CVE-2026 list

CVE-2026 records published in July 2026

Page three of 10: records 2,001 to 3,000 of the 9,534 published in July 2026, newest first. The first page carries the figures for July 2026.

CVE-2026 records published in July 2026, newest first: records 2,001 to 3,000 of 9,534
CVE Summary CVSS EPSS Published Signals
CVE-2026-64293Linux kernel iommufd vevent queue reader vulnerability7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64292Linux kernel iommufd vevent queue allocation memory leak5.5v3.10.2%2026-07-25Fix
CVE-2026-64291Linux kernel iommufd vevent queue allocation vulnerability5.5v3.10.2%2026-07-25Fix
CVE-2026-64290Linux kernel iommufd fault event reader infinite loop5.5v3.10.2%2026-07-25Fix
CVE-2026-64289Linux kernel iommufd cache invalidation ioctl denial of service5.5v3.10.2%2026-07-25Fix
CVE-2026-64288Linux kernel VNCR pseudo-TLB invalidation null pointer dereference5.5v3.10.2%2026-07-25Fix
CVE-2026-64287Linux kernel pKVM hyp vCPU vGIC flush vulnerability8.2CNA v3.10.2%2026-07-25Fix
CVE-2026-64286Linux kernel pKVM hyp vCPU context flush vulnerability8.2CNA v3.10.2%2026-07-25Fix
CVE-2026-64285Linux kernel KVM SEV vulnerability5.5v3.10.1%2026-07-25Fix
CVE-2026-64284Linux kernel KVM x86 fastpath exit handling race condition7.1CNA v3.10.1%2026-07-25Fix
CVE-2026-64283Linux kernel KVM guest_memfd memslot binding integer overflow7.0NVD v3.10.1%2026-07-25Fix
CVE-2026-64282Linux kernel KVM arm64 VNCR translation vulnerability4.7v3.10.1%2026-07-25Fix
CVE-2026-64281Linux kernel svcrdma denial of service7.5CNA v3.10.5%2026-07-25Fix
CVE-2026-64280Linux kernel dfl-afu FPGA DMA mapping vulnerability8.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64279Linux kernel I2C core adapter deregistration race condition7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64278Linux kernel imx-lpi2c driver vulnerability5.5v3.10.2%2026-07-25Fix
CVE-2026-64277Linux kernel synaptics-rmi4 F3A GPIO driver out-of-bounds read7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64276Linux kernel synaptics-rmi4 F30 GPIO driver out-of-bounds write7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64275Linux kernel elan_i2c touchpad driver divide by zero5.5v3.10.2%2026-07-25Fix
CVE-2026-64274Linux kernel goodix touchscreen driver out-of-bounds write7.8v3.10.2%2026-07-25Fix
CVE-2026-64273Linux kernel iforce force-feedback driver vulnerability7.8v3.10.2%2026-07-25Fix
CVE-2026-64272Linux kernel mms114 touchscreen driver improper array index validation7.8v3.10.2%2026-07-25Fix
CVE-2026-64271Linux kernel touchwin touchscreen driver vulnerability7.8v3.10.2%2026-07-25Fix
CVE-2026-64270Linux kernel mms114 touchscreen driver out-of-bounds write7.8v3.10.2%2026-07-25Fix
CVE-2026-64269Linux kernel rtrs-srv RDMA driver vulnerability9.1CNA v3.10.7%2026-07-25Fix
CVE-2026-64268Linux kernel siw RDMA driver out-of-bounds write9.8CNA v3.10.7%2026-07-25Fix
CVE-2026-64267Linux kernel FUSE prune notification handling vulnerability5.5v3.10.2%2026-07-25Fix
CVE-2026-64266Linux kernel FUSE folio reference handling use-after-free7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64265Linux kernel FUSE request interrupt list use-after-free7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64264Linux kernel FUSE io_uring commit error handling vulnerability5.5v3.10.2%2026-07-25Fix
