CVE-2026 list

CVE-2026 records published in July 2026

Page two of 10: records 1,001 to 2,000 of the 9,534 published in July 2026, newest first. The first page carries the figures for July 2026.

CVE-2026 records published in July 2026, newest first: records 1,001 to 2,000 of 9,534
CVE Summary CVSS EPSS Published Signals
CVE-2026-16328HashiCorp consul-mcp-server Consul backend address configuration server-side request forgery8.6CNA v3.10.4%2026-07-29Fix
CVE-2026-16326HashiCorp consul-mcp-server streamable-HTTP stateless sessions vulnerability10.0CNA v3.10.5%2026-07-29Fix
CVE-2026-15975Allocation of resources without limits or throttling in GitLab7.5CNA v3.10.5%2026-07-29Fix
CVE-2026-15831Generation of Incorrect Security Tokens in GitLab4.3CNA v3.10.3%2026-07-29Fix
CVE-2026-15735Contact Form to Any API WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-29Fix
CVE-2026-15344WP Photo Album Plus WordPress plugin SQL injection4.9CNA v3.10.6%2026-07-29Fix
CVE-2026-15228Kong Kubernetes Ingress controller cluster-wide ingress configuration DoS7.1CNA v4.00.2%2026-07-29Fix
CVE-2026-15157undici vulnerable to CRLF injection via blob-like body type property4.2CNA v3.10.2%2026-07-29Fix
CVE-2026-15144@fastify/rate-limit vulnerable to rate-limit bypass via IPv6 address rotation7.3CNA v3.10.4%2026-07-29Fix
CVE-2026-15077Improper neutralization of Input Used for LLM Prompting in GitLab4.3CNA v3.10.3%2026-07-29Fix
CVE-2026-14900Cost Calculator Builder PRO WordPress plugin unauthenticated remote code execution9.8CNA v3.11.3%2026-07-29Fix
CVE-2026-14643undici vulnerable to cross-user information disclosure5.9CNA v3.10.4%2026-07-29Fix
CVE-2026-14529IBM WebSphere Application Server SIP container feature server-side request forgery9.4CNA v3.10.5%2026-07-29Fix
CVE-2026-14488Meta Box AIO WordPress plugin missing authorization unauthenticated arbitrary post deletion9.1CNA v3.10.5%2026-07-29Fix
CVE-2026-14354Schneider Electric EcoStruxure™ Cybersecurity Admin Expert insufficiently protected credentials8.7CNA v4.00.2%2026-07-29Fix
CVE-2026-14351Exposure of sensitive information through Metadata in GitLab4.3CNA v3.10.4%2026-07-29Fix
CVE-2026-14341Missing authorization in GitLab4.9CNA v3.10.5%2026-07-29Fix
CVE-2026-14300miniOrange Social Login and Register WordPress plugin unauthenticated account takeover8.1CISA ADP v3.10.4%2026-07-29Fix
CVE-2026-14270Extra Checkout Options WordPress plugin arbitrary file upload8.8CNA v3.10.8%2026-07-29Fix
CVE-2026-142667-Zip XZ Decompression heap-based buffer overflow remote code execution7.8v3.10.7%2026-07-29Fix
CVE-2026-14234WOLF - WordPress Posts Bulk Editor and Manager plugin stored XSS via CSRF7.1CISA ADP v3.10.1%2026-07-29Fix
CVE-2026-14224Easy Appointments WordPress plugin Subscriber+ Cross-User Appointment data modification via IDOR5.4CISA ADP v3.10.2%2026-07-29Fix
CVE-2026-13723Develar's electron-builder allows arbitrary file overwrite6.5CISA ADP v3.10.5%2026-07-29Fix
CVE-2026-13697undici vulnerable to cross-user information disclosure and parse-time crash7.4CNA v3.10.6%2026-07-29Fix
CVE-2026-13692PayU CommercePro WordPress plugin unauthenticated order tampering5.3CISA ADP v3.10.3%2026-07-29Fix
CVE-2026-13690UsersWP WordPress plugin Two-Factor authentication bypass7.4CISA ADP v3.10.4%2026-07-29Fix
CVE-2026-13605PhotoSwipe lightbox caption rendering stored cross-site scripting6.8CISA ADP v3.10.4%2026-07-29
CVE-2026-13425Database for CF7 WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-07-29
CVE-2026-13423Streamit WordPress theme unauthenticated remote code execution via arbitrary function Call9.8CISA ADP v3.11.0%2026-07-29
CVE-2026-13346pip absolute path traversal during download from malicious package indexes5.6CNA v4.00.3%2026-07-29Fix
CVE-2026-13309Autel MaxiCharger AC Elite Home NFC stack-based buffer overflow arbitrary code execution6.8CNA v3.00.3%2026-07-29
CVE-2026-13308Autel MaxiCharger AC Elite Home WebSockets integer underflow remote code execution8.1CNA v3.00.8%2026-07-29
CVE-2026-13307Autel MaxiCharger AC Elite Home USB heap-based buffer overflow arbitrary code execution6.8CNA v3.00.3%2026-07-29
CVE-2026-13306Autel MaxiCharger AC Elite Home USB authentication bypass4.3CNA v3.00.3%2026-07-29
CVE-2026-13305Autel MaxiCharger AC Elite Home software update process arbitrary code execution6.4CNA v3.00.2%2026-07-29
CVE-2026-13268G DATA Total Security Backup service link following local privilege escalation7.8CNA v3.00.2%2026-07-29
CVE-2026-13113Time-of-check time-of-use (TOCTOU) race condition in GitLab6.5CNA v3.10.3%2026-07-29Fix
CVE-2026-12939Newsletters WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-29Fix
CVE-2026-12938Newsletters WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-29Fix
CVE-2026-12935Unauthenticated remote code execution in TP-Link TL-WR940N RTSP Conntrack feature8.7CNA v4.01.0%2026-07-29Fix
CVE-2026-12927Schneider Electric IGSS Definition (Def.exe) out-of-bounds write8.4CNA v4.00.2%2026-07-29Fix
CVE-2026-12895SQL injection in Frappe's ERPNext7.1CNA v4.00.4%2026-07-29Fix
CVE-2026-12703Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS8.0CNA v3.10.4%2026-07-29Fix
CVE-2026-12476Easy Digital Downloads WordPress plugin arbitrary file upload7.2CNA v3.11.2%2026-07-29Fix
CVE-2026-12436Improperly controlled modification of dynamically-determined object attributes in GitLab8.4CNA v3.10.5%2026-07-29Fix
CVE-2026-12357Heimdall Data Database Proxy generateFileContent CRLF injection remote code execution7.2CNA v3.01.1%2026-07-29
CVE-2026-12144Wholesale for WooCommerce WordPress plugin privilege escalation8.8CNA v3.10.5%2026-07-29Fix
CVE-2026-11974Media Folder Addon cloud storage AJAX handler path traversal8.6CISA ADP v3.10.7%2026-07-29Fix
CVE-2026-11973WP-Lister Lite for eBay WordPress plugin SQL injection4.9CNA v3.10.5%2026-07-29Fix
CVE-2026-11351ShinyStat Analytics WordPress plugin unauthenticated Non-Published Product information disclosure5.3CISA ADP v3.10.3%2026-07-29Fix
CVE-2026-10684zephyrproject zephyr out-of-bounds read in coredump shell when printing stored-dump target code3.0CNA v3.10.1%2026-07-29Fix
CVE-2026-9720Facturación Electrónica Costa Rica WordPress plugin cross-site request forgery4.3CNA v3.10.2%2026-07-29Fix
CVE-2026-9177Server-side template injection in SecureTransport's Apache Velocity mail templates9.4CNA v4.00.5%2026-07-29Fix
CVE-2026-8791Booking System Trafft WordPress plugin authenticated (Subscriber+) stored cross-site scripting6.4CNA v3.10.4%2026-07-29Fix
CVE-2026-8497Devolutions Password Manager Devolutions Server connection handling improper certificate validation7.4CISA ADP v3.10.1%2026-07-29Fix
CVE-2026-8339SQL injection in Coverity Connect SOAP API8.7CNA v4.00.3%2026-07-29Fix
CVE-2026-8338Authentication and authorization bypass in Coverity Connect9.2CNA v4.00.5%2026-07-29Fix
CVE-2026-7436WPC Badge Management for WooCommerce WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-29Fix
CVE-2026-6336Incorrect authorization in GitLab5.3CNA v3.10.4%2026-07-29Fix
CVE-2026-6267Insertion of sensitive information into sent data in GitLab8.5CNA v3.10.6%2026-07-29Fix
CVE-2026-6102MSI Center NTIOLib_X64 origin validation error local privilege escalation7.8CNA v3.00.1%2026-07-29
CVE-2026-6089WP CTA WordPress plugin authenticated (Administrator+) server-side request forgery4.9CNA v3.10.5%2026-07-29Fix
CVE-2026-5626Survey Form Block WordPress plugin missing authorization authenticated Survey Submission data export4.3CNA v3.10.3%2026-07-29Fix
CVE-2026-5492DriveLock directory traversal information disclosure6.5CNA v3.01.6%2026-07-29Fix
CVE-2026-5491DriveLock directory traversal information disclosure7.5CNA v3.01.8%2026-07-29Fix
CVE-2026-5490DriveLock SQL injection privilege escalation8.8CNA v3.00.7%2026-07-29Fix
CVE-2026-5489DriveLock directory traversal information disclosure5.3CNA v3.01.5%2026-07-29Fix
CVE-2026-5487DriveLock directory traversal information disclosure7.5CNA v3.01.8%2026-07-29Fix
CVE-2026-5060MasterStudy LMS WordPress Plugin WordPress plugin insecure direct object reference6.5CNA v3.10.4%2026-07-29Fix
CVE-2026-5057ATEN Unizon RpcProvider missing authentication denial of service7.5CNA v3.00.7%2026-07-29Fix
CVE-2026-5056GStreamer qtdemux stack-based buffer overflow remote code execution7.8CNA v3.00.3%2026-07-29Fix
CVE-2026-4672Missing authorization in GitLab4.3CNA v3.10.4%2026-07-29Fix
CVE-2026-4604Klubraum Membership Request WordPress plugin unauthorized access5.3CNA v3.10.4%2026-07-29Fix
CVE-2026-3093Improper neutralization of input during web page generation (cross-site scripting) in GitLab4.7CNA v3.10.3%2026-07-29Fix
CVE-2026-2482IBM WebSphere Application Server Liberty is affected by a cross-site request forgery3.1CNA v3.10.2%2026-07-29Fix
CVE-2026-0667Schneider Electric SCADAPack 47x improper check for exceptional conditions9.3CNA v4.00.5%2026-07-29Fix
CVE-2026-67185TinyWeb path traversal via URL Path component8.7CNA v4.00.5%2026-07-28
CVE-2026-67184TinyWeb null pointer dereference DoS via Malformed HTTP request8.7CNA v4.00.6%2026-07-28Exploit code
CVE-2026-67183TinyWeb memory leak DoS via HTTP Request Handling8.7CNA v4.00.5%2026-07-28Exploit code
CVE-2026-67182Rouille HTTP request smuggling via proxy header injection6.9CNA v4.00.6%2026-07-28Fix
CVE-2026-67181Rouille HTTP request smuggling via proxy Transfer-Encoding header6.3CNA v4.00.4%2026-07-28Fix
CVE-2026-67178Open redirect in MISP Installer-Generated Apache Configuration7.8CNA v4.00.7%2026-07-28Fix
CVE-2026-67174DOM-based cross-site scripting via Unsafe String and SVG Icon Rendering in Pivotick9.2CNA v4.00.6%2026-07-28
CVE-2026-67173Pivotick Unvalidated Node Image URLs allow Unintended Client-Side requests5.1CNA v4.00.4%2026-07-28
CVE-2026-66922Pivotick tree layout and cycle detection prototype pollution5.1CNA v4.00.5%2026-07-28
CVE-2026-66921Pivotick stored DOM-based cross-site scripting via Unescaped Markdown Node References6.3CNA v4.00.4%2026-07-28
CVE-2026-66920Pivotick stack exhaustion denial of service via Deep or Cyclic Graph Data8.2CNA v4.00.4%2026-07-28
CVE-2026-66919pivotick stored DOM-based cross-site scripting in Node Modal headers6.9CNA v4.00.4%2026-07-28
CVE-2026-66918pivotick DOM-based cross-site scripting via Unsanitized SVG Node Icons8.2CNA v4.00.4%2026-07-28
CVE-2026-66913Zip bomb in Lookyloo Capture upload allows denial of service6.9CNA v4.00.4%2026-07-28
CVE-2026-66754Rouille reachable assertion DoS via remove_prefix percent-encoding8.2CNA v4.00.6%2026-07-28Fix
CVE-2026-66753tiny-http HTTP response splitting via header injection6.3CNA v4.00.3%2026-07-28
CVE-2026-66752tiny-http HTTP request smuggling via Transfer-Encoding Handling6.3CNA v4.00.3%2026-07-28Exploit code
CVE-2026-66751sdelements lets-chat let's Chat improper authorization via delete /rooms/:room5.3CNA v4.00.3%2026-07-28
CVE-2026-66750sdelements lets-chat let's Chat broken access control File Disclosure via GET /files route5.3CNA v4.00.3%2026-07-28
CVE-2026-66749sdelements lets-chat let's Chat denial of service via null dereference in Room Lookup7.1CNA v4.00.4%2026-07-28Exploit code
CVE-2026-66748owen2345 CamaleonCMS camaleon CMS authenticated RCE via select_eval Custom field8.7CNA v4.01.1%2026-07-28Exploit codeFix
CVE-2026-66746Rouille HTTP response splitting via header injection5.3CNA v4.00.3%2026-07-28Fix
CVE-2026-66745Artica Proxy session fixation via fw.login.php7.5CNA v4.00.6%2026-07-28Fix
CVE-2026-66713Apache Axis2/java: Deserialization of untrusted data9.8CISA ADP v3.11.7%2026-07-28Fix
CVE-2026-66299Apache Tomcat: DoS via WebSocket chat example5.3NVD v3.10.6%2026-07-28Fix
CVE-2026-66064goshs has ACL Bypass and path traversal5.3CNA v3.10.4%2026-07-28Fix
CVE-2026-66063goshs has a path traversal issue6.5CNA v3.10.3%2026-07-28Fix
CVE-2026-65882Joomla extension joomdle.com reflected XSS vulnerability in Joomdle6.1CISA ADP v3.10.3%2026-07-28
CVE-2026-65881Joomdle default configuration vulnerability7.5CISA ADP v3.10.4%2026-07-28
CVE-2026-65880Joomla extension balbooa.com unauthenticated remote code execution in Balbooa Forms10.0CNA v4.00.8%2026-07-28
CVE-2026-65624Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names enables memory exhaustion6.9CNA v4.00.7%2026-07-28Fix
CVE-2026-64863goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite9.1CNA v3.10.6%2026-07-28Fix
CVE-2026-63727Anchore Enterprise privilege escalation via User Management API8.7CNA v4.00.4%2026-07-28Fix
CVE-2026-63303OpenSolution QuickCMS path traversal in Quick.CMS5.1CNA v4.00.6%2026-07-28
CVE-2026-63302OpenSolution QuickCMS local file inclusion in Quick.CMS5.1CNA v4.00.5%2026-07-28
CVE-2026-63301OpenSolution QuickCMS denial of service in Quick.CMS7.0CNA v4.00.6%2026-07-28
CVE-2026-62828Microsoft Edge for Android (Chromium-based) tampering5.4CNA v3.10.4%2026-07-28Fix
