wings process to OOM5.5CNA v3.10.2%2026-07-31Fix
CVE-2026-52856Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service7.5CNA v3.10.6%2026-07-31Fix
CVE-2026-52855Wings exposes node configuration secrets through egg configuration-file templating9.9CNA v3.10.5%2026-07-31Fix
CVE-2026-52371xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 server-side request forgery6.5CISA ADP v3.10.4%2026-07-31
CVE-2026-52232FS S3150-8T2F Switch logo.asp page reflected cross-site scripting6.1CISA ADP v3.10.3%2026-07-31
CVE-2026-52134libiec61850 GOOSE payload parser authentication bypass9.8CISA ADP v3.10.8%2026-07-31Exploit code
CVE-2026-51953FeehiCMS session management privilege escalation7.4CISA ADP v3.10.4%2026-07-31
CVE-2026-51785Hugo Leisink Hiawatha code injection9.8CISA ADP v3.11.1%2026-07-31
CVE-2026-50986totadministrativemandate payment validation controller cross-site request forgery8.8CISA ADP v3.10.2%2026-07-31
CVE-2026-46594Reflected XSS in PHP Poll Script5.1CNA v4.00.6%2026-07-31Fix
CVE-2026-46593Authenticated SQL injection in PHP Poll Script8.6CNA v4.00.4%2026-07-31Fix
CVE-2026-45377Decidim: Private exports can be downloaded through reusable links6.5CNA v3.10.5%2026-07-31Fix
CVE-2026-45376Decidim: Admin user search allows SQL injection through similarity-based sorting5.5CNA v3.10.6%2026-07-31Fix
CVE-2026-45330Decidim: Verification admins can access supplied IDs from other organisations4.9CNA v3.10.5%2026-07-31Fix
CVE-2026-45086Decidim: Forms admin question editor lacks authorization5.4CNA v3.10.3%2026-07-31Fix
CVE-2026-44615Apache Zeppelin path traversal in NotebookRepo note and folder path composition6.5CISA ADP v3.10.8%2026-07-31Fix
CVE-2026-43833Advantech ADAM-3600 upload functionality stack-based buffer overflow5.3CISA ADP v3.10.5%2026-07-31Fix
CVE-2026-43832Advantech ADAM-3600 Cookie parsing methods stack-based buffer overflow7.5CISA ADP v3.10.6%2026-07-31Fix
CVE-2026-43831Advantech ADAM-3600 log message functionality stack-based buffer overflow7.5CISA ADP v3.10.6%2026-07-31Fix
CVE-2026-43830Advantech ADAM-3600 firmware upgrade file verification process command injection9.8CISA ADP v3.12.5%2026-07-31Fix
CVE-2026-43829Advantech ADAM-3600 password functionality stack-based buffer overflow7.5CISA ADP v3.10.6%2026-07-31Fix
CVE-2026-38713TR1200, TR3000, WR300, WR1200, WR1300, WR1500, WR3000, WR3600 and WR6500 command injection9.8CISA ADP v3.12.8%2026-07-31
CVE-2026-38711TR1200, TR3000, WR300, WR1200, WR1300, WR1500, WR3000, WR3600 and WR6500 command injection9.8CISA ADP v3.12.8%2026-07-31
CVE-2026-38710TR1200 and TR3000 system.setclock interface command injection7.2CISA ADP v3.12.3%2026-07-31
CVE-2026-38708TR1200, TR3000, WR300, WR1200, WR1300, WR1500, WR3000, WR3600 and WR6500 command injection9.8CISA ADP v3.12.8%2026-07-31
CVE-2026-34641Adobe Premiere Pro out-of-bounds write7.8CNA v3.10.3%2026-07-31Fix
CVE-2026-34497FMS Employee vulnerable to HTML injection4.8CNA v4.00.2%2026-07-31Fix
CVE-2026-34495FMS Employee vulnerable to XSS4.8CNA v4.00.2%2026-07-31Fix
CVE-2026-34490Xaap Android Data Stored in Unencrypted Database4.8CNA v4.00.1%2026-07-31Fix
CVE-2026-28145MasterStudy LMS WordPress plugin broken access control5.3CNA v3.10.2%2026-07-31Fix
CVE-2026-28144WP Maps WordPress plugin sensitive data exposure4.3CNA v3.10.3%2026-07-31Fix
CVE-2026-25552TryGhost Ghost-CLI ghost CLI IP spoofing via X-Forwarded-For header6.3CNA v4.00.2%2026-07-31Fix
CVE-2026-21662FMS Employee allows upload of Unrestricted files4.8CNA v4.00.5%2026-07-31Fix
CVE-2026-18481AWS Ops Wheel stored XSS in Participant URL field leads to account takeover via Session Token Theft6.2CNA v4.00.5%2026-07-31Fix
CVE-2026-18452Rich Source|DMS+ (Non-Mobile) use of hard-coded credentials10.0CNA v4.00.6%2026-07-31Fix
CVE-2026-18446fast-uri vulnerable to host confusion via backslash authority introducer7.5CNA v3.10.2%2026-07-31Fix
CVE-2026-18437MailerPress WordPress plugin unauthorized access5.3CNA v3.10.4%2026-07-31Fix
CVE-2026-18436MailerPress WordPress plugin missing authorization unauthenticated arbitrary modification5.3CNA v3.10.4%2026-07-31Fix
CVE-2026-18394AWS strands-agents-tools incorrect authorization6.9CNA v4.00.5%2026-07-31Fix
CVE-2026-18358gnome-remote-desktop RDP server denial of service7.5CNA v3.10.5%2026-07-31Fix
CVE-2026-18321Buffer copy without checking size of input (Classic buffer overflow) in NTPsec4.7CNA v3.10.1%2026-07-31Fix
CVE-2026-18218Red Hat Keycloak token revocation policy missing authorization4.2CNA v3.10.3%2026-07-31Fix
CVE-2026-18217Red Hat Keycloak SAML HTTP-redirect binding vulnerability3.4CNA v3.10.3%2026-07-31
CVE-2026-18215Red Hat Keycloak Microsoft identity provider token exchange improper authentication6.8CNA v3.10.4%2026-07-31Fix
CVE-2026-18214Red Hat Keycloak Google identity provider token exchange missing authorization6.8CNA v3.10.4%2026-07-31Fix
CVE-2026-18211Red Hat Keycloak secure-client-uris client policy executor improper input validation4.2CNA v3.10.3%2026-07-31
CVE-2026-18209Red Hat Keycloak OIDC redirect URI validation vulnerability3.4CNA v3.10.4%2026-07-31Fix
CVE-2026-18208Red Hat Keycloak token introspection endpoint missing authorization6.5CNA v3.10.3%2026-07-31
CVE-2026-18206Red Hat Keycloak client policy host improper input validation3.7CNA v3.10.3%2026-07-31
CVE-2026-18203Red Hat Keycloak group policy evaluation incorrect authorization6.5CNA v3.10.3%2026-07-31
CVE-2026-18157Yggdrasil-worker-package-manager: Yggdrasil-worker-package-manager: Remote code execution7.8CNA v3.10.4%2026-07-31
CVE-2026-18141Aap-gateway: Aap-gateway: Authentication bypass in event-driven ansible via forged HTTP header8.2CNA v3.10.4%2026-07-31Fix
CVE-2026-17567Fluent Forms WordPress plugin unauthenticated sensitive information exposure5.3CNA v3.10.6%2026-07-31Fix
CVE-2026-17566pgAdmin.org pgAdmin 4 Import/Export Data tool OS command injection9.4CNA v4.00.7%2026-07-31Exploit codeFix
CVE-2026-17561Unauthenticated RCE in Innotim Software's Logsign SIEM9.8CNA v3.10.6%2026-07-31Fix
CVE-2026-17351pgAdmin 4: AI Assistant read-only transaction bypass via sqlparse/PostgreSQL lexer disagreement9.4CNA v4.00.5%2026-07-31Fix
CVE-2026-17350pgAdmin 4: Tool permission bypass via backend routes and Socket.IO handlers5.3CNA v4.00.4%2026-07-31Fix
CVE-2026-17349pgAdmin 4 adhoc server clone insecure direct object reference9.3CNA v4.00.4%2026-07-31Fix
CVE-2026-17348pgadmin.org pgAdmin 4 missing authentication6.9CNA v4.00.4%2026-07-31Fix
CVE-2026-17347pgAdmin 4: OS command injection in MASTER_PASSWORD_HOOK via untrusted username substitution7.7CNA v4.00.7%2026-07-31Fix
CVE-2026-17346pgAdmin 4: SQL injection8.7CNA v4.00.6%2026-07-31Fix
CVE-2026-16843Hikvision DS-3WAP521-SI OS command injection7.2CNA v3.10.9%2026-07-31
CVE-2026-16504VPS.org one-click Zulip template deployment instance contains multiple vulnerabilities9.8CISA ADP v3.10.5%2026-07-31Fix
CVE-2026-16503VPS.org one-click Supabase template deployment instance contains multiple vulnerabilities9.1CISA ADP v3.10.4%2026-07-31Fix
CVE-2026-16236Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin arbitrary file upload8.8CNA v3.11.2%2026-07-31Fix
CVE-2026-16105Red Hat Keycloak role management API missing authorization4.9CNA v3.10.4%2026-07-31Fix
CVE-2026-15722Red Hat Directory Server stack-based buffer overflow7.5CNA v3.10.8%2026-07-31Fix
CVE-2026-15381WP Go Maps WordPress plugin unauthenticated SQL injection via Markers REST filter3.7CISA ADP v3.10.3%2026-07-31Reported exploitedFix
CVE-2026-15258Product Feed Manager for WooCommerce WordPress plugin Contributor+ SQL injection via Feed Filter8.1CISA ADP v3.10.4%2026-07-31Fix
CVE-2026-15227Checkmk missing authorization allows Editing of Foreign Reports5.3CNA v4.00.4%2026-07-31Fix
CVE-2026-15209JS Help Desk support ticket endpoint insecure direct object reference6.5CISA ADP v3.10.3%2026-07-31Fix
CVE-2026-15048Geeky Bot plugin chat history AJAX action missing authorization7.5CISA ADP v3.10.4%2026-07-31Fix
CVE-2026-14931JS Help Desk WordPress plugin Contributor+ user email disclosure6.5CISA ADP v3.10.4%2026-07-31Fix
CVE-2026-14930JS Help Desk front-end request dispatcher missing authorization7.5CISA ADP v3.10.4%2026-07-31Fix
CVE-2026-14929JS Help Desk ticket reply update incorrect authorization4.3CISA ADP v3.10.3%2026-07-31Fix
CVE-2026-14928JS Help Desk WordPress plugin sensitive information disclosure6.5CISA ADP v3.10.4%2026-07-31Fix
CVE-2026-14927FluentCart WordPress plugin unauthenticated order PII disclosure via Print Routes3.7CISA ADP v3.10.3%2026-07-31Fix
CVE-2026-14922WP Photo Album Plus WordPress plugin Subscriber+ stored XSS via Photo comment6.1CISA ADP v3.10.3%2026-07-31Fix
CVE-2026-14921Ultimate Addons for WPBakery Page Builder WordPress plugin stored XSS6.1CISA ADP v3.10.3%2026-07-31Fix
CVE-2026-14919ShopMonitor.io WordPress plugin unauthenticated Administrator account takeover9.8CISA ADP v3.10.5%2026-07-31Fix
CVE-2026-14862Support Genix ticket attachment download missing authorization3.7CISA ADP v3.10.3%2026-07-31Fix
CVE-2026-14849Paid Member Subscriptions WordPress plugin unauthenticated sensitive information exposure3.7CISA ADP v3.10.3%2026-07-31Fix
CVE-2026-14847Paid Member Subscriptions WordPress plugin Subscriber+ Payment data disclosure via IDOR4.3CISA ADP v3.10.3%2026-07-31Fix
CVE-2026-14845NewStatPress WordPress plugin unauthenticated stored XSS via Top post widget6.1CISA ADP v3.10.3%2026-07-31Fix
CVE-2026-14843Events Made Easy WordPress plugin unauthenticated Person data modification via IDOR5.3CISA ADP v3.10.3%2026-07-31Fix
CVE-2026-14834Mailgun for WordPress plugin unauthenticated arbitrary Mailgun List Subscription via add_list AJAX6.5CISA ADP v3.10.3%2026-07-31Fix
CVE-2026-14833Lightbox with PhotoSwipe WordPress plugin Author+ stored XSS via data-lbwps-caption attribute6.8CISA ADP v3.10.4%2026-07-31Fix
CVE-2026-14830FlxWoo WordPress plugin unauthenticated Payment bypass7.5CISA ADP v3.10.4%2026-07-31Fix
CVE-2026-14554The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks.6.5CISA ADP v3.10.4%2026-07-31Fix
CVE-2026-14541Authentication bypass and Audience Confusion in MCP Toolbox OAuth Provider8.0CNA v4.00.3%2026-07-31
CVE-2026-14540Server-side request forgery via Unrestricted HTTP Redirection in MCP Toolbox8.0CNA v4.00.1%2026-07-31
CVE-2026-14539Denial of service via Unrestricted Payload Buffering in MCP Toolbox6.6CNA v4.00.2%2026-07-31
CVE-2026-14538BigQuery Dataset Allowlist Bypass via Metadata Dry-Run in MCP Toolbox5.7CNA v4.00.2%2026-07-31
CVE-2026-14537Authorization bypass in MCP Toolbox Legacy HTTP endpoints8.1CNA v4.00.3%2026-07-31
CVE-2026-14483Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.14.0%2026-07-31NucleiExploit codeFix
CVE-2026-14333Demi backup directory information disclosure7.5CISA ADP v3.10.4%2026-07-31Fix
CVE-2026-14319GiveWP WordPress plugin unauthenticated Recurring Donor information disclosure7.5CISA ADP v3.10.4%2026-07-31Fix
CVE-2026-14317GiveWP WordPress plugin unauthenticated Payment Gateway Restriction bypass5.3CISA ADP v3.10.3%2026-07-31Fix
CVE-2026-13609Frontend Admin by DynamiApps WordPress plugin unauthenticated stored cross-site scripting8.8CISA ADP v3.10.5%2026-07-31Fix
CVE-2026-13393ElementsKit Lite WordPress plugin Subsite stored XSS3.5CISA ADP v3.10.2%2026-07-31Fix
CVE-2026-13392ElementsKit Lite WordPress plugin Subsite PHP code injection7.2CISA ADP v3.10.7%2026-07-31Fix
CVE-2026-12721Kirki WordPress plugin unauthenticated SQL injection8.6CISA ADP v3.10.4%2026-07-31Fix
CVE-2026-12720Kirki WordPress plugin unauthenticated PHP object injection7.5CISA ADP v3.10.5%2026-07-31Fix
CVE-2026-12697wpForo Forum WordPress plugin Subscriber+ Cross-User AI Chat Message deletion via IDOR5.4CISA ADP v3.10.3%2026-07-31Fix
CVE-2026-12695miniOrange 2FA WordPress plugin 2FA bypass via Attacker-Controlled ga_secret8.1CISA ADP v3.10.3%2026-07-31Fix
CVE-2026-12376Academy LMS WordPress plugin sensitive information disclosure4.3CISA ADP v3.10.3%2026-07-31
CVE-2026-12251Ultimate Member WordPress plugin unauthenticated privilege escalation via role Selection field8.1CISA ADP v3.10.4%2026-07-31Fix
CVE-2026-11770Red Hat 389 Directory Server CleanAllRUV replication status-check LDAP injection7.5CNA v3.10.5%2026-07-31Fix
CVE-2026-10686Zephyr IPv6 forwarding denial of service5.8CNA v3.10.5%2026-07-31Fix
CVE-2026-10685Zephyr Bluetooth GATT client use-after-free7.6CNA v3.10.3%2026-07-31Fix