CVE-2026-64263Linux kernel FUSE io_uring entry cancellation vulnerability5.5v3.10.2%2026-07-25Fix
CVE-2026-64262Linux kernel FUSE io_uring request cancellation vulnerability5.5v3.10.2%2026-07-25Fix
CVE-2026-64261Linux kernel FUSE io_uring queue teardown use-after-free7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64260Linux kernel FUSE io_uring queue state race condition7.8CNA v3.10.1%2026-07-25Fix
CVE-2026-64259Linux kernel FUSE io_uring request commit use-after-free7.8CNA v3.10.2%2026-07-25Fix
CVE-2026-64258Linux kernel FUSE io_uring request queue null pointer dereference5.5v3.10.2%2026-07-25Fix
CVE-2026-64257Linux kernel SMB client vulnerability9.1CNA v3.10.7%2026-07-25Fix
CVE-2026-64256Linux kernel XFS quota id iteration integer overflow5.5v3.10.2%2026-07-25Fix
CVE-2026-16766Catalyst::View::Wkhtmltopdf versions for Perl allow shell command injection9.8CISA ADP v3.12.6%2026-07-25Fix
CVE-2026-15425Yoast SEO WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-25Fix
CVE-2026-14955Checkout Field Editor for WooCommerce (Pro) WordPress plugin path traversal to arbitrary file read6.5CNA v3.10.8%2026-07-25Fix
CVE-2026-10818WPForms Pro WordPress plugin unauthenticated arbitrary file write8.1CNA v3.10.7%2026-07-25NucleiExploit codeFix
CVE-2026-10681Zephyr thread permission index allocator race condition6.5CNA v3.10.1%2026-07-25Fix
CVE-2026-66339Libsoup: Libsoup: Proxy credentials leak to destination server6.5CNA v3.10.2%2026-07-24Fix
CVE-2026-66338Libsoup: Libsoup: Http request smuggling7.2NVD v3.10.3%2026-07-24Fix
CVE-2026-66337Libsoup: Libsoup: Heap buffer over-read via integer underflow in soup_filter_input_stream_read_until6.5CNA v3.10.4%2026-07-24Fix
CVE-2026-66144Apache Neethi: Remote PolicyReference fetch lacks resource bounds7.5CISA ADP v3.10.7%2026-07-24Fix
CVE-2026-66143Apache Neethi: Missing global alternative-output budget across policy computation paths7.5CISA ADP v3.10.9%2026-07-24Fix
CVE-2026-66142Apache Neethi: Uncontrolled recursion in policy processing7.5CISA ADP v3.10.7%2026-07-24Fix
CVE-2026-66141Exim inclusion of untrusted functionality7.8v3.10.1%2026-07-24Fix
CVE-2026-66140Exim queue-name handling path traversal7.8v3.10.3%2026-07-24Fix
CVE-2026-66139OpenStack Zaqar missing authentication4.8CNA v3.10.5%2026-07-24Fix
CVE-2026-66138OpenStack Ironic Python Agent OS command injection7.2CNA v3.10.8%2026-07-24Fix
CVE-2026-66041FFmpeg heap out-of-bounds write via vf_quirc Filter7.8v3.10.5%2026-07-24Fix
CVE-2026-66040FFmpeg heap out-of-bounds write via PNG/APNG eXIf Encoder8.8v3.10.8%2026-07-24Fix
CVE-2026-66039FFmpeg MACE6 Audio Decoder Heap out-of-bounds write via CAF file7.8v3.10.4%2026-07-24Fix
CVE-2026-66038FFmpeg LCL/ZLIB Video Decoder information disclosure via lcldec.c6.5NVD v3.10.4%2026-07-24Fix
CVE-2026-66037FFmpeg IAMF Demuxer uncontrolled resource consumption via mix_presentation_obu5.5NVD v3.10.3%2026-07-24Fix
CVE-2026-66036FFmpeg heap out-of-bounds write in vf_hqdn3d Filter8.8v3.10.5%2026-07-24Fix