CVE-2026-62436Xen grant-table: Version change racing with other operations6.5CISA ADP v3.10.3%2026-07-28Fix
CVE-2026-62435Xen grant-table: Version change racing with other operations6.5CISA ADP v3.10.3%2026-07-28Fix
CVE-2026-62434Xen PoD: Don't try to reclaim special pages5.3CISA ADP v3.10.5%2026-07-28Fix
CVE-2026-62433Xen correct buffer checks for DM_OP hypercalls7.3CISA ADP v3.10.4%2026-07-28Fix
CVE-2026-62432Xen evtchn: Race between FIFO expand and reset7.3CISA ADP v3.10.3%2026-07-28Fix
CVE-2026-62431Xen viridian STIMER division by zero7.5CISA ADP v3.10.6%2026-07-28Fix
CVE-2026-62430Xen x86: Out-of-bounds read in vRTC emulation7.5CISA ADP v3.10.4%2026-07-28Fix
CVE-2026-62429Xen vNUMA domain cleanup may race other operations6.5CISA ADP v3.10.3%2026-07-28Fix
CVE-2026-62428Xen grant-table: Type confusion in grant-copy7.8CISA ADP v3.10.1%2026-07-28Fix
CVE-2026-62427Xen sysctl and platform-op locks open to abuse8.8CISA ADP v3.10.4%2026-07-28Fix
CVE-2026-62426Xen sysctl and platform-op locks open to abuse8.8CISA ADP v3.10.4%2026-07-28Fix
CVE-2026-62425Xen buffer overruns in libfsimage iso9660 handling5.5CISA ADP v3.10.1%2026-07-28Fix
CVE-2026-62424Xen buffer overruns in libfsimage iso9660 handling5.5CISA ADP v3.10.1%2026-07-28Fix
CVE-2026-62423Xen buffer overruns in libfsimage iso9660 handling5.5CISA ADP v3.10.1%2026-07-28Fix
CVE-2026-62325goshs SFTP authentication bypass via empty password (incomplete fix of)9.1CNA v3.10.6%2026-07-28Fix
CVE-2026-61609Pterodactyl Panel authentication rate limiter denial of service7.5CNA v3.10.7%2026-07-28Fix
CVE-2026-61487Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass6.5CISA ADP v3.10.5%2026-07-28Fix
CVE-2026-61376ELECOM WAB-M1775-PS OS command injection8.6CNA v4.01.7%2026-07-28
CVE-2026-59943Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem6.3CNA v4.00.4%2026-07-28Fix
CVE-2026-59942Dompdf: Denial of service (DoS) via resource exhaustion using Oversized Image Bitmaps6.3CNA v4.00.9%2026-07-28Fix
CVE-2026-59941Dompdf: Uncontrolled resource consumption based on declared BMP dimensions6.3CNA v4.00.6%2026-07-28Exploit codeFix
CVE-2026-59933PhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion7.5CNA v3.10.7%2026-07-28Fix
CVE-2026-59932PhpSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion7.5CNA v3.10.7%2026-07-28Fix
CVE-2026-59931PhpSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE domain whitelist7.7CNA v3.10.5%2026-07-28Fix
CVE-2026-59921Netty: CRLF injection via Multipart Filename in Netty HttpPostRequestEncoder5.7CNA v3.10.5%2026-07-28Fix
CVE-2026-59878Apache ActiveMQ AMQP improper input validation7.5CISA ADP v3.10.8%2026-07-28Fix
CVE-2026-59764ELECOM WRC-X3000GS3-B OS command injection8.6CNA v4.01.7%2026-07-28
CVE-2026-59248Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS8.7CNA v4.00.5%2026-07-28Fix
CVE-2026-58246Information disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform4.3CNA v3.10.2%2026-07-28Fix
CVE-2026-57511SuperPlane SMTP header injection via Webhook Event Title6.3CNA v4.00.4%2026-07-28Fix
CVE-2026-57510SuperPlane Broken Object Level Authorization via CanvasService gRPC8.7CNA v4.00.6%2026-07-28Fix
CVE-2026-56822Netty: TOCTOU in OcspServerCertificateValidator7.4CNA v3.10.2%2026-07-28Fix
CVE-2026-56821Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator7.4CNA v3.10.2%2026-07-28Fix
CVE-2026-56722Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URI6.3CNA v4.00.4%2026-07-28Fix
CVE-2026-55977ESharePro bypass of application rate-limiting mechanism3.3CNA v3.10.1%2026-07-28
CVE-2026-55555Dompdf: File existence oracle via font-face stylesheet declaration2.3CNA v4.00.5%2026-07-28Fix
CVE-2026-55554Dompdf: Chroot Validation Bypass2.3CNA v4.00.5%2026-07-28Fix
CVE-2026-55415datamodel-code-generator vulnerable to code injection7.5CNA v3.10.5%2026-07-28Fix
CVE-2026-55403datamodel-code-generator remote schema fetcher information disclosure3.7CNA v3.10.3%2026-07-28Fix
CVE-2026-55391datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding7.5CNA v3.10.3%2026-07-28Fix
CVE-2026-55390datamodel-code-generator XML schema import resolver path traversal7.5CNA v3.10.5%2026-07-28Fix
CVE-2026-55389datamodel-code-generator JSON schema ref resolver path traversal7.5CNA v3.10.5%2026-07-28Fix
CVE-2026-54719goshs bulk ZIP download route missing authorization7.5CNA v3.10.5%2026-07-28Fix
CVE-2026-54691datamodel-code-generator vulnerable to SSRF via --url: No host/IP validation, follows redirects8.2CNA v3.10.4%2026-07-28Fix
CVE-2026-54690datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)8.2CNA v3.10.4%2026-07-28Fix
CVE-2026-54659Pagy I18n locale option is not validated before being used in a file path6.9CNA v4.00.5%2026-07-28Fix
CVE-2026-54658@hypequery/clickhouse has SQL injection in parameter escaping that allows arbitrary SQL execution9.8CNA v3.10.8%2026-07-28Fix
CVE-2026-54656`datamodel-code-generator` vulnerable to code execution on import7.8CNA v3.10.3%2026-07-28Fix
CVE-2026-54655`datamodel-code-generator` vulnerable to code execution on import7.8CNA v3.10.2%2026-07-28Fix
CVE-2026-54654`datamodel-code-generator` vulnerable to code injection7.8CNA v3.10.2%2026-07-28Fix
CVE-2026-54653`datamodel-code-generator` vulnerable to code injection in8.8CNA v3.10.7%2026-07-28Fix
CVE-2026-54650bablilayoub openhole openhole-server vulnerable to path traversal via URL-decoded request path8.6CNA v3.10.5%2026-07-28Fix
CVE-2026-54638td has pre-auth denial of service via unbounded memory allocation in proto.UnencryptedMessage.Decode7.5CNA v3.10.6%2026-07-28Fix
CVE-2026-54635nessshon tonapi pytonapi has a Webhook Custom Path authentication bypass7.5CNA v3.10.7%2026-07-28Fix
CVE-2026-54621`datamodel-code-generator` vulnerable to code injection7.8CNA v3.10.2%2026-07-28Fix
CVE-2026-54620sqlite3-ruby has use-after-free in SQLite Aggregate Function Callbacks2.0CNA v4.00.1%2026-07-28Fix
CVE-2026-54619sqlite3-ruby has use-after-free when Redefining SQLite functions with Different Arity2.0CNA v4.00.1%2026-07-28Fix
CVE-2026-54609QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding8.6CNA v3.10.5%2026-07-28
CVE-2026-54605OAuth: Cross-origin token-request redirects can expose signed request metadata7.2CNA v3.10.2%2026-07-28Fix
CVE-2026-54603OAuth2 client redirect handling information disclosure8.6CNA v3.10.4%2026-07-28Fix
CVE-2026-54593Pterodactyl Panel Wings file upload endpoint improper authentication8.1CNA v3.10.7%2026-07-28Fix
CVE-2026-54545@wakaru/cli arbitrary file write during bundle unpack7.1CNA v3.10.2%2026-07-28Fix
CVE-2026-54345GoPacket Diameter AVP decoder integer underflow6.9CNA v4.00.8%2026-07-28Fix
CVE-2026-54332GoPacket sFlow decoder denial of service6.9CNA v4.00.8%2026-07-28Fix
CVE-2026-50738EnterpriseDB pglogical use-after-free7.7CNA v4.00.5%2026-07-28Fix
CVE-2026-50737EnterpriseDB pglogical execution with unnecessary privileges9.0CNA v4.00.4%2026-07-28Fix
CVE-2026-50736EnterpriseDB pglogical SQL injection9.0CNA v4.00.4%2026-07-28Fix
CVE-2026-50735EnterpriseDB pglogical out-of-bounds read6.1CNA v4.00.4%2026-07-28Fix
CVE-2026-49447Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens5.3CNA v3.10.4%2026-07-28Fix
CVE-2026-49332Red Hat OpenShift oauth-proxy identity headers vulnerability8.5CNA v3.10.5%2026-07-28Fix
CVE-2026-49258juev Nebula Mesh web UI missing authorization8.8CNA v3.10.5%2026-07-28Fix
CVE-2026-48396Bridge incorrect authorization8.6CNA v3.10.3%2026-07-28Fix
CVE-2026-48395Bridge untrusted search path8.6CNA v3.10.3%2026-07-28Fix
CVE-2026-48394Bridge out-of-bounds write7.8CNA v3.10.3%2026-07-28Fix
CVE-2026-48393Bridge out-of-bounds write7.8CNA v3.10.3%2026-07-28Fix
CVE-2026-48392Bridge out-of-bounds write7.8CNA v3.10.3%2026-07-28Fix
CVE-2026-48391Bridge untrusted search path8.2CNA v3.10.3%2026-07-28Fix
CVE-2026-48390Bridge incorrect authorization8.2CNA v3.10.2%2026-07-28Fix
CVE-2026-48388Photoshop Installer uncontrolled search path element8.6CNA v3.10.3%2026-07-28
CVE-2026-48374Bridge improper limitation of a pathname to a restricted directory (path traversal)7.8CNA v3.10.3%2026-07-28Fix
CVE-2026-48372Adobe Format Plugins heap-based buffer overflow7.8CNA v3.10.3%2026-07-28Fix
CVE-2026-48060Litestar: HTML injection through CSRF Token8.1CNA v3.10.4%2026-07-28Fix
CVE-2026-48058juev nebula-mesh session and OIDC cookies vulnerability4.6CNA v4.00.3%2026-07-28Fix
CVE-2026-48025juev nebula-mesh CA private key manager vulnerability6.9CNA v4.00.5%2026-07-28Fix
CVE-2026-47768juev nebula-mesh sensitive query strings5.5CNA v3.10.2%2026-07-28Fix
CVE-2026-47726juev nebula-mesh audit log endpoint vulnerability7.1CNA v4.00.4%2026-07-28Fix
CVE-2026-47725Nebula-mesh's web UI lacks CSRF tokens on /UI/* mutating endpoints6.9CNA v4.00.2%2026-07-28Fix
CVE-2026-47483NVIDIA DCGM resource exhaustion8.2CNA v3.10.6%2026-07-28Fix
CVE-2026-47427GitHub MCP Server: Nil Pointer Dereference DoS in completion/complete handler7.5CNA v3.10.8%2026-07-28Fix
CVE-2026-47219find-my-way HTTP/2 method router lookup denial of service7.5CNA v3.10.5%2026-07-28Fix
CVE-2026-45293WordPress-Coding-Standards WordPress Coding Standards contains an arbitrary code execution8.6CNA v3.10.2%2026-07-28Fix
CVE-2026-44387ELECOM WAB-M1775-PS cross-site scripting5.1CNA v4.00.2%2026-07-28
CVE-2026-43910java-client allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor8.2CNA v3.10.4%2026-07-28Fix
CVE-2026-42495Xen buffer overruns in libfsimage iso9660 handling5.5CISA ADP v3.10.1%2026-07-28Fix
CVE-2026-42494Xen buffer overruns in libfsimage iso9660 handling6.1CISA ADP v3.10.2%2026-07-28Fix
CVE-2026-42493Xen x86 shadow paging is deprecated7.5CISA ADP v3.10.6%2026-07-28Fix
CVE-2026-42492Xen vIRQ event channel binding may break Xenstore7.5CISA ADP v3.10.6%2026-07-28Fix
CVE-2026-41874Hard-coded admin credentials in Quick.Cart6.8CNA v4.00.2%2026-07-28
CVE-2026-21047Samsung Mobile Devices ImsService out-of-bounds write8.3CNA v4.00.7%2026-07-28
CVE-2026-18107Criu: Criu: Container escape via rseq critical section hijack during checkpoint/restore7.8CNA v3.10.1%2026-07-28Fix
CVE-2026-18085BlackBerry UEM An improper input validation5.9CNA v4.00.3%2026-07-28Fix
CVE-2026-18084Cross-site scripting (XSS) in Management console of BlackBerry UEM8.6CNA v4.00.3%2026-07-28Fix
CVE-2026-18047Red Hat Certificate System ACME admin endpoint authentication bypass6.5CNA v3.10.5%2026-07-28
CVE-2026-18038nextlevelbuilder GoClaw jq handler tools_invoke.go ExecTool.Execute information disclosure5.3CNA v4.00.4%2026-07-28
CVE-2026-18029Insufficient validation of payment status in pretix-girosolution6.3CNA v4.00.3%2026-07-28Fix
CVE-2026-18028pretix missing authorization check in event quick setup view2.3CNA v4.00.4%2026-07-28Fix
CVE-2026-17528nice-select2 cross-site scripting5.3CNA v4.00.4%2026-07-28Fix
CVE-2026-17524zip-lib path traversal8.7CNA v4.01.2%2026-07-28Fix
CVE-2026-17072gst-plugins-good Matroska FLAC stream header parsing out-of-bounds read3.3CNA v3.10.1%2026-07-28Fix
CVE-2026-16811ShopLentor WordPress plugin authenticated (Administrator+) SQL injection via orderby parameter4.9CNA v3.10.4%2026-07-28Fix
CVE-2026-16797ShopLentor WordPress plugin insecure direct object reference4.3CNA v3.10.4%2026-07-28Fix
CVE-2026-16774WPBot WordPress plugin missing authorization unauthenticated email Relay5.3CNA v3.10.4%2026-07-28Fix
CVE-2026-16773WPBot WordPress plugin information disclosure5.3CNA v3.10.5%2026-07-28Fix
CVE-2026-16771Arris BGW210-700 CGI management endpoints missing authentication8.8CISA ADP v3.10.4%2026-07-28Fix
CVE-2026-16587Advanced Form Integration WordPress plugin authorization bypass4.3CNA v3.10.4%2026-07-28Fix
CVE-2026-16585Better Messages WordPress plugin arbitrary file deletion7.2CNA v3.11.2%2026-07-28Fix
CVE-2026-16581Inclusion of sensitive information in source code in igloohome Smart Lock Mobile Application6.9CNA v4.00.4%2026-07-28Fix
CVE-2026-16498HashiCorp terraform-mcp-server streamable-HTTP stateless transport session data exposure10.0CNA v3.10.5%2026-07-28Fix
CVE-2026-16496HashiCorp terraform-mcp-server streamable-HTTP stateful transport session fixation8.9CNA v3.10.4%2026-07-28Fix
CVE-2026-16462Weidmueller Interface PROCON-WEB SCADA SQL injection via unauthenticated GetGridData endpoint9.3CNA v4.00.8%2026-07-28Fix
CVE-2026-16347MikroTik RouterOS API authentication vulnerability8.7CNA v4.00.4%2026-07-28
CVE-2026-16313Red Hat Enterprise Linux 10 sg3_utils: Sg3_utils: Arbitrary command execution7.6CNA v3.10.3%2026-07-28Fix
CVE-2026-16192IBM WebSphere Application Server Liberty is affected by a denial of service7.1CNA v3.10.4%2026-07-28Fix
CVE-2026-16184IBM WebSphere Application Server is affected by an authentication bypass7.0CNA v3.10.5%2026-07-28Fix