CVE-2026-10079Red Hat Advanced Cluster Security for Kubernetes insufficient verification of data authenticity8.5CNA v3.10.2%2026-07-31
CVE-2026-9044Command injection vulnerability in OpenVPN of TP-Link Archer AXE758.5CNA v4.02.5%2026-07-31Fix
CVE-2026-8155BuddyPress WordPress plugin Subscriber+ Private Messages disclosure via IDOR5.4CISA ADP v3.10.2%2026-07-31Fix
CVE-2026-68563Red Hat ansible-collection-redhat-leapp information disclosure5.5CNA v3.10.1%2026-07-30
CVE-2026-68562Red Hat ansible-collection-redhat-leapp Leapp report information disclosure6.2CNA v3.10.4%2026-07-30
CVE-2026-68503LazyOwn: Default C2 Operator Credentials Enable Administrative Access to C2 Dashboard9.8CNA v3.10.8%2026-07-30Fix
CVE-2026-68502grisuno LazyOwn Socket.IO input event command dispatcher remote code execution9.8CNA v3.11.0%2026-07-30Fix
CVE-2026-68501Sylius Mollie Plugin insecure direct object reference6.5CNA v3.10.6%2026-07-30Fix
CVE-2026-68500Sylius Mollie Plugin: Payment status forgery via the payment webhook7.5CNA v3.10.7%2026-07-30Fix
CVE-2026-68499uhop node-re2 global String.prototype.match matching cursor infinite loop6.2CNA v3.10.2%2026-07-30Fix
CVE-2026-67596CSL 1010 M2M 3G WiFi Module weak encryption via Router.cfg6.9CNA v4.00.1%2026-07-30
CVE-2026-67594Spikster missing authentication via API Route Group9.3CNA v4.00.8%2026-07-30
CVE-2026-67550node-re2 regex exec and match methods out-of-bounds read5.7CNA v3.10.2%2026-07-30Fix
CVE-2026-67530WACRM: SSRF via the automation `send_webhook` action6.4CNA v3.10.3%2026-07-30
CVE-2026-67529OpenProject time entries and cost entries APIs information disclosure4.3CNA v3.10.4%2026-07-30Fix
CVE-2026-67528OpenProject: Improper access control4.3CNA v3.10.4%2026-07-30Fix
CVE-2026-67527OpenProject: Improper access control7.6CNA v3.10.4%2026-07-30Fix
CVE-2026-67351Serendipity authentication bypass via Username Collision8.7CNA v4.00.6%2026-07-30Fix
CVE-2026-67349OpenCost Unauthenticated Helm Values Exposure and Admin Bypass8.7CNA v4.00.5%2026-07-30Fix
CVE-2026-67348julep-ai julep get_execution_details endpoint insecure direct object reference8.6CNA v4.00.4%2026-07-30
CVE-2026-67347Vendure Cross-Channel authorization bypass via StockLocation and Asset Update6.1CNA v4.00.5%2026-07-30
CVE-2026-67346Swarms server-side request forgery via DNS Rebinding Bypass7.7CNA v4.00.5%2026-07-30
CVE-2026-67345MaxKey DefaultRedirectResolver OAuth Authorization Code Theft8.5CNA v4.00.6%2026-07-30
CVE-2026-67248A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM8.8v3.10.5%2026-07-30Fix
CVE-2026-67247A path traversal vulnerability was found in the IHM Log handling of ADM6.5NVD v3.10.5%2026-07-30Fix
CVE-2026-67246A path traversal vulnerability was found in the Wallpaper component of ADM6.5v3.10.5%2026-07-30Fix
CVE-2026-67245A path traversal vulnerability was found in the VPN Clients on the ADM8.1v3.10.3%2026-07-30Fix
CVE-2026-67244A format string vulnerability was found in the Notification OAuth settings of ADM7.2v3.10.5%2026-07-30Fix
CVE-2026-67208Juggle Unauthenticated RCE via Exposed H2 console9.3CNA v4.04.3%2026-07-30Nuclei
CVE-2026-67207wolfcms wolf CMS authorization bypass via BackupRestoreController8.7CNA v4.00.5%2026-07-30
CVE-2026-67206wolfcms wolf CMS authenticated RCE via FileManagerController file upload8.7CNA v4.02.1%2026-07-30Exploit code
CVE-2026-66803Microsoft Azure Cosmos DB remote code execution10.0CNA v3.10.9%2026-07-30Fix
CVE-2026-66756Apache Tika: Unpack endpoint in tika-server allows configuration with unsecureFeatures=false6.9CNA v4.00.7%2026-07-30Fix
CVE-2026-66755Apache Tika: Arbitrary Local File Read in ISArchiveParser5.9CNA v4.00.6%2026-07-30Fix
CVE-2026-66720MZ Automation libiec61850 out-of-bounds read7.1CNA v4.00.3%2026-07-30Fix
CVE-2026-66421OpenClaw Dashboard stored XSS via lastMessage Session field8.8CNA v4.00.6%2026-07-30Exploit code
CVE-2026-66420Ylianst MeshCentral WebSocket origin validation vulnerability8.6CNA v4.00.2%2026-07-30
CVE-2026-66418OpenClaw Dashboard stored XSS via Failed Login Username field9.3CNA v4.00.6%2026-07-30Exploit code
CVE-2026-66416Leantime CSRF Protection Globally Disabled by Omission of Laravel VerifyCsrfToken Middleware8.6CNA v4.00.3%2026-07-30Fix
CVE-2026-66415Leantime server-side request forgery and local file inclusion in Blueprints::import8.4CNA v4.00.4%2026-07-30Fix
CVE-2026-66414Leantime open redirect in Login controller via redirectUrl parameter5.1CNA v4.00.3%2026-07-30Fix
CVE-2026-66369MZ Automation libiec61850 out-of-bounds read7.1CNA v4.00.3%2026-07-30Fix
CVE-2026-66364MZ Automation libiec61850 out-of-bounds read7.1CNA v4.00.3%2026-07-30Fix
CVE-2026-66360MZ Automation libiec61850 out-of-bounds read8.7CNA v4.00.5%2026-07-30Fix
CVE-2026-66349MZ Automation libiec61850 out-of-bounds read6.9CNA v4.00.3%2026-07-30Fix
CVE-2026-66066Rails Active Storage arbitrary file read9.5CNA v4.027.9%2026-07-30Reported exploitedMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2026-65835Capsule TenantResource controller privilege escalation6.6CNA v3.10.3%2026-07-30Fix
CVE-2026-65834Capsule node admission webhook denial of service6.8CNA v3.10.5%2026-07-30Fix
CVE-2026-65635Boruta dynamic client registration allows creation of over-privileged OAuth clients8.3CNA v4.00.5%2026-07-30Fix
CVE-2026-65423o6 Automation open62541 integer overflow or wraparound8.7CNA v4.00.8%2026-07-30Fix
CVE-2026-65421MZ Automation libiec61850 out-of-bounds read7.1CNA v4.00.3%2026-07-30Fix
CVE-2026-64870MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validation5.3CNA v4.00.4%2026-07-30
CVE-2026-64816RapidRAW NTLMv2 credential leak via UNC Path in lutPath7.1CNA v4.00.4%2026-07-30Fix
CVE-2026-64635Veeam Service Provider Console weak password recovery5.3CNA v3.10.3%2026-07-30
CVE-2026-63559o6 Automation open62541 integer overflow or wraparound8.7CNA v4.00.7%2026-07-30Fix
CVE-2026-63550MZ Automation libiec61850 out-of-bounds read7.1CNA v4.00.4%2026-07-30Fix
CVE-2026-63362o6 Automation open62541 integer underflow8.2CNA v4.01.8%2026-07-30Fix
CVE-2026-63035o6 Automation open62541 use-after-free7.2CNA v4.00.8%2026-07-30Fix
CVE-2026-63033MZ Automation lib60870 out-of-bounds read6.9CNA v4.00.5%2026-07-30Fix
CVE-2026-62946ImageMagick JNX decoder vulnerability5.1CNA v3.10.1%2026-07-30Fix
CVE-2026-62845Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers4.7CNA v3.10.3%2026-07-30Fix
CVE-2026-62663Banks: Arbitrary file read via path traversal in Media Filters (image/audio/video/document)7.5CNA v3.10.5%2026-07-30Fix
CVE-2026-62363ImageMagick: Heap Buffer Over-Write in fx operation5.0CNA v3.10.1%2026-07-30Fix
CVE-2026-62246Clastix Kamaji tenant datastore schema derivation improper isolation8.5CNA v3.10.4%2026-07-30Fix
CVE-2026-61893MZ Automation lib60870 out-of-bounds read6.9CNA v4.00.5%2026-07-30Fix
CVE-2026-61536masci Banks tool import path resolution code injection7.5CNA v3.10.5%2026-07-30Fix
CVE-2026-61526AdonisJS HTTP Server is vulnerable to reflected XSS through its exception handler6.1CNA v3.10.3%2026-07-30Fix
CVE-2026-60075Date::Manip versions for Perl allow CPU exhaustion7.5CISA ADP v3.10.6%2026-07-30Fix
CVE-2026-60074Date::Manip date parsing improper input validation7.5CISA ADP v3.10.6%2026-07-30Fix
CVE-2026-59952Valibot: Record issue paths can make flatten throw for inherited object property names6.9CNA v4.00.5%2026-07-30Fix
CVE-2026-59881AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate6.9CNA v4.00.5%2026-07-30Fix
CVE-2026-59328Cross-site scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips4.2CNA v3.10.2%2026-07-30Fix
CVE-2026-59327Cleartext storage of Spring Boot DevTools Remote Secret in Eclipse Launch Configurations4.4CNA v3.10.1%2026-07-30Fix
CVE-2026-59326HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server3.3CNA v3.10.1%2026-07-30Fix
CVE-2026-59310Broadcom VMware vCenter path traversal9.8CNA v3.12.6%2026-07-30KEVExploit codeFix
CVE-2026-59309VMware vCenter VMware Directory Service authentication bypass9.8CNA v3.10.6%2026-07-30Reported exploitedFix
CVE-2026-58222Red Hat Enterprise Linux 10 LDAP injection8.8CNA v3.10.8%2026-07-30Fix
CVE-2026-58218Red Hat Enterprise Linux 10 samba: Dns signing DoS via tkey name cache exhaustion5.3CNA v3.10.8%2026-07-30Fix
CVE-2026-58216Red Hat Enterprise Linux 10 Samba's Kerberos Key Distribution Center's out-of-bounds read5.3CNA v3.10.5%2026-07-30Fix
CVE-2026-58066Rocket.Chat improper authentication9.8CNA v3.00.4%2026-07-30Fix
CVE-2026-58046WebPros Plesk improper neutralization9.9CNA v3.10.6%2026-07-30Fix
CVE-2026-58043Node.js Node improper access control8.4v3.10.1%2026-07-30Fix
CVE-2026-58040Node.js Node improper certificate host validation6.3CNA v3.00.3%2026-07-30Fix
CVE-2026-57862Kanboard SSRF Filter Bypass via Hexadecimal IP Notation8.4CNA v4.00.4%2026-07-30
CVE-2026-57859e107 Second-order code execution via eval-based deserialization in e_array::unserialize7.7CNA v4.00.7%2026-07-30
CVE-2026-56850Node.js Node improper authentication4.4v3.10.1%2026-07-30Fix
CVE-2026-56847Node.js permission model trace events vulnerability6.1v3.10.2%2026-07-30Fix
CVE-2026-56758MZ Automation libiec61850 out-of-bounds read6.9CNA v4.00.3%2026-07-30Fix
CVE-2026-56428Bosch BSH ELP (Electronic Platform) Modules incorrect user management8.1CNA v3.10.5%2026-07-30Fix
CVE-2026-55777GoAccess: Out-of-bounds heap read in parse_ios via crafted User-Agent leads to remote crash/DoS5.3CNA v4.00.4%2026-07-30Fix
CVE-2026-55768GoAccess WebSocket server denial of service8.7CNA v4.00.5%2026-07-30Fix
CVE-2026-54885Server-side request forgery in Boruta OAuth request_uri and OpenID jwks_uri fetching6.9CNA v4.00.6%2026-07-30Fix
CVE-2026-54722HackingRepo dssrf-js dssrf: There a critical security bug with remove_at_symbol_in_string8.7CNA v4.00.6%2026-07-30Fix
CVE-2026-54715GoAccess: Heap out-of-bounds write in parse_browser7.1CNA v4.00.4%2026-07-30Fix
CVE-2026-54522MessagePack::Buffer#clear use-after-free that enables Cross-Buffer Disclosure2.1CNA v4.00.2%2026-07-30Fix
CVE-2026-54368CentreStack SQL injection via x-glad-filter header8.7CNA v4.00.7%2026-07-30Fix
CVE-2026-54367CentreStack Unauthenticated API authorization bypass8.8CNA v4.00.3%2026-07-30Fix
CVE-2026-54366CentreStack XXE via SharePoint Storage Configuration8.7CNA v4.00.5%2026-07-30Fix
CVE-2026-54365CentreStack Unauthenticated User Creation via deserialization in GSNamespace.dll8.7CNA v4.00.4%2026-07-30Fix
CVE-2026-54364CentreStack Session injection via SelectProvider.aspx6.9CNA v4.00.4%2026-07-30Fix
CVE-2026-54363CentreStack hard-coded key Token Forgery RCE9.3CNA v4.00.7%2026-07-30Fix
CVE-2026-53431Boruta accepts expired JWT client assertions due to missing exp claim validation9.1CNA v4.00.7%2026-07-30Fix
CVE-2026-52680Apache Kyuubi: REST batch multipart upload path traversal allows controlled file write9.8CISA ADP v3.11.1%2026-07-30Fix
CVE-2026-52539Outstatic CMS JWT signing secret hard-coded credentials9.1CISA ADP v3.10.5%2026-07-30
CVE-2026-48910Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing6.5CISA ADP v3.10.6%2026-07-30Fix
CVE-2026-48499Activepieces: Cross-tenant data exposure and code injection via the Code piece sandbox cache9.3CNA v4.00.4%2026-07-30Fix
CVE-2026-48449Adobe Campaign Classic (ACC) incorrect authorization10.0CNA v3.11.2%2026-07-30Fix
CVE-2026-48448Adobe Campaign Classic improper neutralization of special elements used in an SQL command8.6CNA v3.10.8%2026-07-30Fix
CVE-2026-47882Spring Boot DevTools remote secret generated with a non-cryptographic PRNG8.3CNA v3.10.2%2026-07-30Fix
CVE-2026-47876VMware ESX VMXNET3 out-of-bounds write9.3CNA v3.10.2%2026-07-30Fix
CVE-2026-47873Spring Tools for Eclipse Boot Dashboard Docker integration vulnerability8.0CNA v3.10.3%2026-07-30Fix
CVE-2026-47858Spring Tools for Eclipse live information startup mode is vulnerable for remote code execution8.0CNA v3.10.3%2026-07-30Exploit codeFix
CVE-2026-44617Apache Zeppelin: LDAP filter injection in LdapRealm incomplete fix of6.5CISA ADP v3.10.8%2026-07-30Fix
CVE-2026-44616Apache Zeppelin: LDAP injection in ActiveDirectoryGroupRealm filter construction6.5CISA ADP v3.10.8%2026-07-30Fix
CVE-2026-44613Apache Zeppelin: Cross-site request forgery in REST and WebSocket request handling6.1CISA ADP v3.10.4%2026-07-30Exploit codeFix
CVE-2026-44108Phoenix Contact CHARX SEC-3150 firewall bypass during shutdown9.3CNA v4.00.8%2026-07-30Fix