CVE-2026-66035libssh2 heap buffer overflow via ETM Cipher Negotiation7.7CNA v4.00.6%2026-07-24Fix
CVE-2026-66034libssh2 heap out-of-bounds read via publickey subsystem7.7CNA v4.00.4%2026-07-24Fix
CVE-2026-66033libssh2 integer underflow DoS via AES-GCM Cipher Negotiation8.7CNA v4.00.7%2026-07-24Fix
CVE-2026-66032libssh2 double free Heap Corruption via sftp_open8.7CNA v4.00.4%2026-07-24Fix
CVE-2026-66027Suna broken access control via Message Queue API8.7CNA v4.00.5%2026-07-24Fix
CVE-2026-66010DOMPurify Hook Bypass via CUSTOM_ELEMENT_HANDLING5.1CNA v4.00.3%2026-07-24Fix
CVE-2026-66009parse-community parse-server parse Server information disclosure via GraphQL Error messages6.3CNA v4.00.4%2026-07-24Fix
CVE-2026-66008parse-community parse-server parse Server information disclosure via GraphQL Error messages6.3CNA v4.00.6%2026-07-24Fix
CVE-2026-66007Datasets path traversal via Unsanitized file_name Metadata6.9CNA v4.00.8%2026-07-24Fix
CVE-2026-66006lakeFS Unauthenticated Operator Metadata Overwrite via setup_comm_prefs6.9CNA v4.00.6%2026-07-24Fix
CVE-2026-66005Jan Local API Server CORS Origin Reflection via Binding5.3CNA v4.00.3%2026-07-24
CVE-2026-66004ahujasid blender-mcp BlenderMCP path traversal via download_polyhaven_asset API6.0CNA v4.00.4%2026-07-24Fix
CVE-2026-65711sysPass authenticated OS command injection via Backup Path8.6CNA v4.02.0%2026-07-24
CVE-2026-65710sysPass missing authorization via PublicLinkController Account Decryption7.1CNA v4.00.3%2026-07-24
CVE-2026-65709sysPass Missing Object-Level Authorization via JSON-RPC API8.7CNA v4.00.4%2026-07-24
CVE-2026-65708sysPass insecure direct object reference via AccountFileController8.6CNA v4.00.4%2026-07-24
CVE-2026-65707Likeshop Authenticated SQL injection via adjustAccount endpoint8.5CNA v4.00.5%2026-07-24
CVE-2026-65693Microweber CMS server-side template injection via Mail templates8.6CNA v4.00.9%2026-07-24
CVE-2026-65623Quadratic CPU blow-up reassembling fragmented WebSocket messages in Bandit8.7CNA v4.00.6%2026-07-24Fix
CVE-2026-64255Linux kernel iwlwifi MLD block-ack session handler out-of-bounds read8.8CNA v3.10.2%2026-07-24Fix
CVE-2026-64254Linux kernel NTB endpoint function BAR mapping reachable assertion5.5v3.10.1%2026-07-24Fix
CVE-2026-64253Linux kernel fork null pointer dereference5.5v3.10.1%2026-07-24Fix
CVE-2026-64252Linux kernel MIPS DEC console buffer allocation denial of service5.5v3.10.1%2026-07-24Fix
CVE-2026-64251Linux kernel pwrseq core use-after-free7.8CNA v3.10.1%2026-07-24Fix
CVE-2026-64250Linux kernel LoongArch SMP CPU shutdown handling vulnerability5.5v3.10.1%2026-07-24Fix
CVE-2026-64249Linux kernel FPGA region firmware child regions use-after-free7.8v3.10.1%2026-07-24Fix
CVE-2026-64248Linux kernel MIPS SMP CPU shutdown handling vulnerability5.5v3.10.1%2026-07-24Fix
CVE-2026-64247Linux kernel KVM Hyper-V sparse bank lookup out-of-bounds read8.4CNA v3.10.1%2026-07-24Fix
CVE-2026-64246Linux kernel LinkStation poweroff driver use-after-free7.8v3.10.1%2026-07-24Fix
CVE-2026-64245Linux kernel fbdev mode database lookup use-after-free7.8v3.10.1%2026-07-24Fix
CVE-2026-64244Linux kernel memory hotplug altmap handling vulnerability5.5v3.10.1%2026-07-24Fix