CVE-2026-16107IBM TS4500 CLI tool improper certificate validation5.9CNA v3.10.2%2026-07-28Fix
CVE-2026-15992WP Password Policy WordPress plugin authenticated (Subscriber+) privilege escalation8.8CNA v3.10.5%2026-07-28Fix
CVE-2026-15730GamiPress WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-07-28Fix
CVE-2026-15673SMS Alert WordPress plugin SQL injection4.4CNA v3.10.5%2026-07-28Fix
CVE-2026-15671SMS Alert WordPress plugin authenticated (Administrator+) SQL injection via id parameter4.9CNA v3.10.5%2026-07-28Fix
CVE-2026-15670SMS Alert WordPress plugin authenticated (Administrator+) SQL injection via orderby parameter4.9CNA v3.10.4%2026-07-28Fix
CVE-2026-15444Tutor LMS WordPress plugin authenticated (Administrator+) SQL injection via coupon_code parameter4.9CNA v3.10.5%2026-07-28Fix
CVE-2026-15411StoreGrowth: Smart Sales Booster for WooCommerce WordPress plugin authorization bypass5.3CNA v3.10.5%2026-07-28Fix
CVE-2026-15393Cozy Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-07-28Fix
CVE-2026-15328IBM WebSphere Application Server HTTP request smuggling7.4CNA v3.10.4%2026-07-28Fix
CVE-2026-15325IBM WebSphere Application Server TRACE request handling HTTP request smuggling8.7CNA v3.10.3%2026-07-28Fix
CVE-2026-15304Plugin Organizer WordPress plugin authenticated (Subscriber+) SQL injection6.5CNA v3.10.4%2026-07-28Fix
CVE-2026-15280IBM WebSphere Application Server Liberty collective routing mechanism path traversal7.5CNA v3.10.5%2026-07-28Fix
CVE-2026-15267Taskbuilder WordPress plugin authenticated (Subscriber+) SQL injection6.5CNA v3.10.4%2026-07-28Fix
CVE-2026-15136Cookie Banner for GDPR / CCPA WPLP Cookie Consent WordPress plugin cross-site request forgery4.3CNA v3.10.2%2026-07-28Fix
CVE-2026-15064IBM WebSphere Application Server HTTP channel HTTP response smuggling8.7CNA v3.10.3%2026-07-28Fix
CVE-2026-15057IBM WebSphere Application Server Liberty is affected by a denial of service7.5CNA v3.10.5%2026-07-28Fix
CVE-2026-15025Uncanny Automator WordPress plugin missing authorization7.5CNA v3.10.7%2026-07-28Fix
CVE-2026-15016Paid Memberships Pro WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-28Fix
CVE-2026-15014SMS Alert WordPress plugin unauthenticated authentication bypass to account takeover9.8CNA v3.10.9%2026-07-28Fix
CVE-2026-15012Demi WordPress plugin unauthenticated information exposure to arbitrary directory Copy5.3CNA v3.10.6%2026-07-28Fix
CVE-2026-14996IBM Aspera Faspex session management insufficient session expiration8.2CNA v3.10.3%2026-07-28Fix
CVE-2026-14981IBM WebSphere Application Server HTTP channel denial of service7.5CNA v3.10.5%2026-07-28Fix
CVE-2026-14976IBM WebSphere Application Server Liberty collectiveController feature remote code execution7.1CNA v3.10.6%2026-07-28Fix
CVE-2026-14974IBM WebSphere Application Server is affected by cross-site scripting and deserialization8.1CNA v3.10.7%2026-07-28Fix
CVE-2026-14973Path traversal in IBM Desktop App9.3CNA v3.10.5%2026-07-28Fix
CVE-2026-14959OS command injection in IBM Aspera Faspex9.1CNA v3.11.6%2026-07-28Fix
CVE-2026-14958OS command injection in IBM Aspera Faspex9.1CNA v3.10.8%2026-07-28Fix
CVE-2026-14926FluentCart WordPress plugin Subscriber+ Subscription Payment-Method tampering via IDOR4.2CISA ADP v3.10.2%2026-07-28Fix
CVE-2026-14924Tablesome WordPress plugin unauthenticated post creation and modification7.5CISA ADP v3.10.4%2026-07-28Fix
CVE-2026-14893IBM Instana Agent Node.js tracer configuration API prototype pollution7.3CNA v3.10.3%2026-07-28Fix
CVE-2026-14870Database for Contact Form 7, WPforms, Elementor forms WordPress plugin reflected XSS via form_id7.1CISA ADP v3.10.3%2026-07-28NucleiFix
CVE-2026-14869HashiCorp Terraform MCP Server streamable-HTTP transport server-side request forgery8.6CNA v3.10.4%2026-07-28Fix
CVE-2026-14821Quiz And Survey Master WordPress plugin Contributor+ arbitrary Template deletion2.7CISA ADP v3.10.3%2026-07-28Fix
CVE-2026-14819Event Tickets and Registration ticket history log stored cross-site scripting3.5CISA ADP v3.10.2%2026-07-28Fix
CVE-2026-14785Web Directory Free WordPress plugin unauthenticated SQL injection7.5CNA v3.10.5%2026-07-28Fix
CVE-2026-14545TrueBooker Appointment Booking for WordPress unauthenticated account takeover via password reset9.8CISA ADP v3.10.5%2026-07-28Fix
CVE-2026-14528IBM WebSphere Application Server unsafe deserialization7.4CNA v3.10.5%2026-07-28Fix
CVE-2026-14516Online Scheduling and Appointment Booking System WordPress plugin unauthenticated SQL injection7.5CNA v3.10.5%2026-07-28Fix
CVE-2026-14515IBM WebSphere Application Server is affected by cross-site scripting and deserialization6.1CNA v3.10.3%2026-07-28Fix
CVE-2026-14512IBM WebSphere Application Server insecure deserialization9.8CNA v3.11.0%2026-07-28Fix
CVE-2026-14490Demi WordPress plugin unauthenticated arbitrary directory deletion via demi_restore_step AJAX action7.5CNA v3.10.8%2026-07-28Fix
CVE-2026-14446IBM WebSphere Application Server is affected by a privilege escalation9.8CNA v3.10.5%2026-07-28Fix
CVE-2026-14328Eazy Plugin Manager WordPress plugin privilege escalation8.8CNA v3.10.7%2026-07-28Fix
CVE-2026-14171ads-tec Industrial IT: Post-login open redirect in the web interface6.1CNA v3.10.3%2026-07-28Fix
CVE-2026-14169ads-tec Industrial IT: Account lockout via non-atomic user creation8.1CNA v3.10.5%2026-07-28Fix
CVE-2026-14168ads-tec Industrial IT: Vertical privilege escalation via configuration table write8.8CNA v3.10.5%2026-07-28Fix
CVE-2026-14167ads-tec Industrial IT: Privilege escalation during configuration import8.7CNA v4.00.5%2026-07-28Fix
CVE-2026-13463Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability []7.5CNA v3.10.4%2026-07-28Fix
CVE-2026-13442IBM Langflow FAISS vector namespace information disclosure7.1CNA v3.10.3%2026-07-28Fix
CVE-2026-13440StoreGrowth: Smart Sales Booster for WooCommerce WordPress plugin stored cross-site scripting7.2CNA v3.10.5%2026-07-28Fix
CVE-2026-13161TrueBooker WordPress plugin unauthenticated SQL injection7.5CNA v3.10.8%2026-07-28Fix
CVE-2026-13110Storegrowth Sales Booster WordPress plugin missing authorization5.3CNA v3.10.4%2026-07-28Fix
CVE-2026-12800Premium Packages WordPress plugin unauthenticated SQL injection7.5CNA v3.10.5%2026-07-28NucleiFix
CVE-2026-12741WP Fast Total Search WordPress plugin unauthenticated SQL injection7.5CNA v3.10.5%2026-07-28NucleiFix
CVE-2026-12124PDFDraft WordPress plugin missing authorization unauthenticated sensitive PDF disclosure5.3CNA v3.10.4%2026-07-28Fix
CVE-2026-11841SICK InspectorP61x files accessible to external parties9.4CNA v3.10.9%2026-07-28Fix
CVE-2026-11756Dassault Systèmes 3DEXPERIENCE platform Station Launcher App deserialization of untrusted data10.0CNA v3.10.8%2026-07-28
CVE-2026-11598Shortcodify WordPress plugin stored cross-site scripting5.0CNA v3.10.4%2026-07-28
CVE-2026-11391Tanium addressed a SQL injection vulnerability in Patch6.3CNA v3.10.3%2026-07-28Fix
CVE-2026-10207PickPlugins Question Answer WordPress plugin unauthenticated SQL injection via id parameter7.5CNA v3.10.5%2026-07-28
CVE-2026-9680MCP Server Exposure via insecure default Binding on alibabacloud-rds-openapi-mcp-server5.8CNA v3.10.4%2026-07-28
CVE-2026-8167Reflected XSS in theWP's News Theme V86.1CNA v3.10.3%2026-07-28
CVE-2026-8164Search Order Hijacking in ArkSigner's ArkSigner Desktop Client7.3CNA v3.10.2%2026-07-28
CVE-2026-8058This Power System update is being released to address a sensitive information disclosure4.5CNA v3.10.4%2026-07-28Fix
CVE-2026-7868This Power System update is being released to address incorrect authorization6.5CNA v3.10.4%2026-07-28Fix
CVE-2026-7775IBM Sterling B2B Integrator and File Gateway web UI stored cross-site scripting5.5CNA v3.10.2%2026-07-28Fix
CVE-2026-7769SQL injection Security vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway8.1CNA v3.10.5%2026-07-28Fix
CVE-2026-7521Mattermost Server SAML certificate removal endpoint path traversal5.5CNA v3.10.4%2026-07-28Fix
CVE-2026-7362IBM Sterling B2B Integrator and Sterling File Gateway information disclosure4.3CNA v3.10.3%2026-07-28Fix
CVE-2026-7187Improper authentication in Universal Sotware's UKBS8.8CNA v3.10.4%2026-07-28
CVE-2026-6881Ellucian Legacy Advance SQL injection9.4CNA v4.00.3%2026-07-28Fix
CVE-2026-6879Python CPython Quadratic Behavior in xml.etree.ElementPath Index Predicates2.0CNA v4.00.4%2026-07-28Fix
CVE-2026-6251Chaty Pro WordPress plugin authenticated (Subscriber+) SQL injection via widget_id parameter6.5CNA v3.10.4%2026-07-28Fix
CVE-2026-5114SpeedyCache WordPress plugin authenticated (Administrator+) arbitrary file read4.9CNA v3.10.5%2026-07-28Fix
CVE-2026-4932This Power System update is being released to address insufficient entropy4.2CNA v3.10.1%2026-07-28Fix
CVE-2026-4912Media Cleaner: Clean your WordPress! plugin server-side request forgery4.1CNA v3.10.4%2026-07-28Fix
CVE-2026-4648Insufficient Encryption Level in CasfID Servicios Tecnológicos NFC Wristbands6.8CNA v4.00.2%2026-07-28
CVE-2026-3158IBM Sterling B2B Integrator dashboard information disclosure4.3CNA v3.10.3%2026-07-28Fix
CVE-2026-3157IBM Sterling B2B Integrator mailbox UI information disclosure4.3CNA v3.10.3%2026-07-28Fix
CVE-2026-1918IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file4.9CNA v3.10.4%2026-07-28Fix
CVE-2026-66825Cross-site scripting via Unsafe URL Schemes in Pivotick Property Links6.9CNA v4.00.4%2026-07-27Fix
CVE-2026-66824lookyloo stored cross-site scripting via Unsafe Capture Tree JSON Embedding9.2CNA v4.00.4%2026-07-27
CVE-2026-66759GNOME GIMP file-icns plugin out-of-bounds read7.1CNA v3.10.3%2026-07-27Fix
CVE-2026-66758GNOME GIMP file-fits plugin integer overflow7.8CNA v3.10.3%2026-07-27Fix
CVE-2026-66757Gimp: Signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images5.5CNA v3.10.2%2026-07-27Fix
CVE-2026-66731facil.io HTTP/1.1 Chunked Transfer Encoding parser crash DoS8.7CNA v4.00.8%2026-07-27Exploit code
CVE-2026-66730facil.io infinite loop DoS via Multipart MIME Body parser8.7CNA v4.00.8%2026-07-27Exploit code
CVE-2026-66729facil.io integer underflow DoS via Multipart MIME Body parser8.7CNA v4.00.8%2026-07-27Exploit code
CVE-2026-66477Gillion WordPress theme broken access control5.3CNA v3.10.3%2026-07-27Fix
CVE-2026-66476Easy Digital Downloads WordPress plugin arbitrary file deletion4.9CNA v3.10.5%2026-07-27Fix
CVE-2026-66475Checkout Field Editor for WooCommerce Checkout Manager WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-07-27Fix
CVE-2026-66474Insert Headers and Footers Code HT Script WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-07-27Fix
CVE-2026-66473Xendit Payment WordPress plugin broken access control7.5CNA v3.10.3%2026-07-27Fix
CVE-2026-66448Gallery PhotoBlocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-27Fix
CVE-2026-66445Open User Map WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-27Fix
CVE-2026-66442YayPricing WordPress plugin broken access control5.4CNA v3.10.3%2026-07-27Fix
CVE-2026-66438Exclusive Addons Elementor WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-07-27Fix
CVE-2026-66437Feedzy WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2026-07-27Fix
CVE-2026-66434Photonic Gallery and Lightbox for Flickr, SmugMug and Others WordPress plugin cross-site scripting6.5CNA v3.10.2%2026-07-27Fix
CVE-2026-66433Location Weather WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-27Fix
CVE-2026-66428WP Google Review Slider WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-07-27Fix
CVE-2026-66427WP Google Review Slider WordPress plugin SQL injection7.6CNA v3.10.4%2026-07-27Fix
CVE-2026-66412Leantime all versions prior to and broken access control via tickets.getMilestone JSON-RPC7.1CNA v4.00.4%2026-07-27Fix
CVE-2026-66399phpMyFAQ privilege escalation via Group Membership8.5CNA v4.00.4%2026-07-27Fix
CVE-2026-66398phpMyFAQ remote code execution via Configuration API9.4CNA v4.00.3%2026-07-27Fix
CVE-2026-66397phpMyFAQ path traversal via category image deletion8.6CNA v4.00.5%2026-07-27Fix
CVE-2026-66396SiYuan stored XSS to RCE via title-img IAL9.3CNA v4.00.5%2026-07-27Fix
CVE-2026-66395SiYuan Desktop reflected XSS to RCE via siyuan protocol9.4CNA v4.00.6%2026-07-27Fix
CVE-2026-66394SiYuan Stored and reflected XSS via SVG Sanitizer Bypass9.3CNA v4.00.3%2026-07-27Fix
CVE-2026-66391Apache Wicket: Leaked and missing CSP headers6.5CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-66390Apache Wicket: Crafted Link URL strings can break out of the JavaScript sequence6.1CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-66053Apache Thrift: Python TSSLSocket Hostname Matcher Import5.9CNA v3.10.3%2026-07-27Fix
CVE-2026-66050NitroShare Desktop path traversal via LAN File Transfer Server8.7CNA v4.01.1%2026-07-27