CVE-2026-44107Phoenix Contact CHARX SEC-3150 Exposed Reboot via Modbus8.7CNA v4.00.6%2026-07-30Fix
CVE-2026-44106Phoenix Contact CHARX SEC-3150 init-script for user-applications privilege escalation8.5CNA v4.00.2%2026-07-30Fix
CVE-2026-44105Phoenix Contact CHARX SEC-3150 cleartext password in logs5.8CNA v4.00.1%2026-07-30Fix
CVE-2026-44104Phoenix Contact CHARX SEC-3150 ControllerAgent does not perform validation of firmware9.3CNA v4.00.4%2026-07-30Fix
CVE-2026-44103Phoenix Contact CHARX SEC-3150 JupiCore does not perform validation of firmware6.9CNA v4.00.4%2026-07-30Fix
CVE-2026-44102Phoenix Contact CHARX SEC-3150 OCPP firmware download is not properly locked6.9CNA v4.00.3%2026-07-30Fix
CVE-2026-44101Phoenix Contact CHARX SEC OCPP Agent service missing authentication9.3CNA v4.00.7%2026-07-30Fix
CVE-2026-44100Phoenix Contact CHARX SEC-3150 JupiCore charging point reconfiguration without auth8.8CNA v4.00.5%2026-07-30Fix
CVE-2026-44099Phoenix Contact CHARX SEC-3150 local privilege escalation via pppd password injection8.5CNA v4.00.2%2026-07-30Fix
CVE-2026-44098Phoenix Contact CHARX SEC-3150 OS command injection in OCPP agent via charge_box_id8.8CNA v4.01.7%2026-07-30Fix
CVE-2026-44097Phoenix Contact CHARX SEC-3150 file upload5.3CNA v4.00.4%2026-07-30Fix
CVE-2026-44096Phoenix Contact CHARX SEC-3150 udhcpc privilege escalation8.5CNA v4.00.2%2026-07-30Fix
CVE-2026-44095Phoenix Contact CHARX SEC-3150 local privilege escalation via Network scripts8.5CNA v4.00.2%2026-07-30Fix
CVE-2026-44094Phoenix Contact CHARX SEC-3150 fallback to second RAUC slot with default credentials8.3CNA v4.00.5%2026-07-30Fix
CVE-2026-44093Phoenix Contact CHARX SEC-3150 init-script for user-applications local privilege escalation8.5CNA v4.00.2%2026-07-30Fix
CVE-2026-44092Phoenix Contact CHARX SEC-3150 CRLF injection8.8CNA v4.00.7%2026-07-30Fix
CVE-2026-44091Phoenix Contact CHARX SEC-3150 creation of a new configuration by posting a malicious ID to MQTT8.8CNA v4.00.6%2026-07-30Fix
CVE-2026-44090Phoenix Contact CHARX SEC-3150 missing authentication for MQTT Broker9.3CNA v4.00.7%2026-07-30Fix
CVE-2026-41709VMware ESX administrative operation logging vulnerability2.7CNA v3.10.3%2026-07-30Fix
CVE-2026-41703VMware ESX out-of-bounds read7.6CNA v3.10.4%2026-07-30Fix
CVE-2026-41187Calico Tier authorization bypass via DeleteCollection6.2CNA v4.00.4%2026-07-30Fix
CVE-2026-41186Unauthenticated Go pprof exposure in Calico debug server6.0CNA v4.00.7%2026-07-30Fix
CVE-2026-38709TR1200, TR3000, WR300, WR1200, WR1300, WR1500, WR3000, WR3600 and WR6500 command injection9.8CISA ADP v3.12.8%2026-07-30
CVE-2026-35847dnsmgr CheckUils.php ping function command injection9.8CISA ADP v3.10.7%2026-07-30
CVE-2026-28814Apache JSPWiki: Pre-Authentication arbitrary Wiki Markup Rendering7.5CISA ADP v3.10.7%2026-07-30Fix
CVE-2026-28813Apache JSPWiki cross-site request forgery8.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-28812Apache JSPWiki: UserManager does not sanity-check user database at startup9.8CISA ADP v3.10.7%2026-07-30Fix
CVE-2026-28811Apache JSPWiki: Error Handling Reveals Error Details7.5CISA ADP v3.10.8%2026-07-30Fix
CVE-2026-28323SolarWinds Web Help Desk SAML authentication bypass9.8CNA v3.11.0%2026-07-30Fix
CVE-2026-23985Apache Superset: Regular expression denial of service (ReDoS) in SQL parser5.3CNA v4.00.7%2026-07-30Fix
CVE-2026-23981Apache Superset: Improper authorization in Chart Update allowing Dashboard Modification5.3CNA v4.00.6%2026-07-30Fix
CVE-2026-22622Eaton PADM one of the session management interface improper input validation8.8CNA v3.10.5%2026-07-30Fix
CVE-2026-22621Eaton PADM one of the session management interface improper input validation8.3CNA v3.10.6%2026-07-30Fix
CVE-2026-22620Eaton PADM authentication component improper input validation8.6CNA v3.10.7%2026-07-30Fix
CVE-2026-18382Red Hat Cost Management Metrics Operator koku-metrics-operator server-side request forgery6.8CNA v3.10.5%2026-07-30Fix
CVE-2026-18381Red Hat Cost Management Metrics Operator koku-metrics-operator server-side request forgery7.6CNA v3.10.4%2026-07-30Fix
CVE-2026-18378Red Hat Cost Management Metrics Operator koku-metrics-operator server-side request forgery7.6CNA v3.10.5%2026-07-30Fix
CVE-2026-18369Red Hat Certificate System dogtag-pki: Pki-core: Redhat-pki: Pki: Acme http-01 validation SSRF5.8CNA v3.10.2%2026-07-30Fix
CVE-2026-18363Weak password recovery mechanism in osTicket by Enhancesoft LLC9.1CNA v4.00.5%2026-07-30Fix
CVE-2026-18362DFIR-IRIS missing brute force Protection in User Authentication5.9CNA v3.10.4%2026-07-30
CVE-2026-18361DFIR-IRIS stored XSS in Datastore upload7.6CNA v3.10.3%2026-07-30
CVE-2026-18360DFIR-IRIS stored XSS in Custom attributes7.6CNA v3.10.3%2026-07-30
CVE-2026-18353Eclipse CSI unauthenticated SSRF in PIA via OIDC issuer allowlist bypass8.8CNA v4.00.4%2026-07-30Fix
CVE-2026-18245Incomplete fix for code injection in Amazon @aws-amplify/codegen-ui-react6.4CNA v4.01.0%2026-07-30Fix
CVE-2026-18188A format string vulnerability was found in the Rsync Backup on the ADM8.1v3.10.5%2026-07-30Fix
CVE-2026-18187A format string vulnerability was found in the Internal Backup on the ADM8.1v3.10.5%2026-07-30Fix
CVE-2026-18186A stored format string vulnerability was found in the FTP Backup on the ADM8.1v3.10.5%2026-07-30Fix
CVE-2026-18140aws-smithy-json unknown-key skip path of the uncontrolled recursion8.7CNA v4.00.4%2026-07-30Fix
CVE-2026-18064NASA Core Flight System (cFS) Health and Safety (HS) Application null pointer dereference8.2CNA v4.00.6%2026-07-30
CVE-2026-18019Google Chrome Media side-channel information leak4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-18018Google Chrome Updater inappropriate implementation4.0CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-18017Google Chrome Dawn use-after-free8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-18016Google Chrome Chrome for iOS insufficient policy enforcement4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-18015Google Chrome Tint inappropriate implementation9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-18014Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-18013Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-18012Google Chrome PDFium use-after-free8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-18011Google Chrome Chrome for iOS inappropriate implementation2.4CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-18010Google Chrome Passwords inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-18009Google Chrome spoofing4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-18008Google Chrome settings inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-18007Google Chrome Input inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-18006Google Chrome Google Lens inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-18005Google Chrome WebXR inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-18004Google Chrome Speech insufficient policy enforcement4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-18003Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-18002Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-18001Google Chrome WebGL inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-18000Google Chrome USB insufficient policy enforcement3.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17999Google Chrome race condition6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17998Google Chrome extensions incorrect security UI4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17997Google Chrome Passwords inappropriate implementation3.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17996Google Chrome Browser inappropriate implementation6.2CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17995Google Chrome Dawn out-of-bounds read8.1CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17994Google Chrome Media inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17993Google Chrome race condition7.0CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17992Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17991Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17990Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17989Google Chrome V8 type confusion8.8CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17988Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17987Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17986Google Chrome Bluetooth insufficient policy enforcement6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17985Google Chrome Speech insufficient policy enforcement6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17984Google Chrome Browser inappropriate implementation3.3CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17983Google Chrome Global Media Controls inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17982Google Chrome improper input validation4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17981Google Chrome Blink inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17980Google Chrome UI inappropriate implementation3.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17979Google Chrome race condition7.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17978Google Chrome WebCodecs side-channel information leak5.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17977Google Chrome origin validation error4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17976Google Chrome extensions insufficient policy enforcement4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17975Google Chrome IME inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17974Google Chrome DevTools insufficient policy enforcement6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17973Google Chrome Views inappropriate implementation5.5CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17972Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17971Google Chrome Frame inappropriate implementation8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17970Google Chrome spoofing4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17969Google Chrome Passwords inappropriate implementation8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17968Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17967Google Chrome Chrome for iOS use-after-free8.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17966Google Chrome Views inappropriate implementation6.2CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17965Google Chrome Chrome for iOS incorrect security UI4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17964Google Chrome UI incorrect security UI4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17963Google Chrome SVG inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17962Google Chrome Blink inappropriate implementation6.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17961Google Chrome Session inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17960Google Chrome Chrome for iOS insufficient policy enforcement4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17959Google Chrome Network inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17958Google Chrome Views inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17957Google Chrome CORS inappropriate implementation3.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17956Google Chrome Scheduling inappropriate implementation8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17955Google Chrome spoofing4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17954Google Chrome origin validation error4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17953Google Chrome WebView insufficient policy enforcement6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17952Google Chrome V8 inappropriate implementation7.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17951Google Chrome WebRTC heap-based buffer overflow8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17950Google Chrome Safebrowsing inappropriate implementation8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17949Google Chrome uninitialized variable use4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17948Google Chrome V8 type confusion7.