CVE-2026-64243Linux kernel simple-mux ASoC codec driver improper array index validation7.1CNA v3.10.1%2026-07-24Fix
CVE-2026-64242Linux kernel net2280 USB gadget driver probe double free7.8v3.10.1%2026-07-24Fix
CVE-2026-64241Linux kernel Rockchip GPIO driver teardown resource leak5.5NVD v3.10.1%2026-07-24Fix
CVE-2026-64240Linux kernel igorplugusb driver vulnerability5.5v3.10.1%2026-07-24Fix
CVE-2026-64239Linux kernel DAMON sysfs scheme region directories use-after-free7.8v3.10.1%2026-07-24Fix
CVE-2026-64238Linux kernel GPIO shared proxy deadlock5.5v3.10.1%2026-07-24Fix
CVE-2026-64237Linux kernel elan_i2c firmware update out-of-bounds read7.1v3.10.1%2026-07-24Fix
CVE-2026-64236Linux kernel i2c davinci driver clock setup divide by zero5.5v3.10.1%2026-07-24Fix
CVE-2026-64235Linux kernel ftrace dynamic trampolines vulnerability8.1CNA v3.10.3%2026-07-24Fix
CVE-2026-64234Linux kernel pch_uart driver DMA receive path null pointer dereference5.5v3.10.1%2026-07-24Fix
CVE-2026-64233Linux kernel USB gadget UVC extension unit list vulnerability5.5v3.10.1%2026-07-24Fix
CVE-2026-64232Linux kernel block layer integrity segment counting vulnerability9.8CNA v3.10.4%2026-07-24Fix
CVE-2026-64231Linux kernel MSM DSI register dump vulnerability5.5v3.10.1%2026-07-24Fix
CVE-2026-64230Linux kernel TPS65219 regulator IRQ handling null pointer dereference5.5v3.10.1%2026-07-24Fix
CVE-2026-64229Linux kernel x86 broadcast TLB flush null pointer dereference5.5v3.10.1%2026-07-24Fix
CVE-2026-64228Linux kernel ethtool PHY interface null pointer dereference5.5v3.10.1%2026-07-24Fix
CVE-2026-64227Linux kernel ACPI companion device probe null pointer dereference5.5v3.10.1%2026-07-24Fix
CVE-2026-64226Linux kernel sched_ext scheduler class use-after-free7.8CNA v3.10.2%2026-07-24Fix
CVE-2026-64225Linux kernel OcteonTX2 AF CGX driver vulnerability7.8v3.10.1%2026-07-24Fix
CVE-2026-64224Linux kernel OcteonTX2 PF representor resource init double free7.8v3.10.1%2026-07-24Fix
CVE-2026-64223Linux kernel mac80211 TTLM negotiation out-of-bounds read8.1CNA v3.10.4%2026-07-24Fix
CVE-2026-64222Linux kernel OcteonTX2 PF AQ pool initialization double free7.0CNA v3.10.1%2026-07-24Fix
CVE-2026-64221Linux kernel TI QSPI driver use-after-free7.8CNA v3.10.2%2026-07-24Fix
CVE-2026-64220Linux kernel device firmware node improper initialization5.5v3.10.1%2026-07-24Fix
CVE-2026-64219Linux kernel AMD display DMUB AUX transfer out-of-bounds write7.0CNA v3.10.1%2026-07-24Fix
CVE-2026-64218Linux kernel batman-adv bridge loop avoidance vulnerability7.8CNA v3.10.2%2026-07-24Fix
CVE-2026-64217Linux kernel netfs iterator extraction out-of-bounds write7.8CNA v3.10.1%2026-07-24Fix
CVE-2026-64216Linux kernel netfs read page unlocking use-after-free9.8CNA v3.10.7%2026-07-24Fix
CVE-2026-64215Linux kernel MSM a6xx GPU HFI null pointer dereference5.5v3.10.1%2026-07-24Fix
CVE-2026-64214Linux kernel powerpc IRQ work handling null pointer dereference5.5v3.10.1%2026-07-24Fix
CVE-2026-64213Linux kernel lm90 hwmon driver vulnerability5.5NVD v3.10.1%2026-07-24Fix
CVE-2026-64212Linux kernel iwlwifi MLD driver null pointer dereference5.5v3.10.1%2026-07-24Fix