CVE-2026-66031Creativeitem Ekushey Project Manager CRM Reply Ticket field stored cross-site scripting5.1CNA v4.00.3%2026-07-27
CVE-2026-66030Creativeitem Ekushey Project Manager CRM Ticket Title field stored cross-site scripting5.1CNA v4.00.3%2026-07-27
CVE-2026-66029Ekushey Project Manager CRM stored XSS via Client Name field5.1CNA v4.00.3%2026-07-27
CVE-2026-66028Ekushey Project Manager CRM Missing Uniqueness Constraint via Client Email7.1CNA v4.00.6%2026-07-27
CVE-2026-66018JFrog Artifactory build environment properties exposure6.5CNA v3.10.4%2026-07-27Fix
CVE-2026-66015JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation7.2CNA v3.10.6%2026-07-27Fix
CVE-2026-66014Potential authentication bypass leading to privilege escalation in Artifactory8.8CNA v3.10.6%2026-07-27Fix
CVE-2026-65925Server-side request forgery (SSRF) via JFrog Artifactory Cargo remote repository6.5CNA v3.10.4%2026-07-27Fix
CVE-2026-65924jfrog artifactory server-side request forgery (SSRF) via Terraform Remote repository6.5CNA v3.10.4%2026-07-27Fix
CVE-2026-65923Potential server-side request forgery in Artifactory Ansible repository handling6.8CNA v3.10.3%2026-07-27Fix
CVE-2026-65922Potential unauthorized modification of Artifactory internal metadata7.1CNA v3.10.3%2026-07-27Fix
CVE-2026-65921jfrog artifactory potential path traversal leading to unauthorized file writes8.8CNA v3.10.6%2026-07-27Fix
CVE-2026-65894Improper authentication vulnerability in CP Plus EZ-P21 IP Camera8.7CNA v4.00.7%2026-07-27Fix
CVE-2026-65893Arbitrary code execution vulnerability in CP Plus EZ-P21 IP Camera7.0CNA v4.00.2%2026-07-27Fix
CVE-2026-65879JoomShaper SP Page Builder mail relay hard-coded credentials9.8CISA ADP v3.10.5%2026-07-27
CVE-2026-65878Joomla extension joomshaper.com authenticated arbitrary file delete in SP Page Builder8.3CNA v4.00.5%2026-07-27
CVE-2026-65877Joomla extension joomshaper.com authenticated SQL injection in SP Page Builder8.2CNA v4.00.4%2026-07-27
CVE-2026-65876Joomla extension joomshaper.com unauthenticated SQL injection in SP Page Builder9.2CNA v4.00.4%2026-07-27
CVE-2026-65766Joomla extension joomshaper.com unauthenticated SQL injection in SP Page Builder9.2CNA v4.00.4%2026-07-27
CVE-2026-65765Joomla extension phoca.cz path traversal vulnerability in Phoca Commander6.9CNA v4.00.5%2026-07-27
CVE-2026-65764Joomla extension phoca.cz reflected XSS vulnerability in Phoca Maps5.1CNA v4.00.4%2026-07-27
CVE-2026-65618JFrog Artifactory Pub, Terraform and Docker package handling server-side request forgery6.5CNA v3.10.4%2026-07-27Fix
CVE-2026-65617Potential remote code execution on an Artifactory package service container8.8CNA v3.10.6%2026-07-27Fix
CVE-2026-65616Potential privilege escalation to JFrog administrator privileges8.8CNA v3.10.4%2026-07-27Exploit codeFix
CVE-2026-65568Visual Composer Website Builder WordPress plugin broken access control5.0CNA v3.10.3%2026-07-27Fix
CVE-2026-65567Event Tickets WordPress plugin broken access control5.3CNA v3.10.3%2026-07-27Fix
CVE-2026-65564MapPress Maps for WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-07-27Fix
CVE-2026-65563Orbit Fox by ThemeIsle WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-07-27Fix
CVE-2026-65562BetterDocs WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-27Fix
CVE-2026-65561WordPress Social Login and Register plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-27Fix
CVE-2026-65558AffiliateX WordPress plugin server side request forgery (SSRF)5.4CNA v3.10.2%2026-07-27Fix
CVE-2026-65557Abandoned Cart Lite for WooCommerce WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-07-27Fix
CVE-2026-65448Anti Spam and list cleaner AcyChecker WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-27Fix
CVE-2026-65447Contest Gallery WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-27Fix
CVE-2026-65446Kali Forms WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-27Fix
CVE-2026-65445Ad Invalid Click Protector (AICP) WordPress plugin broken access control6.5CNA v3.10.3%2026-07-27Fix
CVE-2026-65443BackWPup WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-27Fix
CVE-2026-65442FormCraft WordPress plugin server side request forgery (SSRF)7.2CNA v3.10.6%2026-07-27Reported exploitedNucleiFix
CVE-2026-65441GiveWP WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-27Fix
CVE-2026-65440GetGenie WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-27Fix
CVE-2026-65439Ultimate Addons for Contact Form 7 WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-27Fix
CVE-2026-65438Message Filter for Contact Form 7 WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-27Fix
CVE-2026-65437Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-27Fix
CVE-2026-65436Kirki WordPress plugin arbitrary file deletion6.8CNA v3.10.5%2026-07-27Fix
CVE-2026-65435Thrive Leads Version WordPress plugin broken access control6.5CNA v3.10.3%2026-07-27Fix
CVE-2026-65434ЮKassa для WooCommerce WordPress plugin sensitive data exposure6.5CNA v3.10.4%2026-07-27Fix
CVE-2026-65433RT Mega Menu Mega Menu Builder for Elementor and Gutenberg WordPress plugin broken access control6.5CNA v3.10.3%2026-07-27Fix
CVE-2026-64783Apple Safari use-after-free8.8CISA ADP v3.10.4%2026-07-27Fix
CVE-2026-64776Apple macOS out-of-bounds read5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64775Apple macOS improper initialization9.8CISA ADP v3.10.7%2026-07-27Fix
CVE-2026-64774Apple macOS integer overflow9.8CISA ADP v3.10.8%2026-07-27Fix
CVE-2026-64772Apple macOS out-of-bounds write9.8CISA ADP v3.10.8%2026-07-27Fix
CVE-2026-64771Apple macOS buffer overflow9.8CISA ADP v3.10.8%2026-07-27Fix
CVE-2026-64770Apple macOS out-of-bounds write9.8CISA ADP v3.10.8%2026-07-27Fix
CVE-2026-64769Apple macOS out-of-bounds write9.8CISA ADP v3.10.8%2026-07-27Fix
CVE-2026-64768Apple macOS out-of-bounds read8.1CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-64767Apple macOS buffer overflow9.8CISA ADP v3.10.8%2026-07-27Fix
CVE-2026-64766Apple macOS integer overflow7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64765Apple macOS integer overflow7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64764Apple macOS out-of-bounds write7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64763Apple macOS out-of-bounds write7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64762Apple macOS out-of-bounds read9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-64758Apple macOS memory corruption7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64757Apple Safari memory corruption8.8CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-64755Apple iOS and iPadOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64754Apple macOS out-of-bounds write5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64751Apple macOS use-after-free9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-64749Apple macOS denial of service7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64747Apple macOS buffer overflow7.8CISA ADP v3.10.2%2026-07-27Exploit codeFix
CVE-2026-64746Apple macOS missing authorization9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-64745Apple macOS improper authentication2.4CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64744Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64743Apple macOS improper authorization6.5CISA ADP v3.10.4%2026-07-27Fix
CVE-2026-64742Apple tvOS cleartext transmission of sensitive information6.5CISA ADP v3.10.3%2026-07-27Fix
CVE-2026-64741Apple tvOS insecure permissions5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64740Apple macOS path traversal9.3CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64739Apple macOS out-of-bounds write8.8CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-64738Apple macOS insecure permissions9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-64737Apple macOS sandbox escape8.2CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64735Apple macOS UI misrepresentation6.5CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-64734Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64733Apple macOS information disclosure9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-64732Apple macOS information disclosure4.6CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64731Apple macOS path traversal9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-64730Apple Safari UI misrepresentation6.5CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-64729Apple macOS use-after-free9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-64728Apple Safari insecure permissions6.5CISA ADP v3.10.4%2026-07-27Fix
CVE-2026-64727Apple macOS type confusion9.8CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-64726Apple macOS memory corruption9.8CISA ADP v3.10.7%2026-07-27Fix
CVE-2026-64725Apple macOS out-of-bounds write7.1CISA ADP v3.10.2%2026-07-27Exploit codeFix
CVE-2026-64724Apple macOS denial of service5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64723Apple macOS logic flaw5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64722Apple macOS buffer overflow5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64721Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64720Apple macOS race condition9.8CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-64719Apple Safari out-of-bounds read8.1CISA ADP v3.10.4%2026-07-27Fix
CVE-2026-64718Apple Safari use-after-free5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64716Apple macOS memory corruption7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64713Apple Safari observable discrepancy8.1CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-64711Apple macOS improper authorization5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64710Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64709Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64708Apple macOS Gatekeeper security feature bypass5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64707Apple macOS incorrect permission assignment5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64704Apple macOS type confusion9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-64703Apple macOS use-after-free9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-64702Apple macOS sandbox escape9.8CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-64700Apple macOS use-after-free9.8CISA ADP v3.10.7%2026-07-27Fix
CVE-2026-64699Apple macOS uninitialized variable use5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64698Apple macOS denial of service9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-64697Apple macOS denial of service9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-64696Apple macOS denial of service9.8CISA ADP v3.10.7%2026-07-27Fix
CVE-2026-64695Apple macOS denial of service9.8CISA ADP v3.10.7%2026-07-27Fix
CVE-2026-64694Apple macOS integer overflow9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-64693Apple macOS type confusion5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64692Apple macOS out-of-bounds read7.1CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-64691Apple macOS buffer overflow9.8CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-64649Next.js: Server-side request forgery in Server Actions on Custom Servers8.3CNA v4.00.5%2026-07-27Fix
CVE-2026-64648Next.js: Response Body Cache Confusion for Requests Containing Bodies6.0CNA v4.00.3%2026-07-27Fix
CVE-2026-64647Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies6.3CNA v4.00.3%2026-07-27Fix
CVE-2026-64646Next.js: Unbounded Server action payload in Edge runtime6.3CNA v4.00.5%2026-07-27Fix
CVE-2026-64645Next.js: Server-side request forgery in rewrites via attacker-controlled destination hostname8.3CNA v4.00.4%2026-07-27Fix
CVE-2026-64644Next.js: Denial of service in the Image Optimization API using SVGs6.3CNA v4.00.7%2026-07-27Fix
CVE-2026-64643Next.js: Unauthenticated Disclosure of Internal Server function endpoints6.3CNA v4.00.5%2026-07-27Fix
CVE-2026-64642Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale8.3CNA v4.00.6%2026-07-27Fix
CVE-2026-64641Next.js: Denial of service in App Router using Server Actions8.2CNA v4.00.9%2026-07-27Fix
CVE-2026-64555Linux kernel KVM arm64 nested virtualization MOPS handling vulnerability8.8CNA v3.10.1%2026-07-27Fix
CVE-2026-64554Linux kernel bridge IPv6 fragmentation use-after-free8.8CNA v3.10.3%2026-07-27Fix
CVE-2026-64553Linux kernel psample netlink attribute padding information disclosure–0.2%2026-07-27Fix
CVE-2026-64552Linux kernel virtio-net receive buffer handling out-of-bounds write8.4CNA v3.10.1%2026-07-27Fix
CVE-2026-64551Linux kernel SCTP STALE_COOKIE handling vulnerability9.1CNA v3.10.5%2026-07-27Fix
CVE-2026-64550Linux kernel Qualcomm RmNet MAP frame parser vulnerability7.3CNA v3.10.2%2026-07-27Fix