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17947Google Chrome WebSockets use-after-free9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17946Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17945Google Chrome UI misrepresentation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17944Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17943Google Chrome parser inappropriate implementation4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17942Google Chrome SVG side-channel information leak4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17941Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17940Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17939Google Chrome spoofing4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17938Google Chrome FullScreen inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17937Google Chrome improper input validation4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17936Google Chrome DevTools inappropriate implementation6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17935Google Chrome Codecs heap-based buffer overflow8.8CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17934Google Chrome improper input validation4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17933Google Chrome DOMStorage inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17932Google Chrome DataTransfer use-after-free5.5CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17931Google Chrome DevTools inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17930Google Chrome privilege escalation7.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17929Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17928Google Chrome DataTransfer inappropriate implementation4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17927Google Chrome DevTools insufficient policy enforcement4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17926Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17925Google Chrome Cast inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17924Google Chrome DNS use-after-free9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17923Google Chrome protection mechanism failure6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17922Google Chrome Enterprise inappropriate implementation8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17921Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17920Google Chrome V8 use-after-free8.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17919Google Chrome Enterprise insufficient policy enforcement6.8CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17918Google Chrome Sync use-after-free8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17917Google Chrome Chrome for iOS insufficient policy enforcement6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17916Google Chrome settings insufficient policy enforcement7.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17915Google Chrome WebView inappropriate implementation5.4CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17914Google Chrome Skia side-channel information leak5.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17913Google Chrome Chrome for iOS inappropriate implementation5.4CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17912Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17911Google Chrome SVG insufficient policy enforcement4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17910Google Chrome NFC insufficient policy enforcement4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17909Google Chrome improper input validation5.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17908Google Chrome sandbox escape5.8CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17907Google Chrome Network side-channel information leak4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17906Google Chrome sandbox escape5.8CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17905Google Chrome SurfaceCapture inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17904Google Chrome NFC insufficient policy enforcement4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17903Google Chrome Chromecast insufficient policy enforcement5.4CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17902Google Chrome Editing inappropriate implementation3.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17901Google Chrome improper input validation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17900Google Chrome Enterprise inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17899Google Chrome DevTools insufficient policy enforcement8.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17898Google Chrome DevTools use-after-free7.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17897Google Chrome ORB inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17896Google Chrome DevTools use-after-free7.5CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17895Google Chrome DataTransfer inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17894Google Chrome Views use-after-free8.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17893Google Chrome sandbox escape5.8CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17892Google Chrome WebXR inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17891Google Chrome ANGLE use-after-free5.8CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17890Google Chrome sandbox escape5.8CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17889Google Chrome uninitialized variable use4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17888Google Chrome sandbox escape7.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17887Google Chrome TabStrip use-after-free7.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17886Google Chrome Enterprise use-after-free8.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17885Google Chrome Paint inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17884Google Chrome WebRTC object lifecycle issue8.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17883Google Chrome Headless inappropriate implementation6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17882Google Chrome protection mechanism failure6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17881Google Chrome WebXR integer overflow8.8CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17880Google Chrome Autofill inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17879Google Chrome Autofill inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17878Google Chrome CSS inappropriate implementation6.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17877Google Chrome Chromoting inappropriate implementation8.4CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17876Google Chrome Payments inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17875Google Chrome PDFium use-after-free8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17874Google Chrome Chrome for iOS inappropriate implementation5.4CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17873Google Chrome Chrome for iOS insufficient policy enforcement6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17872Google Chrome improper signature verification6.1CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17871Google Chrome Passwords inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17870Google Chrome improper input validation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17869Google Chrome WebXR out-of-bounds read8.1CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17868Google Chrome USB insufficient policy enforcement8.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17867Google Chrome sandbox escape7.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17866Google Chrome Tab type confusion5.8CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17865Google Chrome Crypto inappropriate implementation9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17864Google Chrome Updater inappropriate implementation7.8CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17863Google Chrome Browser inappropriate implementation7.8CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17862Google Chrome Tracing use-after-free7.8CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17861Google Chrome privilege escalation7.8CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17860Google Chrome improper input validation3.3CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17859Google Chrome Favicons inappropriate implementation4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17858Google Chrome uninitialized variable use4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17857Google Chrome Network inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17856Google Chrome Network inappropriate implementation9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17855Google Chrome race condition9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17854Google Chrome WebMCP insufficient policy enforcement6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17853Google Chrome DevTools inappropriate implementation6.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17852Google Chrome Media Router inappropriate implementation6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17851Google Chrome Autofill side-channel information leak4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17850Google Chrome Permissions inappropriate implementation6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17849Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17848Google Chrome Codecs integer overflow9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17847Google Chrome sandbox escape9.6CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17846Google Chrome Media inappropriate implementation6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17845Google Chrome CSS inappropriate implementation6.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17844Google Chrome improper input validation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17843Google Chrome CSS inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17842Google Chrome Chrome for iOS inappropriate implementation6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17841Google Chrome race condition6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17840Google Chrome Passwords incorrect security UI6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17839Google Chrome Chrome for iOS inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17838Google Chrome Chrome for iOS incorrect security UI6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17837Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17836Google Chrome V8 use-after-free8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17835Google Chrome Chrome for iOS inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17834Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17833Google Chrome Passwords inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17832Google Chrome ANGLE use-after-free9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17831Google Chrome spoofing6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17830Google Chrome Chrome for iOS inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17829Google Chrome Passwords insufficient policy enforcement4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17828Google Chrome Chrome for iOS inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17827Google Chrome CSS inappropriate implementation6.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17826Google Chrome Chrome for iOS inappropriate implementation3.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17825Google Chrome Passwords insufficient policy enforcement6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17824Google Chrome ServiceWorker insufficient policy enforcement6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17823Google Chrome WebXR insufficient policy enforcement6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17822Google Chrome race condition6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17821Google Chrome extensions insufficient policy enforcement6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17820Google Chrome Autofill insufficient policy enforcement4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17819Google Chrome WebAppInstalls inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17818Google Chrome Network inappropriate implementation6.