CVE-2026-64211Linux kernel SRCU subsystem denial of service5.5v3.10.1%2026-07-24Fix
CVE-2026-64210Linux kernel mlx5e XSK ICOSQ race condition7.5CNA v3.10.4%2026-07-24Fix
CVE-2026-64209Linux kernel qcom qmp-usbc PHY driver out-of-bounds read7.1v3.10.1%2026-07-24Fix
CVE-2026-64208Linux kernel AF_RXRPC crypto vulnerability7.5CNA v3.10.6%2026-07-24Fix
CVE-2026-63317Apache OpenNLP: Arbitrary Class Instantiation in GeneratorFactory via Feature Descriptor XML5.6CISA ADP v3.10.9%2026-07-24Fix
CVE-2026-62835Microsoft Azure Portal information disclosure9.3CNA v3.11.0%2026-07-24Fix
CVE-2026-62825Microsoft Azure Key Vault elevation of privilege10.0CNA v3.10.9%2026-07-24Fix
CVE-2026-61892Weintek cMT3092X incorrect permission assignment for critical resource8.7CNA v4.00.5%2026-07-24Fix
CVE-2026-61886Weintek cMT3092X plaintext storage of a password7.1CNA v4.00.4%2026-07-24Fix
CVE-2026-61884Tycon Systems TPDIN-Monitor-WEB2 missing authentication for critical function9.3CNA v4.00.6%2026-07-24Fix
CVE-2026-60135Weintek cMT3092X incorrect user management7.1CNA v4.00.4%2026-07-24Fix
CVE-2026-60134Weintek cMT3092X HMI privilege escalation8.7CNA v4.00.6%2026-07-24Fix
CVE-2026-58630Microsoft Azure App Service on Azure Stack Hub elevation of privilege10.0CNA v3.10.9%2026-07-24Fix
CVE-2026-58586Image::WebP versions for Perl bundle a vulnerable version of libwebp9.8CISA ADP v3.10.6%2026-07-24Fix
CVE-2026-58275Microsoft Azure DNS elevation of privilege10.0CNA v3.10.9%2026-07-24Fix
CVE-2026-57531Milkdown DOM XSS via innerHTML Assignment5.1CNA v4.00.4%2026-07-24Fix
CVE-2026-57530Milkdown stored XSS via javascript: URL in link href5.1CNA v4.00.3%2026-07-24Fix
CVE-2026-57106Data Quality elevation of privilege10.0CNA v3.10.9%2026-07-24Fix
CVE-2026-56392Heap-based buffer overflow in GNU coreutils6.1NVD v3.10.2%2026-07-24Fix
CVE-2026-56391Out‑of‑bounds Read in GNU coreutils6.1v3.10.2%2026-07-24Fix
CVE-2026-56191Microsoft Exchange Online tampering10.0CNA v3.10.9%2026-07-24Fix
CVE-2026-56163Microsoft Azure Kubernetes Service elevation of privilege10.0CNA v3.10.9%2026-07-24Fix
CVE-2026-55985Tycon Systems TPDIN-Monitor-WEB2 cleartext storage of sensitive information5.3CNA v4.00.2%2026-07-24Fix
CVE-2026-55732Loytec LINX firmware: Out-of-bounds read in BACnet packet parsing (bacdt_datetime_to_tod)8.7CNA v4.00.5%2026-07-24Fix
CVE-2026-55731Loytec LINX firmware: Unchecked input for loop condition in the SNMP agent6.6CNA v4.00.5%2026-07-24Fix
CVE-2026-55730Loytec LWEB802: Reflected cross-site scripting in LWEB8028.7CNA v4.00.6%2026-07-24Fix
CVE-2026-55729Loytec LWEB802: Exposure of sensitive information in browser localStorage7.7CNA v4.00.5%2026-07-24Fix
CVE-2026-55728Loytec LINX firmware: Stack-based buffer overflow in cmd_ipaddr_conflict3.8CNA v4.00.2%2026-07-24Fix
CVE-2026-54422OpenStack Ironic Python Agent insufficiently protected credentials5.5CNA v3.10.1%2026-07-24Fix
CVE-2026-54342TLS Certificate Verification Disabled on CXF Transport Clients in epa4all8.1CNA v3.10.2%2026-07-24Fix
CVE-2026-50517Microsoft M365 Copilot remote code execution9.9CNA v3.11.7%2026-07-24Fix
CVE-2026-49745GPU Ddk Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 07.8CISA ADP v3.10.2%2026-07-24Fix