CVE-2026-64549Linux kernel Bluetooth bpa10x driver out-of-bounds read–0.2%2026-07-27Fix
CVE-2026-64548Linux kernel BPF sockmap message push vulnerability8.4CNA v3.10.1%2026-07-27Fix
CVE-2026-64547Linux kernel net1080 USB driver vulnerability8.1CNA v3.10.3%2026-07-27Fix
CVE-2026-64546Linux kernel DRM EDID tiled display parsing out-of-bounds read7.1CNA v3.10.1%2026-07-27Fix
CVE-2026-64545Linux kernel XDP master redirect null pointer dereference7.5CNA v3.10.6%2026-07-27Fix
CVE-2026-64544Linux kernel PE file signature verification integer underflow–0.2%2026-07-27Fix
CVE-2026-64543Linux kernel TIPC discoverer use-after-free7.8CNA v3.10.1%2026-07-27Fix
CVE-2026-64542Linux kernel ipv6 ndisc null pointer dereference–0.2%2026-07-27Fix
CVE-2026-64541Linux kernel SMC subsystem use-after-free9.8CNA v3.10.6%2026-07-27Fix
CVE-2026-64540Linux kernel GL620A USB network driver out-of-bounds read8.1CNA v3.10.3%2026-07-27Fix
CVE-2026-64539Linux kernel Bluetooth EIR advertising data out-of-bounds write7.8CNA v3.10.1%2026-07-27Fix
CVE-2026-64538Linux kernel IPv6 route MTU update null pointer dereference–0.2%2026-07-27Fix
CVE-2026-64537Linux kernel bridge CFM CCM interval configuration vulnerability–0.2%2026-07-27Fix
CVE-2026-64536Linux kernel rtl8723bs Wi-Fi driver out-of-bounds read8.1CNA v3.10.2%2026-07-27Fix
CVE-2026-64535Linux kernel NVMe over TCP target digest mismatch handling use-after-free9.8CNA v3.10.5%2026-07-27Fix
CVE-2026-64534Linux kernel nvmet-tcp driver deadlock9.8CNA v3.10.3%2026-07-27Fix
CVE-2026-64533Linux kernel NTFS3 restart table replay vulnerability7.8CNA v3.10.1%2026-07-27Fix
CVE-2026-64532Linux kernel ntfs3 file system vulnerability7.8CNA v3.10.1%2026-07-27Fix
CVE-2026-64531Linux kernel Open vSwitch flow action encoding vulnerability7.8CNA v3.10.4%2026-07-27Exploit codeFix
CVE-2026-63077JetBrains TeamCity deserialization of untrusted data9.8CNA v3.189.6%2026-07-27KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2026-61957miniorange otp verification WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-27Fix
CVE-2026-61953Simple Link Directory Pro WordPress plugin server side request forgery (SSRF)7.2CNA v3.10.3%2026-07-27Fix
CVE-2026-61511vBulletin eval injection RCE via vb5/template/runtime.php9.3CNA v4.05.6%2026-07-27Reported exploitedNucleiEmerging ThreatsExploit code
CVE-2026-59730Astro @astrojs/node trailing-slash redirect handler open redirect2.1CNA v4.00.5%2026-07-27Fix
CVE-2026-59729Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for)5.1CNA v4.00.5%2026-07-27Fix
CVE-2026-59728withastro astro @astrojs/rss: XML injection via Unescaped RSS Feed fields4.3CNA v3.10.4%2026-07-27Fix
CVE-2026-59727Astro: Cross-site scripting via unescaped transition:* directive values on hydrated islands2.1CNA v4.00.5%2026-07-27Fix
CVE-2026-59690Progress Software LoadMaster missing authorization8.0CNA v3.10.3%2026-07-27Fix
CVE-2026-59689Progress Software LoadMaster An incorrect authorization8.0CNA v3.10.3%2026-07-27Fix
CVE-2026-59688Progress Software LoadMaster An OS command injection8.4CNA v3.11.7%2026-07-27Fix
CVE-2026-59687Progress Software LoadMaster An OS command injection8.4CNA v3.11.7%2026-07-27Fix
CVE-2026-59686Progress Software LoadMaster An OS command injection8.4CNA v3.11.7%2026-07-27Fix
CVE-2026-59560FundEngine WordPress plugin broken access control6.5CNA v3.10.4%2026-07-27Fix
CVE-2026-59559RT Mega Menu Mega Menu Builder for Elementor and Gutenberg WordPress plugin cross-site scripting6.5CNA v3.10.2%2026-07-27Fix
CVE-2026-59558Booking Calendar WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-27Fix
CVE-2026-59557Events Made Easy WordPress plugin broken access control6.5CNA v3.10.3%2026-07-27Fix
CVE-2026-59556Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-27Fix
CVE-2026-59553Product Feed Manager WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-27Reported exploitedFix
CVE-2026-595523D Flipbook PDF Viewer and Embedder WordPress plugin server side request forgery (SSRF)7.2CNA v3.10.3%2026-07-27Fix
CVE-2026-59551rtMedia for WordPress, BuddyPress and bbPress plugin SQL injection8.5CNA v3.10.4%2026-07-27Fix
CVE-2026-59550AWP Classifieds WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-27Fix
CVE-2026-59549rtMedia for WordPress, BuddyPress and bbPress plugin SQL injection9.3CNA v3.10.4%2026-07-27Fix
CVE-2026-59548Byteflows Travel and Hotel Booking WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-07-27Fix
CVE-2026-59546Hide My WP Ghost WordPress plugin 2FA bypass vulnerability7.4CNA v3.10.4%2026-07-27Fix
CVE-2026-59539Paid Member Subscriptions WordPress plugin insecure direct object references (IDOR)7.5CNA v3.10.3%2026-07-27Fix
CVE-2026-59538GamiPress WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-27Fix
CVE-2026-59537Sender Newsletter, SMS and Email Marketing Automation for WooCommerce WordPress plugin SQL injection7.6CNA v3.10.4%2026-07-27Fix
CVE-2026-59536CoCart Headless ecommerce WordPress plugin broken access control7.5CNA v3.10.3%2026-07-27Fix
CVE-2026-59535Thrive Product Manager WordPress plugin broken access control7.3CNA v3.10.3%2026-07-27Fix
CVE-2026-59534Post My CF7 Form WordPress plugin broken access control7.5CNA v3.10.3%2026-07-27Fix
CVE-2026-59533Relevanssi Light WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-27Fix
CVE-2026-59532Booking and Rental Manager WordPress plugin Price manipulation vulnerability7.5CNA v3.10.4%2026-07-27Fix
CVE-2026-59531Falcon WordPress Optimizations and Tweaks plugin Unknown vulnerability7.5CNA v3.10.5%2026-07-27Fix
CVE-2026-59530Stripe For WooCommerce WordPress plugin broken access control7.5CNA v3.10.3%2026-07-27Fix
CVE-2026-59529Ebook Store WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-07-27Fix
CVE-2026-59528ShipTime: Discounted Shipping Rates WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-07-27Fix
CVE-2026-59527MapSVG WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-27Fix
CVE-2026-59251Erlang OTP denial of service via exponential certificate policy tree growth in path validation8.7CNA v4.00.3%2026-07-27Fix
CVE-2026-59250Erlang OTP megaco flex scanner buffer overflow via oversized property parm name8.3CNA v4.00.8%2026-07-27Fix
CVE-2026-59240IDOR in Prospero Flow CRM allows deletion of other users' notifications6.9CNA v4.00.5%2026-07-27Fix
CVE-2026-59239Stored XSS in Prospero Flow CRM email body allows administrator account takeover8.6CNA v4.00.7%2026-07-27Fix
CVE-2026-58662Apache Thrift: C++ THeaderTransport::readString info-header length bounds bypass8.7CNA v4.01.1%2026-07-27Fix
CVE-2026-58389Apache Thrift: Rust binary protocol non-strict path missing string size limit8.7CNA v4.01.0%2026-07-27Fix
CVE-2026-58227Erlang OTP TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain8.7CNA v4.00.4%2026-07-27Fix
CVE-2026-58023Apache Thrift: C_glib heap out-of-bounds read in transport leftover-bytes path6.9CNA v4.01.0%2026-07-27Fix
CVE-2026-57917Improper restriction of XML external entity reference in proCertum SmartSign4.8CNA v4.00.2%2026-07-27Fix
CVE-2026-57916Arbitrary Path Execution via CPS URI in proCertum SmartSign4.6CNA v4.00.1%2026-07-27Fix
CVE-2026-56748Authenticated RCE via symlink following in Cribl Stream Pack Git Import8.7CNA v4.00.9%2026-07-27Fix
CVE-2026-56747Code injection in JSON Pointer Processing component in Cribl Stream8.7CNA v4.00.7%2026-07-27Fix
CVE-2026-56538HCL Connections is vulnerable to information disclosure3.5CNA v3.10.3%2026-07-27Fix
CVE-2026-56537HCL Connections is vulnerable to information disclosure3.5CNA v3.10.3%2026-07-27Fix
CVE-2026-55971Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform9.3CNA v4.01.0%2026-07-27Fix
CVE-2026-55970Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat6.9CNA v4.00.8%2026-07-27Fix
CVE-2026-55969Apache Thrift integer overflow8.7CNA v4.01.0%2026-07-27Fix
CVE-2026-55968Apache Thrift: Node.js quadratic-time DoS in server receive transports8.7CNA v4.01.0%2026-07-27Fix
CVE-2026-55953Erlang/OTP TLS client authentication bypass9.1CNA v4.00.2%2026-07-27Fix
CVE-2026-55737Erlang/OTP external term format decoder out-of-bounds write5.1CNA v4.00.3%2026-07-27Fix
CVE-2026-55685remix-run react-router React Router: Unauthenticated denial of service8.7CNA v4.00.7%2026-07-27Fix
CVE-2026-55579Pheditor hard-coded credentials9.8CNA v3.10.8%2026-07-27Exploit codeFix
CVE-2026-55578Pheditor: Incomplete command sanitization in terminal feature allows RCE8.8CNA v3.10.7%2026-07-27Fix
CVE-2026-54890Erlang OTP BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding8.2CNA v4.00.4%2026-07-27Fix
CVE-2026-54540Authenticated terminal command whitelist bypass in Pheditor8.8CNA v3.10.7%2026-07-27Fix
CVE-2026-54272ip-address IPv6 address classification improper input validation6.9CNA v4.00.4%2026-07-27Fix
CVE-2026-53669React Router Link and useNavigate open redirect5.1CNA v4.00.3%2026-07-27Fix
CVE-2026-53668remix-run react-router React Router: Open redirect can lead to XSS6.9CNA v3.10.3%2026-07-27Fix
CVE-2026-53667remix-run react-router React Router: RSCErrorHandler Missing Protocol Validation (XSS)6.9CNA v3.10.4%2026-07-27Fix
CVE-2026-53666remix-run react-router React Router: Arbitrary Constructor injection6.1CNA v3.10.4%2026-07-27Fix
CVE-2026-51565Milk admin Docs controller cross-site scripting6.1CISA ADP v3.10.4%2026-07-27
CVE-2026-51564Milk admin open redirect4.9CISA ADP v3.10.7%2026-07-27
CVE-2026-51078Dede CMS file_manage_control.php information disclosure7.5CISA ADP v3.10.5%2026-07-27
CVE-2026-51077Dede CMS v.5.7.118 SQL injection7.5CISA ADP v3.10.5%2026-07-27
CVE-2026-49158Apache Thrift: Ruby THeaderTransport ZLIB decompression bomb7.5CNA v3.11.0%2026-07-27Fix
CVE-2026-48586Apache Thrift decompression bomb8.7CNA v4.01.0%2026-07-27Fix
CVE-2026-48145Apache Thrift: C++ TSSLSocket matchName RFC 6125 Wildcard Bypass8.2CNA v4.00.4%2026-07-27Fix
CVE-2026-48144Apache Thrift: C_glib TLS client missing hostname verification9.1CNA v4.00.4%2026-07-27Fix
CVE-2026-48052Papra: Cross-organization tag deletion and modification via authenticated cross-tenant request5.4CNA v3.10.4%2026-07-27Fix
CVE-2026-48051Papra: SSRF via HTTP redirect bypass in webhook delivery3.5CNA v3.10.3%2026-07-27Fix
CVE-2026-48030Pheditor: OS command injection in terminal handler via unsanitized dir parameter9.9CNA v3.17.5%2026-07-27NucleiFix
CVE-2026-47078Erlang OTP relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass4.8CNA v4.00.1%2026-07-27Fix
CVE-2026-45623PostCSS: Arbitrary file read and information disclosure7.5CNA v3.10.6%2026-07-27Fix
CVE-2026-45112Apache Thrift: Unbounded Read leading to denial of service6.9CNA v4.01.0%2026-07-27Fix
CVE-2026-43871Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit8.7CNA v4.01.0%2026-07-27Fix
CVE-2026-43822Apple macOS use-after-free9.8CISA ADP v3.10.7%2026-07-27Fix
CVE-2026-43821Apple Safari improper access control6.5CISA ADP v3.10.4%2026-07-27Fix
CVE-2026-43819Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43818Apple macOS integer overflow8.8CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-43817Apple macOS out-of-bounds read5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43816Apple macOS out-of-bounds write5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43814Apple macOS use-after-free9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-43813Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS improper input validation7.1CISA ADP v3.10.2%2026-07-27Exploit codeFix
CVE-2026-43812Apple macOS use-after-free9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-43811Apple iOS and iPadOS race condition4.7CISA ADP v3.10.1%2026-07-27Fix
CVE-2026-43810Apple macOS use-after-free9.8CISA ADP v3.10.8%2026-07-27Fix
CVE-2026-43809Apple macOS out-of-bounds read9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-43807Apple macOS buffer overflow9.8CISA ADP v3.10.7%2026-07-27Fix
CVE-2026-43806Apple macOS denial of service5.5CISA ADP v3.10.1%2026-07-27Fix
CVE-2026-43805Apple macOS race condition9.8CISA ADP v3.10.5%2026-07-27Exploit codeFix
CVE-2026-43804Apple Safari denial of service6.5CISA ADP v3.10.4%2026-07-27Fix
CVE-2026-43803Apple macOS out-of-bounds write9.8CISA ADP v3.10.8%2026-07-27Fix
CVE-2026-43802Apple macOS out-of-bounds write9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-43801Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43800Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43799Apple macOS use-after-free9.8CISA ADP v3.10.7%2026-07-27Fix
CVE-2026-43797Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43796Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43793Apple macOS denial of service9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-43792Apple Safari improper authorization6.5CISA ADP v3.10.3%2026-07-27Fix