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17817Google Chrome ReportingAndNEL inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17816Google Chrome Speech insufficient policy enforcement7.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17815Google Chrome GuestView insufficient policy enforcement4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17814Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17813Google Chrome Chrome for iOS insufficient policy enforcement6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17812Google Chrome DigitalCredentials inappropriate implementation5.4CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17811Google Chrome ANGLE use-after-free7.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17810Google Chrome uninitialized variable use4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17809Google Chrome sandbox escape5.8CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17808Google Chrome uninitialized variable use4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17807Google Chrome V8 use-after-free8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17806Google Chrome sandbox escape5.8CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17805Google Chrome Glic insufficient policy enforcement6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17804Google Chrome Media use-after-free9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17803Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17802Google Chrome GPU side-channel information leak4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17801Google Chrome ANGLE out-of-bounds read9.6CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17800Google Chrome MediaRecording inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17799Google Chrome improper input validation5.4CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17798Google Chrome Cast inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17797Google Chrome CSS inappropriate implementation6.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17796Google Chrome WebXR side-channel information leak6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17795Google Chrome GetUserMedia inappropriate implementation4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17794Google Chrome improper input validation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17793Google Chrome messages inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17792Google Chrome Credential Management inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17791Google Chrome spoofing6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17790Google Chrome uninitialized variable use4.3CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17789Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17788Google Chrome Blink inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17787Google Chrome DevTools inappropriate implementation6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17786Google Chrome privilege escalation8.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17785Google Chrome uninitialized variable use4.3CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17784Google Chrome Audio use-after-free8.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17783Google Chrome Loader inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17782Google Chrome Chrome for iOS incorrect security UI4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17781Google Chrome extensions inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17780Google Chrome Isolated Web Apps inappropriate implementation6.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17779Google Chrome Site Isolation inappropriate implementation5.4CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17778Google Chrome extensions use-after-free8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17777Google Chrome Autofill inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17776Google Chrome sandbox escape5.8CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17775Google Chrome PresentationAPI inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17774Google Chrome improper input validation7.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17773Google Chrome improper input validation4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17772Google Chrome WebGL out-of-bounds read4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17771Google Chrome uninitialized variable use4.3CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17770Google Chrome Media out-of-bounds read5.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17769Google Chrome improper input validation4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17768Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17767Google Chrome improper input validation4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17766Google Chrome improper input validation3.3CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17765Google Chrome WebProtect inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17764Google Chrome FedCM inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17763Google Chrome GPU inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17762Google Chrome Chrome for iOS inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17761Google Chrome improper input validation5.4CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17760Google Chrome NoStatePrefetch side-channel information leak4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17759Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17758Google Chrome Dawn heap-based buffer overflow9.6CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17757Google Chrome uninitialized variable use4.3CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17756Google Chrome Presentation insufficient policy enforcement6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17755Google Chrome extensions incorrect security UI4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17754Google Chrome Blink inappropriate implementation6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17753Google Chrome Autofill inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17752Google Chrome Views use-after-free8.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17751Google Chrome AdFilter inappropriate implementation8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17750Google Chrome ANGLE use-after-free7.1CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17749Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17748Google Chrome extensions inappropriate implementation6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17747Google Chrome spoofing4.2CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17746Google Chrome GPU use-after-free5.8CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17745Google Chrome Skia out-of-bounds read5.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17744Google Chrome File Input inappropriate implementation7.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17743Google Chrome ControlledFrame insufficient policy enforcement6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17742Google Chrome Payments insufficient policy enforcement4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17741Google Chrome sandbox escape7.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17740Google Chrome uninitialized variable use4.3CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17739Google Chrome extensions insufficient policy enforcement4.2CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17738Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17737Google Chrome Bluetooth use-after-free5.0CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17736Google Chrome sandbox escape5.8CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17735Google Chrome sandbox escape8.7CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17734Google Chrome Autofill inappropriate implementation5.4CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17733Google Chrome QUIC inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17732Google Chrome SVG inappropriate implementation3.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17731Google Chrome Autofill inappropriate implementation4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17730Google Chrome Autofill side-channel information leak4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17729Google Chrome V8 use-after-free8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17728Google Chrome extensions inappropriate implementation5.4CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17727Google Chrome WebGL out-of-bounds write9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17726Google Chrome WebGL integer overflow9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17725Google Chrome V8 type confusion8.8CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17724Google Chrome race condition4.2CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17723Google Chrome Media use-after-free8.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17722Google Chrome WebView object lifecycle issue8.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17721Google Chrome ANGLE out-of-bounds write9.6CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17720Google Chrome Passwords insufficient policy enforcement3.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17719Google Chrome Input use-after-free8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17718Google Chrome ANGLE use-after-free9.6CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17717Google Chrome ANGLE integer overflow9.6CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17716Google Chrome Updater use-after-free8.4CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17715Google Chrome Passwords inappropriate implementation3.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17714Google Chrome uninitialized variable use6.5CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17713Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17712Google Chrome race condition8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17711Google Chrome race condition9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17710Google Chrome MHTML inappropriate implementation9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17709Google Chrome race condition9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17708Google Chrome Audio use-after-free9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17707Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17706Google Chrome improper input validation4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17705Google Chrome libxml integer overflow8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17704Google Chrome ANGLE use-after-free9.6CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17703Google Chrome Chrome for iOS insufficient policy enforcement6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17702Google Chrome Skia inappropriate implementation3.1CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17701Google Chrome out-of-bounds read9.6CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17700Google Chrome improper input validation4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17699Google Chrome Views use-after-free8.6CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17698Google Chrome improper input validation7.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17697Google Chrome ANGLE type confusion9.6CISA ADP v3.10.6%2026-07-30Fix