CVE-2026-43782Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43781Apple macOS race condition4.7CISA ADP v3.10.1%2026-07-27Fix
CVE-2026-43780Apple macOS integer overflow7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43779Apple macOS logic flaw9.8CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-43778Apple macOS use-after-free9.8CISA ADP v3.10.7%2026-07-27Fix
CVE-2026-43777Apple macOS denial of service7.5CISA ADP v3.10.7%2026-07-27Fix
CVE-2026-43776Apple macOS buffer overflow7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43775Apple macOS improper authorization5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43774Apple macOS out-of-bounds write5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43773Apple macOS out-of-bounds read9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-43772Apple macOS path traversal8.2CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43771Apple macOS stack-based buffer overflow7.1CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43770Apple macOS race condition4.7CISA ADP v3.10.1%2026-07-27Fix
CVE-2026-43769Apple macOS integer overflow9.8CISA ADP v3.10.7%2026-07-27Fix
CVE-2026-43768Apple macOS denial of service5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43767Apple macOS out-of-bounds read5.0CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43766Apple macOS improper authentication4.6CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43765Apple macOS link following5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43764Apple macOS integer overflow9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-43763Apple macOS insecure permissions5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43760Apple macOS improper access control8.6CISA ADP v3.10.4%2026-07-27Fix
CVE-2026-43759Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43758Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43757Apple macOS out-of-bounds read9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-43756Apple macOS improper authorization5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43755Apple macOS race condition7.0CISA ADP v3.10.1%2026-07-27Fix
CVE-2026-43754Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43753Apple macOS out-of-bounds read4.6CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43750Apple macOS buffer overflow9.8CISA ADP v3.10.8%2026-07-27Fix
CVE-2026-43749Apple macOS path traversal7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43748Apple macOS out-of-bounds write9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-43747Apple macOS out-of-bounds read7.1CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43744Apple macOS out-of-bounds write5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43739Apple macOS out-of-bounds write5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43738Apple macOS out-of-bounds read5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43733Apple macOS memory corruption7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43730Apple macOS insecure permissions9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-43729Apple macOS memory corruption7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43728Apple macOS race condition7.5CISA ADP v3.10.3%2026-07-27Fix
CVE-2026-43723Apple macOS path traversal7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43714Apple macOS improper input validation5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43711Apple macOS memory corruption7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43710Apple macOS denial of service9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-43698Apple macOS argument injection7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43694Apple macOS denial of service9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-43693Apple macOS race condition7.0CISA ADP v3.10.1%2026-07-27Fix
CVE-2026-43682Apple macOS denial of service9.8CISA ADP v3.10.7%2026-07-27Exploit codeFix
CVE-2026-43681Apple macOS buffer overflow7.1CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43673Apple macOS memory corruption7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43672Apple macOS incorrect authorization7.1CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-43665Apple macOS missing authorization5.5CISA ADP v3.10.1%2026-07-27Fix
CVE-2026-42792Epmd permanent DoS via EMFILE on accept(2) in Erts6.3CNA v4.00.4%2026-07-27Fix
CVE-2026-42017Privilege escalation via JFrog Worker event token exposure8.8CNA v3.10.5%2026-07-27Fix
CVE-2026-42016JFrog Artifactory incorrect authorization8.1CNA v3.18.6%2026-07-27KEVKCVFix
CVE-2026-41608Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport7.5v3.10.6%2026-07-27Fix
CVE-2026-40000Path traversal vulnerability in ZTE Blade A75 5G1.8CNA v3.10.2%2026-07-27Exploit code
CVE-2026-39877Apple macOS memory corruption7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-39875Apple macOS incorrect default permissions7.8CISA ADP v3.10.2%2026-07-27Exploit codeFix
CVE-2026-39874Apple macOS incorrect default permissions7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-39873Apple macOS denial of service9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-28982Apple macOS race condition9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-28981Apple macOS buffer overflow7.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-28973Apple macOS integer overflow8.6CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-28945Apple macOS insecure permissions7.1CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-28932Apple macOS memory corruption logic flaw5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-28931Apple macOS buffer overflow8.8CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-28928Apple macOS use-after-free9.8CISA ADP v3.10.6%2026-07-27Fix
CVE-2026-28926Apple macOS race condition7.0CISA ADP v3.10.1%2026-07-27Fix
CVE-2026-28912Apple macOS logic flaw7.8CISA ADP v3.10.2%2026-07-27Exploit codeFix
CVE-2026-28911Apple macOS memory corruption9.8CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-28900Apple macOS authentication bypass by spoofing5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-28896Apple macOS denial of service7.7CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-28849Apple macOS authentication bypass by spoofing5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-24252NVIDIA NeMo Framework OS command injection7.8CNA v3.11.5%2026-07-27Fix
CVE-2026-20672Apple macOS information disclosure5.5CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-17612Honeywell S35 Series 3M/5M/8M/PinHole Cameras Audit Log Exposure through unauthorized access6.9CNA v4.00.5%2026-07-27
CVE-2026-17574Null pointer dereference in HDF5 via Invalid Variable-Length Datatype Type Tag5.2CNA v4.00.1%2026-07-27Fix
CVE-2026-17573Double free in H5D__chunk_copy in HDF5 via a Crafted Chunk-Index Size field4.0CNA v4.00.2%2026-07-27Fix
CVE-2026-17572HDF5 SOHM List Index heap buffer overflow5.5CNA v4.00.1%2026-07-27Fix
CVE-2026-17570Devolutions Server PAM password history endpoints improper access control4.3CISA ADP v3.10.3%2026-07-27Fix
CVE-2026-17569Devolutions Server NetBox synchronizer improper access control4.3CISA ADP v3.10.3%2026-07-27Fix
CVE-2026-17568Devolutions Server role membership management endpoint improper access control8.8CISA ADP v3.10.4%2026-07-27Fix
CVE-2026-17552RRWO Plack::App::Prerender request URI rewriting server-side request forgery9.1CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-17534Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirects5.5CNA v3.10.2%2026-07-27Fix
CVE-2026-17531unitedbyai droidclaw Unsigned Scheduled Callback goals.ts authorization2.3CNA v4.00.3%2026-07-27
CVE-2026-17530AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization5.3CNA v4.00.4%2026-07-27
CVE-2026-17529AstrBotDevs AstrBot improper authorization5.3CNA v4.00.4%2026-07-27
CVE-2026-17527Red Hat OpenShift Virtualization containerized-data-importer insecure direct object reference7.7CNA v3.10.6%2026-07-27Fix
CVE-2026-17523Linux kernel can: Bcm: Switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet7.8CNA v3.10.1%2026-07-27Fix
CVE-2026-17514ZJONSSON node-unzipper extract.js Extract path traversal4.8CNA v4.00.2%2026-07-27
CVE-2026-17513ggml-org whisper.cpp ggml.c ggml_ftype_to_ggml_type assertion4.8CNA v4.00.2%2026-07-27
CVE-2026-17512ggml-org whisper.cpp log_mel_spectrogram out-of-bounds4.8CNA v4.00.2%2026-07-27
CVE-2026-17501ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursion6.9CNA v4.00.7%2026-07-27Fix
CVE-2026-17500ggml-org llama.cpp json-schema-to-grammar.cpp _visit_pattern null pointer dereference6.9CNA v4.00.7%2026-07-27
CVE-2026-17192VeloCloud Orchestrator Missing Input Validation SSRF6.3CNA v4.00.3%2026-07-27Fix
CVE-2026-17191VeloCloud Orchestrator Flow Metrics API SQL injection8.5CNA v4.00.4%2026-07-27Fix
CVE-2026-16812Arista VeloCloud Orchestrator On-Prem OS command injection10.0CNA v4.01.0%2026-07-27KEVFix
CVE-2026-16554Integer overflow leading to heap buffer overflow in cJSON7.8v3.10.3%2026-07-27
CVE-2026-16481Google MCP Toolbox for Databases cloud-healthcare-fhir-fetch-page tool server-side request forgery6.0CNA v4.00.2%2026-07-27
CVE-2026-15928XMLRPC-C cross-site scripting8.2CNA v4.00.3%2026-07-27Fix
CVE-2026-15003GNU Binutils linker XCOFF parser out-of-bounds read5.6CNA v3.10.2%2026-07-27Fix
CVE-2026-14856Stored cross-site scripting (XSS) in TastyIgniter Media Manager6.3CNA v4.00.4%2026-07-27Fix
CVE-2026-14837Lenze c430 SSH Enablement signature verification Bypass8.5CNA v4.00.1%2026-07-27Fix
CVE-2026-14827Calendar WordPress plugin Contributor+ stored XSS via event_link parameter6.8CISA ADP v3.10.4%2026-07-27Fix
CVE-2026-14820Quiz and Survey Master quiz login information disclosure5.3CISA ADP v3.10.4%2026-07-27Fix
CVE-2026-14568WP User Frontend WordPress plugin unauthenticated Author-less Attachment deletion6.5CISA ADP v3.10.3%2026-07-27Fix
CVE-2026-14289WP FacturaONE WordPress plugin unauthenticated remote code execution9.0CISA ADP v3.10.7%2026-07-27Fix
CVE-2026-14236Contact Form 7 PayPal and Stripe Add-on WordPress plugin open redirect4.7CISA ADP v3.10.3%2026-07-27Fix
CVE-2026-14235WordPress Download Manager plugin unauthorized Protected file download via Reusable download Key7.5CISA ADP v3.10.4%2026-07-27Fix
CVE-2026-14203Smart Manager WordPress plugin Contributor+ stored XSS via post Title4.8CISA ADP v3.10.2%2026-07-27Fix
CVE-2026-14190Sina Extension for Elementor WordPress plugin reflected XSS6.1CISA ADP v3.10.3%2026-07-27Fix
CVE-2026-14189WPBot AI ChatBot WordPress plugin Admin+ Second-order SQL injection via qc_bot_str_fields3.8CISA ADP v3.10.3%2026-07-27Fix
CVE-2026-13726Multiple Page Generator Plugin MPG WordPress plugin reflected XSS via mpg_shortcode7.1CISA ADP v3.10.3%2026-07-27Fix
CVE-2026-13714Realtyna WPL Real Estate Organic IDX file upload API arbitrary file upload9.8CISA ADP v3.10.8%2026-07-27Exploit codeFix
CVE-2026-13597QRcode Login for WeChat WordPress plugin unauthenticated account takeover9.1CISA ADP v3.10.5%2026-07-27
CVE-2026-13400Simply Schedule Appointments WordPress plugin unauthenticated stored XSS6.1CISA ADP v3.10.3%2026-07-27Fix
CVE-2026-13390The Events Calendar WordPress plugin unauthenticated Event Aggregator import Status manipulation5.3CISA ADP v3.10.3%2026-07-27Fix
CVE-2026-13332Masteriyo LMS user session termination denial of service9.1CISA ADP v3.10.4%2026-07-27Fix
CVE-2026-13152Custom Fields Account Registration For WooCommerce privilege escalation8.1CISA ADP v3.10.4%2026-07-27Fix
CVE-2026-12991Ghost Robotics Vision 60 network communications man-in-the-middle8.7CNA v4.00.2%2026-07-27
CVE-2026-12990Ghost Robotics Vision 60 mobile app session handling improper access control7.7CNA v4.00.2%2026-07-27
CVE-2026-12989Ghost Robotics Vision 60 mobile app missing authentication8.7CNA v4.00.3%2026-07-27
CVE-2026-12982Document Gallery WordPress plugin reflected XSS via dg_generate_gallery6.1CISA ADP v3.10.3%2026-07-27Fix
CVE-2026-12495Stack-based buffer overflow in the Mercusys MB115-4G5.3CNA v4.00.3%2026-07-27Fix
CVE-2026-12493Zaytech Clover Payment Gateway for WooCommerce improper authentication7.5CISA ADP v3.10.4%2026-07-27Fix
CVE-2026-12394MemberGlut WordPress plugin unauthenticated privilege escalation to Administrator9.8CISA ADP v3.12.1%2026-07-27NucleiFix
CVE-2026-12383Red Hat Ansible Automation Platform improper authentication7.5CNA v3.10.3%2026-07-27Fix
CVE-2026-12255MainWP Child for WordPress unauthenticated Administrator authentication bypass8.1CISA ADP v3.10.5%2026-07-27Fix
CVE-2026-12001Hard-coded credential vulnerability in multiple TP-Link Router Models5.2CNA v4.00.3%2026-07-27Fix
CVE-2026-10819Mattermost Server denial of service via Animated GIF Emoji upload6.5CNA v3.10.4%2026-07-27Fix
CVE-2026-10683Zephyr DesignWare I2C target driver denial of service2.4CNA v3.10.2%2026-07-27Fix
CVE-2026-10682Out-of-bounds write in Zephyr `log_filter_set` syscall verifier reachable from userspace6.6CNA v3.10.2%2026-07-27Fix
CVE-2026-10600Denial of service via unbounded document content extraction in Mattermost Server4.3CNA v3.10.4%2026-07-27Fix
CVE-2026-10082Advanced Ads Ad Manager and AdSense WordPress plugin stored XSS6.1CISA ADP v3.10.3%2026-07-27Fix
CVE-2026-9830BookingPress Appointment Booking Pro REST permission callback improper authentication8.2CISA ADP v3.10.4%2026-07-27Exploit codeFix
CVE-2026-64530Linux kernel RED qdisc traffic control queueing events vulnerability9.8CNA v3.10.5%2026-07-26Fix
CVE-2026-63720datamodel-code-generator code injection via Unvalidated customBasePath Schema field7.5CNA v4.00.7%2026-07-26Exploit codeFix
CVE-2026-57990Microsoft Edge (Chromium-based) information disclosure7.4CNA v3.10.9%2026-07-26Fix
CVE-2026-57989Microsoft Edge (Chromium-based) information disclosure7.4CNA v3.10.4%2026-07-26Fix
CVE-2026-57978Microsoft Edge (Chromium-based) spoofing5.4CNA v3.10.2%2026-07-26Fix
CVE-2026-17497NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python8.3CNA v3.10.7%2026-07-26Fix
CVE-2026-17496NoteGen chat preview XSS via unsanitized AI/skill HTML rendering8.1CNA v3.10.5%2026-07-26Fix
CVE-2026-17459perwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink5.3CNA v4.00.5%2026-07-26
CVE-2026-17458mf-yang openclaw-cn Browser Control HTTP API server-side request forgery5.3CNA v4.00.4%2026-07-26
CVE-2026-17457mf-yang openclaw-cn Scheme navigation-guard.ts assertBrowserNavigationAllowed information disclosure5.3CNA v4.00.4%2026-07-26
CVE-2026-17434nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization5.3CNA v4.00.4%2026-07-26
CVE-2026-17433nanocoai NanoClaw MCP Server Approval improper authorization4.8CNA v4.00.1%2026-07-26
CVE-2026-17432NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control2.3CNA v4.00.4%2026-07-26
CVE-2026-15962Fluent Forms Pro Add On Pack WordPress plugin PHP object injection to arbitrary user password Change8.8CNA v3.10.5%2026-07-26Fix
CVE-2026-66374nic Knot Resolver improper quantity validation8.1CNA v3.10.6%2026-07-25Exploit codeFix
CVE-2026-66373Redis XGROUP DELCONSUMER handling double free7.5CNA v3.10.9%2026-07-25Fix
CVE-2026-66013OpenRemote authentication bypass via Console Registration9.3CNA v4.00.7%2026-07-25Fix
CVE-2026-66012SiYuan Unauthenticated Administrator takeover via MCP10.0CNA v4.00.8%2026-07-25Fix
CVE-2026-66011ImageMagick memory leak via Invalid CLI options3.3NVD v3.10.1%2026-07-25Fix
CVE-2026-64529Linux kernel QAT character device IOCTL interface vulnerability7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64528Linux kernel Samsung serial driver deadlock–0.2%2026-07-25Fix
CVE-2026-64527Linux kernel Hyper-V DRM VMBus receive callback vulnerability–0.2%2026-07-25Fix
CVE-2026-64526Linux kernel ethtool tsconfig vulnerability–0.2%2026-07-25Fix
CVE-2026-64525Linux kernel XFRM policy namespace cleanup vulnerability–0.2%2026-07-25Fix
CVE-2026-64524Linux kernel Hyper-V DRM resolution parsing vulnerability7.7CNA v3.10.1%2026-07-25Fix
CVE-2026-64523Linux kernel handshake netlink socket handling vulnerability9.8CNA v3.10.7%2026-07-25Fix
CVE-2026-64522Linux kernel mlx5e eswitch IPsec SA handling integer underflow8.8CNA v3.10.5%2026-07-25Fix
CVE-2026-64521Linux kernel Amlogic A4 pin controller deadlock–0.2%2026-07-25Fix
CVE-2026-64520Linux kernel ARM FF-A partition info handling vulnerability8.4CNA v3.10.2%2026-07-25Fix
CVE-2026-64519Linux kernel NFSD denial of service–0.2%2026-07-25Fix
CVE-2026-64518Linux kernel TCP authentication option time-wait socket handling vulnerability–0.2%2026-07-25Fix
CVE-2026-64517Linux kernel Xe GSC buffer object error path double free–0.2%2026-07-25Fix
CVE-2026-64516Linux kernel amdgpu VCE 1 firmware loading vulnerability8.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64515Linux kernel mac80211 multi-link element defragmentation vulnerability8.3CNA v3.10.2%2026-07-25Fix
CVE-2026-64514Linux kernel userfaultfd write-protect handling vulnerability–0.2%2026-07-25Fix
CVE-2026-64513Linux kernel KVM x86 vulnerability–0.2%2026-07-25Fix
CVE-2026-64512Linux kernel ACPI CPPC register access vulnerability–0.2%2026-07-25Fix
CVE-2026-64511Linux kernel ACPI NFIT notify handler null pointer dereference–0.2%2026-07-25Fix
CVE-2026-64510Linux kernel ACPI NFIT driver use-after-free7.0CNA v3.10.1%2026-07-25Fix
CVE-2026-64509Linux kernel Rust block layer GenDisk allocation vulnerability–0.2%2026-07-25Fix
CVE-2026-64508Linux kernel BPF JIT memory reuse vulnerability–0.2%2026-07-25Fix
CVE-2026-64507Linux kernel x86 BPF JIT memory reuse vulnerability–0.2%2026-07-25Fix
CVE-2026-64506Linux kernel rtw89 Wi-Fi driver vulnerability–0.2%2026-07-25Fix
CVE-2026-64505Linux kernel RNDIS USB gadget function vulnerability–0.2%2026-07-25Fix
CVE-2026-64504Linux kernel BMC150 accelerometer driver vulnerability–0.2%2026-07-25Fix
CVE-2026-64503Linux kernel KXSD9 accelerometer driver vulnerability–0.2%2026-07-25Fix
CVE-2026-64502Linux kernel AD sigma-delta ADC driver vulnerability7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64501Linux kernel AD sigma-delta ADC driver vulnerability7.1CNA v3.10.2%2026-07-25Fix
CVE-2026-64500Linux kernel LPC32XX ADC driver vulnerability–0.2%2026-07-25Fix
CVE-2026-64499Linux kernel TI ADS1119 ADC driver vulnerability–0.2%2026-07-25Fix
CVE-2026-64498Linux kernel IIO hardware consumer buffer vulnerability–0.2%2026-07-25Fix
CVE-2026-64497Linux kernel SCD30 chemical sensor driver vulnerability–0.2%2026-07-25Fix
CVE-2026-64496Linux kernel IIO event FIFO race condition7.1CNA v3.10.1%2026-07-25Fix
CVE-2026-64495Linux kernel BMG160 gyroscope driver vulnerability–0.2%2026-07-25Fix
CVE-2026-64494Linux kernel GP2AP002 light sensor driver vulnerability–0.2%2026-07-25Fix
CVE-2026-64493Linux kernel MPL115 pressure sensor driver vulnerability–0.2%2026-07-25Fix
CVE-2026-64492Linux kernel tmp006 temperature sensor driver vulnerability–0.2%2026-07-25Fix
CVE-2026-64491Linux kernel US-144mkii USB audio driver use-after-free–0.2%2026-07-25Fix
CVE-2026-64490Linux kernel virtio-snd control handling vulnerability8.4CNA v3.10.2%2026-07-25Fix
CVE-2026-64489Linux kernel YMFPCI driver null pointer dereference–0.2%2026-07-25Fix
CVE-2026-64488Linux kernel ALSA aoa driver null pointer dereference–0.2%2026-07-25Fix
CVE-2026-64487Linux kernel Traktor Kontrol S4 input parser out-of-bounds read–0.2%2026-07-25Fix
CVE-2026-64486Linux kernel CMIPCI driver null pointer dereference–0.2%2026-07-25Fix
CVE-2026-64485Linux kernel compress offload core vulnerability7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64484Linux kernel ES1938 driver mixer null pointer dereference–0.2%2026-07-25Fix
CVE-2026-64483Linux kernel iSight FireWire audio driver vulnerability–0.2%2026-07-25Fix
CVE-2026-64482Linux kernel ALSA gus driver null pointer dereference–0.2%2026-07-25Fix
CVE-2026-64481Linux kernel ALSA cs35l41 driver vulnerability7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64480Linux kernel ice1712 driver controls null pointer dereference–0.2%2026-07-25Fix
CVE-2026-64479Linux kernel ALSA sequencer event pool vulnerability–0.2%2026-07-25Fix
CVE-2026-64478Linux kernel DualSense jack detection vulnerability–0.2%2026-07-25Fix
CVE-2026-64477Linux kernel resctrl CPU offlining vulnerability–0.2%2026-07-25Fix
CVE-2026-64476Linux kernel VFIO PCI power state handling vulnerability–0.2%2026-07-25Fix
CVE-2026-64475Linux kernel VFIO PCI VGA arbiter vulnerability8.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64474Linux kernel VFIO migration state machine denial of service–0.2%2026-07-25Fix
CVE-2026-64473Linux kernel VFIO device debugfs vulnerability–0.2%2026-07-25Fix
CVE-2026-64472Linux kernel VFIO mlx5 driver race condition–0.2%2026-07-25Fix
CVE-2026-64471Linux kernel btusb driver registration use-after-free–0.2%2026-07-25Fix
CVE-2026-64470Linux kernel btusb Marvell driver use-after-free–0.2%2026-07-25Fix
CVE-2026-64469Linux kernel Binder thread release use-after-free7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64468Linux kernel Binder transactions use-after-free7.8CNA v3.10.2%2026-07-25Exploit codeFix
CVE-2026-64467Linux kernel Rust Binder offsets array cleanup vulnerability8.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64466Linux kernel Rust Binder freeze listener memory leak–0.2%2026-07-25Fix
CVE-2026-64465Linux kernel xHCI stream teardown vulnerability–0.2%2026-07-25Fix
CVE-2026-64464Linux kernel xHCI sideband driver vulnerability–0.2%2026-07-25Fix
CVE-2026-64463Linux kernel RT1711H TCPCI driver vulnerability7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64462Linux kernel Altera PCIe driver vulnerability–0.2%2026-07-25Fix
CVE-2026-64461Linux kernel MediaTek PCIe driver memory leak–0.2%2026-07-25Fix
CVE-2026-64460Linux kernel VF Resizable BAR restore vulnerability7.0CNA v3.10.1%2026-07-25Fix
CVE-2026-64459Linux kernel TCP subsystem vulnerability9.8CNA v3.10.6%2026-07-25Fix
CVE-2026-64458Linux kernel DAMON hot score calculation divide-by-zero–0.2%2026-07-25Fix
CVE-2026-64457Linux kernel virtio PCI virtqueue lookup null pointer dereference–0.2%2026-07-25Fix
CVE-2026-64456Linux kernel virtio RNG driver vulnerability7.7CNA v3.10.1%2026-07-25Fix
CVE-2026-64455Linux kernel chaoskey device release use-after-free–0.2%2026-07-25Fix
CVE-2026-64454Linux kernel dwc3 USB gadget disconnect improper locking–0.2%2026-07-25Fix
CVE-2026-64453Linux kernel usbio client teardown use-after-free7.8v3.10.1%2026-07-25Fix
CVE-2026-64452Linux kernel 6LoWPAN NHC entry lookup use-after-free7.1CNA v3.10.2%2026-07-25Fix
CVE-2026-64451Linux kernel function tracer flag handling null pointer dereference5.5v3.10.1%2026-07-25Fix
CVE-2026-64450Linux kernel TIPC broadcast Gap ACK blocks out-of-bounds read9.1CNA v3.10.5%2026-07-25Fix
CVE-2026-64449Linux kernel VME user slave window read and write out-of-bounds write7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64448Linux kernel SMB2 message length validation out-of-bounds read8.2CNA v3.10.5%2026-07-25Fix
CVE-2026-64447Linux kernel IPU7 media driver device initialization double free7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64446Linux kernel rtl8723bs Wi-Fi driver WPA IE handling out-of-bounds write7.8v3.10.1%2026-07-25Fix
CVE-2026-64445Linux kernel rtl8723bs Wi-Fi driver WEP authentication out-of-bounds read8.8CNA v3.10.3%2026-07-25Fix
CVE-2026-64444Linux kernel rtl8723bs Wi-Fi driver association response parsing out-of-bounds read8.1CNA v3.10.3%2026-07-25Fix
CVE-2026-64443Linux kernel rtl8723bs Wi-Fi driver beacon parsing out-of-bounds read8.1CNA v3.10.3%2026-07-25Fix
CVE-2026-64442Linux kernel rtl8723bs Wi-Fi driver association request parsing out-of-bounds read8.1CNA v3.10.3%2026-07-25Fix
CVE-2026-64441Linux kernel rtl8723bs Wi-Fi driver IE parsing out-of-bounds read8.8CNA v3.10.3%2026-07-25Fix
CVE-2026-64440Linux kernel rtl8723bs driver out-of-bounds write8.1CNA v3.10.3%2026-07-25Fix
CVE-2026-64439Linux kernel krb5 AEAD encryption use-after-free9.8CNA v3.10.6%2026-07-25Fix
CVE-2026-64438Linux kernel QAT SR-IOV VF2PF interrupt handling use-after-free8.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64437Linux kernel ksmbd deferred file lock handling use-after-free8.8CNA v3.10.6%2026-07-25Fix
CVE-2026-64436Linux kernel af_key IPComp state handling out-of-bounds read7.1CNA v3.10.1%2026-07-25Fix
CVE-2026-64435Linux kernel audit queue length counter race condition8.2CNA v3.10.3%2026-07-25Fix
CVE-2026-64434Linux kernel Bluetooth L2CAP channel timeout use-after-free8.8CNA v3.10.3%2026-07-25Fix
CVE-2026-64433Linux kernel Bluetooth device management use-after-free7.8v3.10.1%2026-07-25Fix
CVE-2026-64432Linux kernel NTFS3 journal replay out-of-bounds write7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64431Linux kernel NTFS index block out-of-bounds write7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64430Linux kernel NTB endpoint function IRQ handling improper locking7.5CNA v3.10.7%2026-07-25Fix
CVE-2026-64429Linux kernel eic-sprd GPIO driver improper locking5.5v3.10.1%2026-07-25Fix
CVE-2026-64428Linux kernel SCH GPIO IRQ handling improper locking5.5v3.10.1%2026-07-25Fix
CVE-2026-64427Linux kernel Logitech DJ receiver report validation null pointer dereference5.5v3.10.1%2026-07-25Fix
CVE-2026-64426Linux kernel io_uring NOP file reference memory leak5.5v3.10.1%2026-07-25Fix
CVE-2026-64425Linux kernel io-wq worker exit handling vulnerability5.5NVD v3.10.1%2026-07-25Fix
CVE-2026-64424Linux kernel netpoll shutdown path use-after-free7.8v3.10.1%2026-07-25Fix