CVE-2026-17696Google Chrome Media side-channel information leak4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17695Google Chrome ANGLE inappropriate implementation9.6CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17694Google Chrome DOM use-after-free8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17693Google Chrome FileSystem insufficient policy enforcement4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17692Google Chrome DataTransfer use-after-free9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17691Google Chrome ANGLE out-of-bounds write9.6CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17690Google Chrome improper input validation6.5CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17689Google Chrome uninitialized variable use4.3CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17688Google Chrome Input use-after-free9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17687Google Chrome ANGLE type confusion9.6CISA ADP v3.10.6%2026-07-30Fix
CVE-2026-17686Google Chrome improper input validation8.1CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17685Google Chrome Autofill use-after-free8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17684Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17683Google Chrome ANGLE inappropriate implementation6.5CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17682Google Chrome ANGLE integer overflow9.6CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17681Google Chrome sandbox escape9.6CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17680Google Chrome Color heap-based buffer overflow9.6CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17679Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17678Google Chrome ANGLE out-of-bounds read8.8CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17677Google Chrome ANGLE inappropriate implementation8.8CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17676Google Chrome ANGLE inappropriate implementation9.6CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17675Google Chrome ANGLE out-of-bounds write9.6CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17674Google Chrome HTML inappropriate implementation6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17673Google Chrome QUIC integer overflow9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17672Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17671Google Chrome sandbox escape9.6CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17670Google Chrome Views use-after-free9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17669Google Chrome Chrome for iOS inappropriate implementation9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17668Google Chrome uninitialized variable use6.5CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17667Google Chrome uninitialized variable use6.5CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17666Google Chrome missing cryptographic step9.1CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17665Google Chrome V8 use-after-free8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17664Google Chrome improper input validation6.5CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17663Google Chrome sandbox escape8.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17662Google Chrome Prefetch insufficient policy enforcement4.3CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17661Google Chrome Loader use-after-free8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17660Google Chrome sandbox escape8.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17659Google Chrome SiteIsolation inappropriate implementation4.2CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-17658Google Chrome V8 use-after-free8.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-17657Google Chrome Navigation use-after-free8.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17656Google Chrome Ozone use-after-free9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17655Google Chrome sandbox escape9.6CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17654Google Chrome race condition7.8CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-17653Google Chrome Skia use-after-free8.3CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-17652Google Chrome Views use-after-free9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17651Google Chrome sandbox escape9.6CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17650Google Chrome Compositing use-after-free8.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-17544PHP out-of-bounds write in bccomp via crafted operand and scale8.1CNA v4.00.4%2026-07-30Exploit codeFix
CVE-2026-17543PHP SQL injection in ext-pgsql via E'...' backslash breakout8.1CNA v4.00.3%2026-07-30Exploit codeFix
CVE-2026-16971DFIR-IRIS missing brute force Protection in OTP Validation5.9CNA v3.10.3%2026-07-30
CVE-2026-16970DFIR-IRIS Insufficient Logout Implementation4.2CNA v3.10.2%2026-07-30
CVE-2026-16969DFIR-IRIS stored XSS in Assets7.6CNA v3.10.3%2026-07-30
CVE-2026-16727ASUS Armoury Crate race condition7.3CNA v4.00.1%2026-07-30
CVE-2026-16610Admin and Site Enhancements (ASE) Pro WordPress plugin unauthenticated remote code execution9.8CNA v3.11.1%2026-07-30Fix
CVE-2026-16531Red Hat Enterprise Linux 10 pcp: Pcp: Arbitrary file creation5.3CNA v3.10.4%2026-07-30Fix
CVE-2026-16530Red Hat Enterprise Linux 10 pcp: Pcp: Remote denial of service and information leakage6.5CNA v3.10.3%2026-07-30Fix
CVE-2026-16529Red Hat Enterprise Linux 10 pcp: Pcp: Denial of service due to signed integer overflow7.5CNA v3.10.5%2026-07-30Fix
CVE-2026-16527PCP pmproxy /store endpoint missing authentication7.3CNA v3.10.6%2026-07-30Fix
CVE-2026-16526Red Hat Enterprise Linux 10 pcp: Pcp: Privilege escalation to root via linux_sockets pmda8.8CNA v3.10.6%2026-07-30Fix
CVE-2026-16524Red Hat Enterprise Linux 10 pcp: Pcp linux_sockets pmda: Arbitrary command execution7.8CNA v3.10.7%2026-07-30Fix
CVE-2026-16308IBM Enterprise Build of Quarkus is affected by a DoS7.5CNA v3.10.5%2026-07-30Fix
CVE-2026-16092Improved Save Button WordPress plugin Second-order SQL injection6.5CNA v3.10.4%2026-07-30
CVE-2026-15978LM-SYS SGLang weight broadcasting endpoints missing authentication7.5CISA ADP v3.10.5%2026-07-30Fix
CVE-2026-15977SGLang /server_info endpoint information disclosure7.5CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-15976LM-SYS SGLang model weight loading endpoint deserialization of untrusted data9.8CISA ADP v3.10.6%2026-07-30Fix
CVE-2026-15974LM-SYS SGLang multimodal generation endpoint server-side request forgery6.5CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-15971LM-SYS SGLang dumper subsystem eval injection9.8CISA ADP v3.10.7%2026-07-30Fix
CVE-2026-15969LM-SYS SGLang LoRA adapter loading endpoint deserialization of untrusted data9.8CISA ADP v3.11.0%2026-07-30Fix
CVE-2026-15929LG Electronics SmartShare SQL command improper neutralization7.1CNA v4.00.3%2026-07-30
CVE-2026-15658foreUP customer REST API insecure direct object reference8.1CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-15657foreUP customer REST API information disclosure6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-15435IBM App Connect Enterprise is vulnerable to arbitrary file write9.8CNA v3.10.7%2026-07-30Fix
CVE-2026-15397Subscriptions for WooCommerce WordPress plugin missing authorization7.2CNA v3.10.6%2026-07-30Fix
CVE-2026-15382Ultimate Addons for WPBakery Page Builder icon font deletion vulnerability6.5CISA ADP v3.10.4%2026-07-30Reported exploitedFix
CVE-2026-15257RegistrationMagic WordPress plugin unauthenticated form Submission and user Profile modification5.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-15255RegistrationMagic WordPress plugin unauthenticated form Submission disclosure via IDOR5.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-15252Search Atlas SEO WordPress plugin Subscriber+ Google Indexing API access5.4CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-15250LatePoint WordPress plugin unauthenticated Booking object mass assignment via Public Booking Funnel5.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-15240Customer Switching for WooCommerce WordPress plugin privilege escalation to Administrator7.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-15235Hotel Booking Lite WordPress plugin sensitive data disclosure4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-15153WP Hotel Booking WordPress plugin Hotel Manager+ SQL injection via Booking List Search6.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-15054Bit Form WordPress plugin unauthenticated Inactive form Submission3.7CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-14980IBM WebSphere Application Server Liberty is affected by a cross-site request forgery8.3CNA v3.10.4%2026-07-30Fix
CVE-2026-14923Sync Post With Other Site WordPress plugin Contributor+ arbitrary page Creation/Modification6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-14602Remote API WordPress plugin unauthenticated PHP object injection via remote-api Query parameter9.0CISA ADP v3.10.7%2026-07-30
CVE-2026-14592WP Real IP-based Access Control WordPress plugin unauthenticated stored XSS via acl_ctrl_addr6.1CISA ADP v3.10.3%2026-07-30
CVE-2026-14522IBM App Connect Enterprise OS command injection8.8CNA v3.11.0%2026-07-30Fix
CVE-2026-14519IBM App Connect Enterprise path traversal7.5CNA v3.10.6%2026-07-30Fix
CVE-2026-14356FleekDash V2 WordPress plugin missing authorization authenticated Administrator account takeover8.8CNA v3.10.5%2026-07-30Fix
CVE-2026-14318GiveWP WordPress plugin GiveWP Worker+ stored XSS via Donation form Template settings6.8CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-14310Tutor LMS WordPress plugin Subscriber+ Cross-Course Q&A content disclosure and Reply injection5.4CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-14305WP Delicious WordPress plugin unauthenticated arbitrary post Meta update via recipe_likes5.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-14239Tourmaster WordPress plugin stored XSS via CSRF7.1CISA ADP v3.10.1%2026-07-30Fix
CVE-2026-14231LifterLMS WordPress plugin Subscriber+ sensitive information disclosure via select2_query_posts4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-14227Insufficient session expiration in MikroTik RouterOS6.9CNA v4.00.4%2026-07-30
CVE-2026-14226Easy Appointments WordPress plugin sensitive information disclosure4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-14223Easy Appointments customer details endpoint insecure direct object reference4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-14222Easy Appointments WordPress plugin Contributor+ Connection deletion via missing authorization3.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-14221Easy Appointments WordPress plugin Appointment data disclosure and modification3.8CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-14207LifterLMS WordPress plugin Instructor+ stored XSS via Featured Pricing information6.1CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-14188Easy Appointments customer listing handler information disclosure2.7CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-13584Mitsubishi Electric MELSEC MX Controller CC-Link IE TSN communication protocol vulnerability7.1CNA v4.00.2%2026-07-30
CVE-2026-13444IBM Langflow Chroma vector store information disclosure8.1CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-13435IBM Langflow OSS python Interpreter sandbox bypass leading to sensitive data exposure9.9CNA v3.10.5%2026-07-30Fix
CVE-2026-13395Online Scheduling and Appointment Booking System front-end booking requests SQL injection8.6CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-13379OpenVPN out-of-bounds read5.1CNA v4.00.6%2026-07-30Fix
CVE-2026-13345Essential Addons for Elementor WooCommerce product comparison table vulnerability5.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-13344Essential Addons for Elementor - Lite WordPress plugin stored XSS4.8CISA ADP v3.10.2%2026-07-30Fix
CVE-2026-13330Animation Addons for Elementor WordPress plugin Author+ stored XSS via SVG upload6.1CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-13178Eventin WordPress plugin unauthenticated Payment bypass via order Status manipulation7.5CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-13145WP Travel WordPress plugin Subscriber+ Booking PII disclosure via IDOR4.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-13143WP Travel WordPress plugin unauthenticated Payment bypass via Forged PayPal IPN5.3CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-13117OpenVPN use-after-free6.0CNA v4.00.6%2026-07-30Fix
CVE-2026-12996OpenVPN A use-after-free6.0CNA v4.00.8%2026-07-30Fix
CVE-2026-12947IBM App Connect Enterprise is vulnerable to Confidentiality disclosure on Discovery Connector nodes7.5CNA v3.10.4%2026-07-30Fix
CVE-2026-12946IBM Langflow OSS remote code execution in CUGA Component CodeAgent9.9CNA v3.10.6%2026-07-30Fix
CVE-2026-12945IBM Langflow OSS API endpoints improper access control7.1CNA v3.10.4%2026-07-30Fix
CVE-2026-12943This Power Hardware Management Console update is being released to address9.8CNA v3.10.8%2026-07-30Fix
CVE-2026-12942IBM Langflow OSS API endpoints path traversal7.5CNA v3.10.6%2026-07-30Fix
CVE-2026-12940IBM Langflow OSS MCP stdio launcher command injection9.8CNA v3.10.9%2026-07-30Exploit codeFix
CVE-2026-12932OpenVPN tls-crypt-v2 client key extraction memory leak7.1CNA v4.00.7%2026-07-30Fix
CVE-2026-12733IBM DataPower Gateway affected by denial of service7.5CNA v3.10.5%2026-07-30Fix
CVE-2026-12722Authentication bypass in FTC Software's E-Commerce Management Panel8.2CNA v3.10.4%2026-07-30Fix
CVE-2026-12687ProfileGrid WordPress plugin unauthenticated privilege escalation via Unrestricted Group ID7.5CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-12562Toptech Systems RCU II+ and Multiload II+ missing authentication for critical function8.7CNA v4.00.5%2026-07-30Fix
CVE-2026-12500WP Travel Engine WordPress plugin unauthenticated Trip Difficulty Level option update7.5CISA ADP v3.10.4%2026-07-30Fix
CVE-2026-12118IBM webMethods Integration insecure deserialization9.8CNA v3.10.8%2026-07-30Fix
CVE-2026-11980Code execution in IBM Desktop App7.3CNA v3.10.2%2026-07-30Fix
CVE-2026-11904IBM Verify Identity Access information disclosure5.3CNA v3.10.4%2026-07-30Fix
CVE-2026-11897IBM WebSphere Application Server Liberty HTTP/2 request handling denial of service7.5CNA v3.10.5%2026-07-30Fix
CVE-2026-11885Power System update in Buffer Copy8.4CNA v3.10.1%2026-07-30Fix
CVE-2026-11881Fluent Forms WordPress plugin Contributor+ stored XSS via Date/Time field6.1CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-11870Hide My WP Ghost WordPress plugin IP Address spoofing5.4CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-11867DynamiApps Frontend Admin taxonomy term management missing authorization6.5CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-11782Points and Rewards for WooCommerce wallet and points update action improper access control5.9CISA ADP v3.10.3%2026-07-30Fix
CVE-2026-11771OpenVPN stack-based buffer overflow7.0CNA v4.00.7%2026-07-30Fix
CVE-2026-11707IBM Tivoli System Automation Application Manager cross-site scripting9.3CNA v3.10.4%2026-07-30Fix
CVE-2026-11536IBM WebSphere Application Server is affected by a remote code execution8.5CNA v3.10.6%2026-07-30Fix
CVE-2026-11383IBM WebSphere Application Server administrative console cross-site scripting5.4CNA v3.10.2%2026-07-30Fix
CVE-2026-10842IBM WebSphere Application Server Liberty authentication bypass7.5CNA v3.10.5%2026-07-30Fix
CVE-2026-10700IBM Langflow file handling API insecure direct object reference6.5CNA v3.10.5%2026-07-30Fix
CVE-2026-10695IBM® Db2® is vulnerable to a denial of service when running non fenced federated queries6.2CNA v3.10.1%2026-07-30Fix
CVE-2026-10569IBM DevOps Deploy / IBM UrbanCode Deploy is susceptible to an exposure of sensitive information4.3CNA v3.10.3%2026-07-30Fix
CVE-2026-10545IBM Planning Analytics Local is affected by open redirect7.5CNA v3.10.4%2026-07-30Fix
CVE-2026-10535IBM Db2 db2flacc setgid helper buffer overflow8.4CNA v3.10.2%2026-07-30Fix
CVE-2026-10031SFTPGo permission bypass via Symbolic Link Creation5.3CNA v4.00.2%2026-07-30Fix
CVE-2026-9322IBM WebSphere Application Server denial of service7.5CNA v3.10.6%2026-07-30Fix
CVE-2026-7849Phoenix Contact CHARX SEC-3150 command injection in SCM (idledisconnect parameter)9.3CNA v4.00.8%2026-07-30Fix
CVE-2026-7260PHP stack overflow in phar with circular symlinks5.4CNA v4.00.1%2026-07-30Fix
CVE-2026-6540Tigera Calico L7 policy bypass via unnormalized HTTP path matching7.9CNA v4.00.5%2026-07-30Fix
CVE-2026-5846Hard-coded cryptographic key in Watchfire Controllers7.6CNA v4.00.2%2026-07-30Fix
CVE-2026-5582FuseWP WordPress plugin cross-site request forgery to Sync Rule Status Toggle4.3CNA v3.10.2%2026-07-30Fix
CVE-2026-5219CSRF in Softtr's E-Commerce Pack8.3CNA v3.10.2%2026-07-30Fix
CVE-2026-4978SQLi in UMAI Vision's Traffic Analysis System9.8CNA v3.10.5%2026-07-30Fix
CVE-2026-1982Persian Elementor WordPress plugin unauthenticated Price manipulation via ZarinPal widget5.3CNA v3.10.3%2026-07-30Fix
CVE-2026-1360BuddyPress WordPress plugin authenticated (Subscriber+) PHP object injection via XProfile field data7.5CNA v3.11.2%2026-07-30
CVE-2026-67595VaahCMS Malicious JavaScript Supply Chain via security-otp.blade.php9.2CNA v4.00.8%2026-07-29Reported exploited
CVE-2026-67439OliveTin: StartActionAndWait Endpoints Bypass `logs` Permission and Return Action Output4.3CNA v3.10.4%2026-07-29Fix
CVE-2026-67438OliveTin OS command injection via Custom regex: Argument Type Bypassing Shell Safety Check6.6CNA v3.11.6%2026-07-29Fix
CVE-2026-67437OliveTin: Unauthenticated DoS via OAuth2 State memory exhaustion (Unbounded Map Growth)7.5CNA v3.10.6%2026-07-29Fix
CVE-2026-67436Linuxfabrik monitoring-plugins: SSRF and auth-token disclosure8.3CNA v4.00.4%2026-07-29
CVE-2026-67435Linuxfabrik monitoring-plugins url fetch function information disclosure6.0CNA v4.00.5%2026-07-29Fix
CVE-2026-67433Linuxfabrik monitoring-plugins: Symlink following in logfile legacy database migration5.8CNA v4.00.1%2026-07-29
CVE-2026-67432Model Context Protocol Ruby SDK StreamableHTTPTransport denial of service7.5CNA v3.10.8%2026-07-29Fix
CVE-2026-67431modelcontextprotocol ruby-sdk MCP Ruby SDK: Ruby SSE Session Poisoning8.3CNA v4.00.5%2026-07-29Fix
CVE-2026-67430Model Context Protocol Ruby SDK StreamableHTTPTransport memory leak5.3CNA v3.10.5%2026-07-29Fix
CVE-2026-67429flytohub flyto-core flyto2 Core: Arbitrary file write10.0CNA v3.10.8%2026-07-29Fix
CVE-2026-67428FlytoHub Flyto2 Core HTTP-emitting modules server-side request forgery8.5CNA v3.10.4%2026-07-29Fix
CVE-2026-67427FlytoHub Flyto2 Core variable resolver information disclosure8.6CNA v3.10.6%2026-07-29Fix
CVE-2026-67426FlytoHub Flyto2 Core verification service server-side request forgery9.3CNA v3.10.5%2026-07-29Fix
CVE-2026-67425flytohub flyto-core flyto2 Core: LLM/API keys leak to an attacker-controlled base_url8.6CNA v3.10.6%2026-07-29Fix
CVE-2026-67424FlytoHub Flyto2 Core HTTP modules server-side request forgery8.5CNA v3.10.4%2026-07-29Fix
CVE-2026-67217cJSON JSON Patch Non-Atomic Application Destroys Data before Validation6.9CNA v4.00.4%2026-07-29
CVE-2026-67216cJSON cJSON_Compare Exponential Complexity denial of service7.5v3.10.6%2026-07-29
CVE-2026-67215cJSON JSON Patch copy/add uncontrolled recursion stack exhaustion8.7CNA v4.00.7%2026-07-29
CVE-2026-67214nanoid infinite loop via Negative Size in non-secure module7.5NVD v3.10.3%2026-07-29Fix
CVE-2026-67213nanoid infinite loop via Zero Size in customAlphabet and customRandom7.5NVD v3.10.6%2026-07-29Fix
CVE-2026-67201vlang v SSRF Bypass via Parser Differential in net.urllib and net.http7.7CNA v4.00.5%2026-07-29Fix
CVE-2026-67194Courier IMAP Mail Server stack overflow DoS via Nested SEARCH Queries7.1CNA v4.00.5%2026-07-29Fix
CVE-2026-67193Xlight FTP Server information disclosure via user command6.9CNA v4.00.4%2026-07-29Fix
CVE-2026-67192Xlight FTP Server Pre-Auth stack buffer overflow via SSH GCM Cipher9.2CNA v4.01.0%2026-07-29Fix
CVE-2026-67191Xlight FTP Server Pre-Auth heap buffer overflow via SSH parser9.3CNA v4.01.0%2026-07-29Fix
CVE-2026-66724Permission bypass via Undocumented HTTP Methods in MWDB Core5.3CNA v4.00.4%2026-07-29Fix
CVE-2026-66723Missing authentication requirement in Remote Instances proxy API in MWDB Core7.0CNA v4.00.8%2026-07-29Fix
CVE-2026-66490Joomla Extension Balbooa.com stored cross-site scripting via a comment avatar in Gridbox6.1CISA ADP v3.10.3%2026-07-29
CVE-2026-66489Joomla Extension Balbooa.com Various unauthenticated file system disclosure in Gridbox5.3CISA ADP v3.10.3%2026-07-29
CVE-2026-66488Joomla Extension Balbooa.com Payment bypass in Gridbox5.3CISA ADP v3.10.3%2026-07-29
CVE-2026-66400Grav Login plugin insufficient session expiration6.3CNA v4.00.2%2026-07-29Fix
CVE-2026-65975pydantic-ai UI adapters incorrect authorization6.5CNA v3.10.3%2026-07-29Fix
CVE-2026-65947Joomla Extension Balbooa.com Various CSRF vectors in the admin interface in Gridbox7.3CISA ADP v3.10.2%2026-07-29
CVE-2026-65946Joomla Extension Rolandd.com XSS vectors in AJAX endpoint handlers Ro Csvi6.1CISA ADP v3.10.3%2026-07-29
CVE-2026-65944Joomla Extension Rolandd.com CSRF vectors in AJAX endpoint handlers Ro Csvi8.8CISA ADP v3.10.2%2026-07-29
CVE-2026-65943Joomla Extension Rolandd.com Unauthenticated directory creation Ro Csvi7.5CISA ADP v3.10.4%2026-07-29
CVE-2026-65891joomlacontenteditor.net Joomla Content Editor file rename function improper input validation6.5CISA ADP v3.10.3%2026-07-29Exploit code
CVE-2026-65890Joomla Extension Balbooa.com unauthenticated SQL injection in Gridbox9.8NVD v3.10.5%2026-07-29
CVE-2026-65889Joomla Extension Balbooa.com Unauthenticated recursive directory deletion in Gridbox7.5NVD v3.10.4%2026-07-29
CVE-2026-65888Joomla Extension Balbooa.com account takeover vulnerability in Gridbox9.8NVD v3.10.5%2026-07-29
CVE-2026-65887Joomla Extension Balbooa.com Unauthenticated arbitrary password reset in Gridbox9.8NVD v3.10.5%2026-07-29
CVE-2026-65886Joomla Extension Balbooa.com unauthenticated arbitrary file read in Gridbox7.5NVD v3.10.6%2026-07-29
CVE-2026-65885Joomla Extension Balbooa.com authenticated arbitrary file upload in Gridbox8.8NVD v3.10.5%2026-07-29Reported exploitedKCV
CVE-2026-65884Joomla Extension Balbooa.com privilege escalation in Gridbox9.8NVD v3.10.5%2026-07-29Reported exploitedKCV
CVE-2026-65883Joomla Extension Aimy-extensions.com RCE via PHP object injection in Aimy Captcha-less Form Guard9.8NVD v3.10.8%2026-07-29Exploit code
CVE-2026-65325Apache Traffic Server HTTP/2 origin connection reuse improper certificate validation6.3CNA v4.00.3%2026-07-29Fix
CVE-2026-65324Apache Traffic Server HTTP/2 and HTTP/3 dechunking memory exhaustion8.2CNA v4.00.7%2026-07-29Fix
CVE-2026-65100Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode6.3CNA v4.00.6%2026-07-29Fix
CVE-2026-64685ImageMagick: Heap buffer over-read in BGR decoder due to mising end-of-file check5.3CNA v3.10.2%2026-07-29Fix
CVE-2026-64560Linux kernel POSIX CPU timers use-after-free7.8CNA v3.10.5%2026-07-29Exploit codeFix
CVE-2026-64559Linux kernel s390 pkey VERIFYPROTK ioctl vulnerability7.8CNA v3.10.1%2026-07-29Fix
CVE-2026-64558Linux kernel s390 pkey PCKMO handler vulnerability7.8CNA v3.10.1%2026-07-29Fix
CVE-2026-64557Linux kernel Bluetooth L2CAP socket layer use-after-free8.8CNA v3.10.2%2026-07-29Fix
CVE-2026-64556Linux kernel perf event group management vulnerability7.8CNA v3.10.1%2026-07-29Fix
CVE-2026-63242Three Learning Koollab LMS business logic vulnerability4.3CNA v3.10.3%2026-07-29
CVE-2026-63241Three Learning Koollab LMS insecure direct object reference3.1CNA v3.10.2%2026-07-29
CVE-2026-63240Three Learning Koollab LMS information disclosure4.3CNA v3.10.3%2026-07-29
CVE-2026-63239Three Learning Koollab LMS hard-coded AWS IAM credentials vulnerability5.4CNA v3.10.2%2026-07-29
CVE-2026-63238Three Learning Koollab LMS authentication bypass6.5CNA v3.10.3%2026-07-29
CVE-2026-63237Three Learning Koollab LMS TOTP two-factor authentication bypass4.8CNA v3.10.2%2026-07-29
CVE-2026-63236Three Learning Koollab LMS improper access control3.7CNA v3.10.3%2026-07-29
CVE-2026-63235Three Learning Koollab LMS improper access control3.7CNA v3.10.3%2026-07-29
CVE-2026-63234Three Learning Koollab LMS SQL injection and unsafe deserialisation9.9CNA v3.10.5%2026-07-29
CVE-2026-63233Three Learning Koollab LMS SQL injection and unsafe deserialisation9.9CNA v3.10.5%2026-07-29
CVE-2026-63232Three Learning Koollab LMS SQL injection and unsafe deserialisation9.9CNA v3.10.5%2026-07-29
CVE-2026-63231Three Learning Koollab LMS post-authentication SQL injection8.1CNA v3.10.4%2026-07-29
CVE-2026-63230Three Learning Koollab LMS pre-authentication error-based SQL injection9.1CNA v3.10.5%2026-07-29
CVE-2026-63229Three Learning Koollab LMS pre-authentication blind SQL injection9.1CNA v3.10.5%2026-07-29
CVE-2026-63228Three Learning Koollab LMS unrestricted image upload vulnerability2.6CNA v3.10.2%2026-07-29