CVE-2026-64423Linux kernel IGMP multicast group hash table use-after-free7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64422Linux kernel TCP MTU probing integer overflow7.1CNA v3.10.1%2026-07-25Fix
CVE-2026-64421Linux kernel i.MX8 ISI media driver use-after-free7.8v3.10.1%2026-07-25Fix
CVE-2026-64420Linux kernel cros_ec driver probe use-after-free7.0CNA v3.10.1%2026-07-25Fix
CVE-2026-64419Linux kernel shrinker debugfs count handler improper locking5.5v3.10.1%2026-07-25Fix
CVE-2026-64418Linux kernel shrinker info teardown race condition7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64417Linux kernel shrinker debugfs interface null pointer dereference5.5v3.10.1%2026-07-25Fix
CVE-2026-64416Linux kernel swap cgroup lookup null pointer dereference5.5v3.10.1%2026-07-25Fix
CVE-2026-64415Linux kernel swap cluster reclaim denial of service5.5v3.10.1%2026-07-25Fix
CVE-2026-64414Linux kernel netfilter unreadable fragment handling vulnerability7.5CNA v3.10.6%2026-07-25Fix
CVE-2026-64413Linux kernel ebtables chainstack array vulnerability7.0CNA v3.10.1%2026-07-25Fix
CVE-2026-64412Linux kernel ebtables module name lookup vulnerability7.1CNA v3.10.1%2026-07-25Fix
CVE-2026-64411Linux kernel ebtables table name lookup out-of-bounds read7.1CNA v3.10.1%2026-07-25Fix
CVE-2026-64410Linux kernel netfilter flowtable hardware offload vulnerability9.8CNA v3.10.6%2026-07-25Fix
CVE-2026-64409Linux kernel btmtksdio Bluetooth driver infinite loop5.5v3.10.1%2026-07-25Fix
CVE-2026-64408Linux kernel BNEP network device registration vulnerability8.8CNA v3.10.3%2026-07-25Fix
CVE-2026-64407Linux kernel btnxpuart firmware download out-of-bounds read7.1v3.10.1%2026-07-25Fix
CVE-2026-64406Linux kernel Bluetooth socket accept queue use-after-free8.0CNA v3.10.3%2026-07-25Fix
CVE-2026-64405Linux kernel connection abort handling null pointer dereference5.5v3.10.1%2026-07-25Fix
CVE-2026-64404Linux kernel ISO connection sync handling null pointer dereference5.5v3.10.1%2026-07-25Fix
CVE-2026-64403Linux kernel L2CAP configuration option parsing out-of-bounds read7.1CNA v3.10.3%2026-07-25Fix
CVE-2026-64402Linux kernel Ultrasoc SMB coresight driver out-of-bounds write7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64401Linux kernel witness service notifications use-after-free7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64400Linux kernel caseless path lookup path traversal8.6CNA v3.10.6%2026-07-25Fix
CVE-2026-64399Linux kernel duplicate extents handling vulnerability9.8CNA v3.10.7%2026-07-25Fix
CVE-2026-64398Linux kernel zero data FSCTL handling vulnerability8.1CNA v3.10.7%2026-07-25Fix
CVE-2026-64397Linux kernel query directory handling use-after-free9.8CNA v3.10.7%2026-07-25Fix
CVE-2026-64396Linux kernel SMB2 lock cancellation use-after-free8.8CNA v3.10.6%2026-07-25Fix
CVE-2026-64395Linux kernel duplicate extents handling vulnerability7.5CNA v3.10.6%2026-07-25Fix
CVE-2026-64394Linux kernel SET_INFO security descriptor handling vulnerability8.8CNA v3.10.7%2026-07-25Fix
CVE-2026-64393Linux kernel SET_INFO request handling vulnerability9.1CNA v3.10.7%2026-07-25Fix
CVE-2026-64392Linux kernel delete-on-close handling vulnerability9.1CNA v3.10.5%2026-07-25Fix
CVE-2026-64391Linux kernel alternate data stream I/O vulnerability9.8CNA v3.10.5%2026-07-25Fix
CVE-2026-64390Linux kernel SMB3 multichannel byte-range locking vulnerability8.8CNA v3.10.5%2026-07-25Fix
CVE-2026-64389Linux kernel NTLMv2 session key handling improper authentication8.2CNA v3.10.5%2026-07-25Fix
CVE-2026-64388Linux kernel POSIX extensions attribute handling vulnerability7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64387Linux kernel SMB2 query directory replay handling double free9.8CNA v3.10.5%2026-07-25Fix
CVE-2026-64386Linux kernel SMB2 query info replay handling double free9.8CNA v3.10.5%2026-07-25Fix
CVE-2026-64385Linux kernel SMB2 ioctl replay handling double free9.8CNA v3.10.5%2026-07-25Fix
CVE-2026-64384Linux kernel SMB2 change notify replay handling double free9.8CNA v3.10.5%2026-07-25Fix
CVE-2026-64383Linux kernel SMB2 flush replay handling double free9.8CNA v3.10.5%2026-07-25Fix
CVE-2026-64382Linux kernel SMB2 open replay handling double free8.8CNA v3.10.4%2026-07-25Fix
CVE-2026-64381Linux kernel SMB client vulnerability7.8v3.10.1%2026-07-25Fix
CVE-2026-64380Linux kernel SMB client POSIX SID parsing vulnerability8.2CNA v3.10.4%2026-07-25Fix
CVE-2026-64379Linux kernel SMB client vulnerability7.1CNA v3.10.3%2026-07-25Fix
CVE-2026-64378Linux kernel cgroup writeback inode switching race condition7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64377Linux kernel qcom-cpufreq-hw driver double free7.8NVD v3.10.1%2026-07-25Fix
CVE-2026-64376Linux kernel firmware_loader vulnerability5.5v3.10.1%2026-07-25Fix
CVE-2026-64375Linux kernel procfs FD symlink access checks race condition7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64374Linux kernel real-time scheduler task migration improper locking7.5CNA v3.10.4%2026-07-25Fix
CVE-2026-64373Linux kernel cpufreq suspend and hotplug handling race condition4.7v3.10.1%2026-07-25Fix
CVE-2026-64372Linux kernel cpufreq PCC driver _OSC evaluation use-after-free7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64371Linux kernel procfs ptrace access checks vulnerability5.5NVD v3.10.1%2026-07-25Fix
CVE-2026-64370Linux kernel posix CPU timers vulnerability5.5NVD v3.10.1%2026-07-25Fix
CVE-2026-64369Linux kernel s390 unaligned access exception handling infinite loop5.5v3.10.1%2026-07-25Fix
CVE-2026-64368Linux kernel slab allocator zeroing vulnerability8.1CNA v3.10.4%2026-07-25Fix
CVE-2026-64367Linux kernel Goodix SPI touchscreen driver out-of-bounds write7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64366Linux kernel Wacom driver report queue out-of-bounds write8.8CNA v3.10.3%2026-07-25Fix
CVE-2026-64365Linux kernel LetsKetch tablet driver use-after-free7.8v3.10.1%2026-07-25Fix
CVE-2026-64364Linux kernel HID multitouch driver out-of-bounds read8.8CNA v3.10.4%2026-07-25Fix
CVE-2026-64363Linux kernel appleir HID driver use-after-free7.8v3.10.2%2026-07-25Fix
CVE-2026-64362Linux kernel lg-g15 HID driver use-after-free7.8v3.10.1%2026-07-25Fix
CVE-2026-64361Linux kernel hfsplus file system integer overflow7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64360Linux kernel hfs and hfsplus file systems vulnerability5.5v3.10.1%2026-07-25Fix
CVE-2026-64359Linux kernel nilfs2 CLEAN_SEGMENTS ioctl denial of service5.5v3.10.1%2026-07-25Fix
CVE-2026-64358Linux kernel mtk-jpeg driver null pointer dereference5.5v3.10.1%2026-07-25Fix
CVE-2026-64357Linux kernel XFS exchange-mappings reservation vulnerability5.5v3.10.1%2026-07-25Fix
CVE-2026-64356Linux kernel XFS quota inode creation memory leak5.5v3.10.1%2026-07-25Fix
CVE-2026-64355Linux kernel BPF devmap XDP redirect out-of-bounds read9.8CNA v3.10.5%2026-07-25Fix
CVE-2026-64354Linux kernel BPF BTF parser vulnerability7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64353Linux kernel BPF array-of-maps verifier vulnerability5.5v3.10.1%2026-07-25Fix
CVE-2026-64352Linux kernel BPF LPM trie map use-after-free7.8v3.10.1%2026-07-25Fix
CVE-2026-64351Linux kernel kalmia USB driver vulnerability5.5v3.10.1%2026-07-25Fix
CVE-2026-64350Linux kernel cdnsp driver memory leak5.5v3.10.1%2026-07-25Fix
CVE-2026-64349Linux kernel dwc3 ULPI setup vulnerability5.5v3.10.1%2026-07-25Fix
CVE-2026-64348Linux kernel EHCI and FOTG210 host controller drivers use-after-free7.8v3.10.1%2026-07-25Fix
CVE-2026-64347Linux kernel USB gadget composite driver vulnerability5.5v3.10.1%2026-07-25Fix
CVE-2026-64346Linux kernel USB gadget UDC core use-after-free7.8v3.10.2%2026-07-25Fix
CVE-2026-64345Linux kernel f_printer USB gadget driver memory leak5.5v3.10.1%2026-07-25Fix
CVE-2026-64344Linux kernel idmouse driver use-after-free7.8v3.10.1%2026-07-25Fix
CVE-2026-64343Linux kernel ldusb driver use-after-free7.8v3.10.1%2026-07-25Fix
CVE-2026-64342Linux kernel iowarrior driver use-after-free7.8v3.10.1%2026-07-25Fix
CVE-2026-64341Linux kernel iowarrior driver use-after-free7.8NVD v3.10.1%2026-07-25Fix
CVE-2026-64340Linux kernel legousbtower driver use-after-free7.8v3.10.1%2026-07-25Fix
CVE-2026-64339Linux kernel usbio driver out-of-bounds read7.1v3.10.2%2026-07-25Fix
CVE-2026-64338Linux kernel uss720 parport driver vulnerability5.5v3.10.1%2026-07-25Fix
CVE-2026-64337Linux kernel mtu3 USB gadget driver vulnerability5.5v3.10.2%2026-07-25Fix
CVE-2026-64336Linux kernel Keyspan PDA USB serial driver information disclosure5.5v3.10.1%2026-07-25Fix
CVE-2026-64335Linux kernel Digi AccelePort USB serial driver vulnerability5.5v3.10.1%2026-07-25Fix
CVE-2026-64334Linux kernel Digi AccelePort USB serial driver denial of service5.5v3.10.1%2026-07-25Fix
CVE-2026-64333Linux kernel Digi AccelePort USB serial driver out-of-bounds write7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64332Linux kernel ULPI driver memory leak5.5v3.10.1%2026-07-25Fix
CVE-2026-64331Linux kernel USB/IP virtual UDC null pointer dereference5.5v3.10.1%2026-07-25Fix
CVE-2026-64330Linux kernel TCPM SVDM mode discovery improper array index validation7.8v3.10.1%2026-07-25Fix
CVE-2026-64329Linux kernel UCSI CCG driver use-after-free7.8v3.10.1%2026-07-25Fix
CVE-2026-64328Linux kernel usb gadget f_fs memory leak5.5v3.10.2%2026-07-25Fix
CVE-2026-64327Linux kernel FunctionFS gadget driver improper initialization5.5v3.10.2%2026-07-25Fix
CVE-2026-64326Linux kernel block device removal handling denial of service5.5v3.10.2%2026-07-25Fix
CVE-2026-64325Linux kernel mt7921/mt7925 Wi-Fi driver null pointer dereference5.5NVD v3.10.2%2026-07-25Fix
CVE-2026-64324Linux kernel UDF free block extent handling improper array index validation7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64323Linux kernel UDF virtual allocation table out-of-bounds write7.1CNA v3.10.2%2026-07-25Fix
CVE-2026-64322Linux kernel UDF sparing table out-of-bounds write7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64321Linux kernel NVMe RDMA target memory leak5.5v3.10.1%2026-07-25Fix
CVE-2026-64320Linux kernel nvmet driver out-of-bounds read9.1CNA v3.10.7%2026-07-25Fix
CVE-2026-64319Linux kernel NVMe-oF target authentication out-of-bounds read9.1CNA v3.10.5%2026-07-25Fix
CVE-2026-64318Linux kernel AIX partition table parser vulnerability7.1CNA v3.10.2%2026-07-25Fix
CVE-2026-64317Linux kernel isofs Rock Ridge symlink parsing out-of-bounds read7.1CNA v3.10.2%2026-07-25Fix
CVE-2026-64316Linux kernel CAAM driver key logging information disclosure5.5v3.10.1%2026-07-25Fix
CVE-2026-64315Linux kernel CAAM driver key logging information disclosure7.0CNA v3.10.1%2026-07-25Fix
CVE-2026-64314Linux kernel chacha20poly1305 template null pointer dereference5.5v3.10.2%2026-07-25Fix
CVE-2026-64313Linux kernel ECC vli multiplication integer overflow8.8CNA v3.10.4%2026-07-25Fix
CVE-2026-64312Linux kernel pcrypt AEAD fallback vulnerability7.5CNA v3.10.5%2026-07-25Fix
CVE-2026-64311Linux kernel loongson-rng driver use-after-free7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64310Linux kernel SEV ioctl handling improper initialization5.5v3.10.2%2026-07-25Fix
CVE-2026-64309Linux kernel SNP_COMMIT ioctl handler vulnerability5.5v3.10.2%2026-07-25Fix
CVE-2026-64308Linux kernel SNP_VLEK_LOAD ioctl handler improper initialization5.5v3.10.2%2026-07-25Fix
CVE-2026-64307Linux kernel SNP_CONFIG ioctl handler improper initialization5.5v3.10.2%2026-07-25Fix
CVE-2026-64306Linux kernel CTR_DRBG generator vulnerability5.5v3.10.2%2026-07-25Fix
CVE-2026-64305Linux kernel QAT service table use-after-free7.8NVD v3.10.1%2026-07-25Fix
CVE-2026-64304Linux kernel QAT RSA CRT key parsing out-of-bounds write7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64303Linux kernel fsl-lpspi DMA driver use-after-free9.8CNA v3.10.7%2026-07-25Fix
CVE-2026-64302Linux kernel vmemmap page table freeing vulnerability5.5v3.10.2%2026-07-25Fix
CVE-2026-64301Linux kernel SCMI regulator driver memory leak5.5v3.10.2%2026-07-25Fix
CVE-2026-64300Linux kernel perf AUX buffer mapping use-after-free7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64299Linux kernel trace event glob matching out-of-bounds read7.1CNA v3.10.2%2026-07-25Fix
CVE-2026-64298Linux kernel NFSv4 open permission check incorrect authorization7.1CNA v3.10.1%2026-07-25Fix
CVE-2026-64297Linux kernel module decompress null pointer dereference5.5v3.10.2%2026-07-25Fix
CVE-2026-64296Linux kernel exFAT directory entry parsing vulnerability7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64295Linux kernel page_ext iterator null pointer dereference5.5v3.10.2%2026-07-25Fix
CVE-2026-64294Linux kernel mincore and madvise ownership checks vulnerability5.5v3.10.2%2026-07-25Fix