CVE-2026-63227Unrestricted SCORM file upload9.9CNA v3.10.6%2026-07-29
CVE-2026-63119Model Context Protocol Ruby SDK stdio transport resource exhaustion6.2CNA v3.10.2%2026-07-29Fix
CVE-2026-63118modelcontextprotocol ruby-sdk MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding protection6.9CNA v4.00.3%2026-07-29Fix
CVE-2026-62995joserfc accepts JWT with padding, leading to JWT malleability2.3CNA v4.00.1%2026-07-29Fix
CVE-2026-62343ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided4.7CNA v3.10.1%2026-07-29Fix
CVE-2026-60113AIT-DSN missing authentication via SLE API Routes9.3CNA v4.00.8%2026-07-29Fix
CVE-2026-60112AIT-GUI missing authentication via Sessions.create9.3CNA v4.00.8%2026-07-29Fix
CVE-2026-59920Netty: STOMP CONNECT Frame header injection6.5CNA v3.10.4%2026-07-29Fix
CVE-2026-59919Netty: HAProxy V1 Protocol CRLF injection via AF_UNIX Address5.5CNA v3.10.2%2026-07-29Fix
CVE-2026-59901Netty Bzip2Decoder: Infinite loop in RLE State Machine leads to Event-Loop Thread Hang8.7CNA v4.00.5%2026-07-29Fix
CVE-2026-59900Netty HTTP/2 to HTTP/1.x translation vulnerability6.9CNA v4.00.4%2026-07-29Fix
CVE-2026-59899Netty HttpContentEncoder resource exhaustion6.9CNA v4.00.6%2026-07-29Fix
CVE-2026-59898Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation6.3CNA v4.00.4%2026-07-29Fix
CVE-2026-59247Insufficient verification of Hex package metadata in Gleam7.6CNA v4.00.2%2026-07-29Fix
CVE-2026-59243Apache Airflow FAB provider Azure AD OAuth login improper signature verification9.8CISA ADP v3.10.6%2026-07-29Exploit codeFix
CVE-2026-58189Apache Traffic Server: Plugins resetting the redirect counter enable SSRF amplification8.2CNA v4.00.6%2026-07-29Fix
CVE-2026-58188Apache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins8.4CNA v4.00.8%2026-07-29Fix
CVE-2026-58187Apache Traffic Server: Multiplexer plugin chunk decoder enables a denial of service6.3CNA v4.00.6%2026-07-29Fix
CVE-2026-58186Apache Traffic Server: Webp_transform plugin decodes unsafely and mislabels degraded responses8.2CNA v4.00.7%2026-07-29Fix
CVE-2026-58185Apache Traffic Server: Use-after-free in the intercept plugin8.2CNA v4.00.6%2026-07-29Fix
CVE-2026-58184Apache Traffic Server: Header_rewrite plugin cookie handling can corrupt memory8.3CNA v4.00.6%2026-07-29Fix
CVE-2026-58183Apache Traffic Server: Prefetch plugin can crash on attacker-influenced input8.2CNA v4.00.7%2026-07-29Fix
CVE-2026-58182Apache Traffic Server: Ts_lua plugin has initialization and resource-handling errors8.2CNA v4.00.7%2026-07-29Fix
CVE-2026-58181Apache Traffic Server: Uri_signing and url_sig plugins can exhaust the stack or crash8.2CNA v4.00.7%2026-07-29Fix
CVE-2026-58180Apache Traffic Server: Txn_box plugin overflows the stack from attacker input8.2CNA v4.00.7%2026-07-29Fix
CVE-2026-58179Apache Traffic Server: Regex_remap plugin overflows the stack from attacker input9.2CNA v4.00.6%2026-07-29Fix
CVE-2026-58178Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery8.2CNA v4.00.7%2026-07-29Fix
CVE-2026-58177Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework8.3CNA v4.00.6%2026-07-29Fix
CVE-2026-58175Apache Traffic Server: HostDB SRV handling leaks memory8.2CNA v4.00.7%2026-07-29Fix
CVE-2026-58164Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free8.3CNA v4.00.7%2026-07-29Fix
CVE-2026-58163Apache Traffic Server on-disk cache deserialization of untrusted data8.3CNA v4.00.7%2026-07-29Fix
CVE-2026-58162Apache Traffic Server: Certifier plugin trusts client SNI when generating certificates8.4CNA v4.00.4%2026-07-29Fix
CVE-2026-58161Apache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the server9.2CNA v4.00.7%2026-07-29Fix
CVE-2026-58160Apache Traffic Server: Out-of-bounds reads while parsing DNS responses6.3CNA v4.00.6%2026-07-29Fix
CVE-2026-58159Apache Traffic Server: Listener and ACL handling allow access-control bypass7.0CNA v4.00.6%2026-07-29Fix
CVE-2026-58158Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow8.2CNA v4.00.6%2026-07-29Fix
CVE-2026-58157Apache Traffic Server: Improper server-session reuse can expose data across client connections6.9CNA v4.00.5%2026-07-29Fix
CVE-2026-58156Apache Traffic Server: URL and port parsing errors allow access-control bypass6.3CNA v4.00.4%2026-07-29Fix
CVE-2026-58155Apache Traffic Server: Header-name length truncation enables header aliasing and request smuggling9.2CNA v4.00.5%2026-07-29Fix
CVE-2026-58154Apache Traffic Server: Memory-safety errors in MIME and header parsing9.2CNA v4.00.5%2026-07-29Fix
CVE-2026-58153Apache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafely6.3CNA v4.00.6%2026-07-29Fix
CVE-2026-58152Apache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memory6.9CNA v4.00.6%2026-07-29Fix
CVE-2026-58151Apache Traffic Server: Abusive HTTP/2 framing can exhaust resources and crash the server8.7CNA v4.00.7%2026-07-29Fix
CVE-2026-58150Apache Traffic Server HTTP request smuggling7.8CNA v4.00.6%2026-07-29Fix
CVE-2026-57834Apache Traffic Server: Malformed chunked message body allows request smuggling7.0CNA v4.00.6%2026-07-29Fix
CVE-2026-56390Arbitrary Output Location Change in GNU Bison6.3v3.10.2%2026-07-29Fix
CVE-2026-56389Arbitrary command execution in GNU Bison8.6v3.10.2%2026-07-29Fix
CVE-2026-55995Double free in the iSNS attribute decoder in open-iscsi8.7CNA v4.00.4%2026-07-29Fix
CVE-2026-54735Prebid-server's request forgery vulnerability allows for possible host environment data extraction10.0CNA v3.10.6%2026-07-29Fix
CVE-2026-54727proot-distro has a Container Isolation Bypass via Crafted Restore Archive8.2CNA v3.10.2%2026-07-29Fix
CVE-2026-54705Mathlive's Lack of Escaping of HTML allows for XSS6.3CNA v3.10.4%2026-07-29Fix
CVE-2026-54693ZITADEL Users can Self-Verify Email/Phone via API8.2CNA v4.00.6%2026-07-29Fix
CVE-2026-54680kube-logging logging-operator command injection9.9CNA v3.10.8%2026-07-29Fix
CVE-2026-54666swagger-typescript-api vulnerable to code injection8.3CNA v3.10.5%2026-07-29Fix
CVE-2026-54664swagger-typescript-api vulnerable to code injection via unescaped enum string values8.3CNA v3.10.5%2026-07-29Fix
CVE-2026-54663swagger-typescript-api vulnerable to server-side request forgery via spec `$ref`6.1CNA v3.10.3%2026-07-29Fix
CVE-2026-54662swagger-typescript-api vulnerable to code injection8.3CNA v3.10.5%2026-07-29Fix
CVE-2026-54661swagger-typescript-api vulnerable to code injection8.3CNA v3.10.5%2026-07-29Fix
CVE-2026-54660swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`7.4CNA v3.10.4%2026-07-29Fix
CVE-2026-54574`proot-distro install` has a Symlink Escape (arbitrary host File Write) via Malicious Tar Archive8.2CNA v3.10.2%2026-07-29Fix
CVE-2026-54249Pydantic AI Vercel AI adapter file uploads server-side request forgery6.8CNA v3.10.3%2026-07-29Fix
CVE-2026-54082veraPDF-validation PDFAValidator XML external entity injection6.5CNA v3.10.4%2026-07-29Fix
CVE-2026-54081veraPDF Parser DoS via PostScript Type 1 Font Programs6.9CNA v4.00.5%2026-07-29Fix
CVE-2026-54080veraPDF Parser DoS via PostScript CMap Streams6.9CNA v4.00.5%2026-07-29Fix
CVE-2026-54079veraPDF validation XXE via XFA8.7CNA v4.00.6%2026-07-29Fix
CVE-2026-54078veraPDF validation XXE via Rich Text8.7CNA v4.00.6%2026-07-29Fix
CVE-2026-52791fuse-overlayfs release- preserves SUID/SGID bits after truncate/open(O_TRUNC)2.0CNA v4.00.1%2026-07-29Fix
CVE-2026-50782Jinher OA C6 contains an XML External Entity (XXE) injection vulnerability in the /c6/JHSoft.Web.HrmAttendance/sp_manager_getUserlist.aspx/GetXmlHttp endpoint. An unauthenticated remote attacker can send a crafted XML payload to read arbitrary files from the server via an out-of-band attack.7.5CISA ADP v3.10.6%2026-07-29
CVE-2026-50642so-fancy diff-so-fancy Terminal Escape injection in diff‑so‑fancy4.8CNA v4.00.2%2026-07-29
CVE-2026-50641Plaintext password storage in Streamsoft Business Intelligence7.1CNA v4.00.2%2026-07-29Fix
CVE-2026-50622Apache Atlas: Missing authorization on Admin endpoints8.8CISA ADP v3.10.6%2026-07-29Fix
CVE-2026-50558Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive5.9CNA v3.10.4%2026-07-29Fix
CVE-2026-46678Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of)6.8CNA v3.10.4%2026-07-29Fix
CVE-2026-44944Iscsiuio control-socket authentication bypass in open-iscsi8.5CNA v4.00.1%2026-07-29Fix
CVE-2026-44943Remote limited file-write as root via discovery in open-iscsi6.9CNA v4.00.6%2026-07-29Fix
CVE-2026-41939Care Everywhere Gateway hard-coded credentials RCE via WildFly9.3CNA v4.01.1%2026-07-29
CVE-2026-41920Apache Traffic Server: SNI to host header matching policy is not properly enforced7.0CNA v4.00.5%2026-07-29Fix
CVE-2026-40272Vulnerability in the QNX libtraceparser Impacts QNX Software Development Platform7.0CNA v3.10.2%2026-07-29Fix
CVE-2026-35226Out-of-bounds write in CODESYS PROFINET controller7.1CNA v4.00.3%2026-07-29Fix
CVE-2026-33930Apache Traffic Server: Buffer overflow via host field that has a long string value8.2CNA v4.00.6%2026-07-29Fix
CVE-2026-33385OpenSolution QuickCMS blind SQL injection in Quick.CMS5.1CNA v4.00.4%2026-07-29
CVE-2026-33267Apache Traffic Server: Untrusted @ headers can spoof ATS internal metadata7.7CNA v4.00.6%2026-07-29Exploit codeFix
CVE-2026-24033Apache Traffic Server: Request smuggling via chunked extension quoted-string parsing6.9CNA v4.00.6%2026-07-29Fix
CVE-2026-23904Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy7.3CISA ADP v3.10.9%2026-07-29Fix
CVE-2026-22068Apache Traffic Server: Regex mappings match with malicious domain names6.9CNA v4.00.6%2026-07-29Fix
CVE-2026-20316Cisco Secure Firewall Management Center use of hard-coded password5.3CNA v3.135.1%2026-07-29KEVKCVFix
CVE-2026-18266Dify AI Workflow oauth_redirect_url open redirect5.4CNA v3.00.3%2026-07-29
CVE-2026-18257Improper certificate validation in S2OPC5.6CNA v3.10.2%2026-07-29Fix
CVE-2026-18255Quay: Quay: Global read-only superuser can view robot account tokens7.2CNA v3.10.8%2026-07-29Fix
CVE-2026-18236Google-ADK incorrect authorization9.3CNA v4.00.2%2026-07-29Fix
CVE-2026-18220binutils BFD DLX ELF backend out-of-bounds write7.8CNA v3.10.2%2026-07-29Exploit codeFix
CVE-2026-18207Red Hat Keycloak client policy group matching improper authorization6.5CNA v3.10.3%2026-07-29
CVE-2026-18201Red Hat Keycloak identity provider organization linking missing authorization5.5CNA v3.10.4%2026-07-29Fix
CVE-2026-18197Link Library cross-site scripting6.1NVD v3.10.3%2026-07-29Fix
CVE-2026-18192Vacron|IP Camera arbitrary file read7.1CNA v4.00.6%2026-07-29Fix
CVE-2026-18191Vacron|IP Camera hidden functionality9.3CNA v4.00.7%2026-07-29Fix
CVE-2026-18174@fastify/forwarded vulnerable to improper input validation5.3CNA v3.10.3%2026-07-29Fix
CVE-2026-18072Advanced Responsive Video Embedder for Rumble WordPress plugin authentication bypass9.8CNA v3.13.0%2026-07-29NucleiFix
CVE-2026-18022pgvector buffer overflow via integer wraparound in IVFFlat index build on 32-bit systems8.8CNA v3.10.6%2026-07-29Fix
CVE-2026-17550DWG or DXF File Parsing out-of-bounds read in Autodesk AutoCAD5.5CNA v3.10.3%2026-07-29Fix
CVE-2026-17166Event Booking Manager for WooCommerce WordPress plugin authorization bypass4.3CNA v3.10.4%2026-07-29Fix
CVE-2026-17162WowStore WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-29Fix
CVE-2026-17161WowStore WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-29Fix
CVE-2026-16751Ente Museum Server authorization bypass6.5CISA ADP v3.10.4%2026-07-29
CVE-2026-16729undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields4.8CNA v3.10.2%2026-07-29Fix
CVE-2026-16728undici vulnerable to downstream response desynchronization via retry interceptor4.8CNA v3.10.2%2026-07-29Fix
CVE-2026-16655Fluent Forms WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.5%2026-07-29Fix
CVE-2026-16597GTM4WP WordPress plugin unauthenticated stored cross-site scripting via WooCommerce Billing fields7.2CNA v3.10.4%2026-07-29Fix
CVE-2026-16553Insufficiently protected credentials in GitLab5.4CNA v3.10.3%2026-07-29Fix
CVE-2026-16543Kong Operator cluster-wide ingress configuration DoS via embedded KIC CA-certificate ID collision7.1CNA v4.00.2%2026-07-29Fix
CVE-2026-16465DWG or DXF File Parsing out-of-bounds read in Autodesk AutoCAD6.1CNA v3.10.3%2026-07-29Fix
CVE-2026-16463DXF File Parsing heap-based overflow in Autodesk AutoCAD7.8CNA v3.10.3%2026-07-29Fix