CVE-2026-49744GPU Ddk Unchecked ui32TracePointer in rgxfw_log_ex7.8CISA ADP v3.10.2%2026-07-24Fix
CVE-2026-49743Imagination Technologies Graphics DDK GPU kick function use-after-free7.8CISA ADP v3.10.2%2026-07-24Fix
CVE-2026-49326Apache HBase: Missing scanner instance owner check in thrift delegation service6.5CISA ADP v3.10.5%2026-07-24Fix
CVE-2026-49159Microsoft Graph information disclosure6.5CNA v3.11.0%2026-07-24Fix
CVE-2026-48037Hulumi: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture6.3CNA v4.00.5%2026-07-24Fix
CVE-2026-48036Hulumi: Drift classifier fails open on adapter errors and over-promotes Mixed verdicts8.4CNA v4.00.5%2026-07-24Fix
CVE-2026-48035Hulumi: AccountFoundation audit-delivery S3 bucket could be silently weakened7.1CNA v4.00.5%2026-07-24Fix
CVE-2026-48034kerberosmansour hulumi HULUMI-H5 bypass via decoy sibling resources targeting a different bucket8.5CNA v4.00.4%2026-07-24Fix
CVE-2026-48033Hulumi: Policy packs bypassed by a forged Pulumi-URN logical name8.4CNA v4.00.5%2026-07-24Fix
CVE-2026-48032Hulumi: IAM-role policy checks bypassed when the role trusts multiple OIDC providers8.3CNA v4.00.5%2026-07-24Fix
CVE-2026-48021med-united epa4all VAU handshake improper certificate validation9.1CNA v3.10.2%2026-07-24Fix
CVE-2026-46452Apache NimBLE: Mesh Proxy SAR reassembly unbounded append and unchecked failure5.3CISA ADP v3.10.9%2026-07-24Fix
CVE-2026-45816Apache NimBLE: Null pointer dereference vulnerability in SMP LTK request7.5CISA ADP v3.11.0%2026-07-24Fix
CVE-2026-45815Apache NimBLE: Remote reachable assertion in ATT Read multiple Variable Response handler7.5CISA ADP v3.11.0%2026-07-24Fix
CVE-2026-45813Apache NimBLE: Incorrect data validation in BASS add/modify source operation8.8CISA ADP v3.10.5%2026-07-24Fix
CVE-2026-45812Apache NimBLE: OOB read via sizeof(pointer) in Legacy Advertising Report handler6.5CISA ADP v3.10.7%2026-07-24Fix
CVE-2026-45811Apache NimBLE: Buffer overflow in socket HCI transport7.5CISA ADP v3.10.5%2026-07-24Fix
CVE-2026-35425Microsoft Azure API Management (APIM) remote code execution8.0CNA v3.10.7%2026-07-24Fix
CVE-2026-24727Sunnet Corporate Training Management System unrestricted upload of file with dangerous type9.3CNA v4.00.7%2026-07-24
CVE-2026-17107Red Hat multicluster engine for Kubernetes cluster-proxy service-proxy vulnerability8.5CNA v3.10.6%2026-07-24Fix
CVE-2026-17059Red Hat build of Keycloak keycloak-services: Keycloak-services: Information disclosure6.5CNA v3.10.4%2026-07-24Emerging ThreatsFix
CVE-2026-17048Red Hat Keycloak admin REST API vault-resolved client secrets information disclosure5.5CNA v3.10.4%2026-07-24Fix
CVE-2026-17039Red Hat Certificate System certificate authority renewal request processing incorrect authorization3.1CNA v3.10.3%2026-07-24
CVE-2026-16910Quay: Ssrf in Red Hat quay notification webhooks (slack/generic)5.5CNA v3.10.3%2026-07-24
CVE-2026-16870Snowflake libsnowflakeclient internal stage file download stack-based buffer overflow8.8CNA v3.11.3%2026-07-24Fix
CVE-2026-16802Devolutions PowerShell Universal variables feature cleartext storage of sensitive information6.5CISA ADP v3.10.1%2026-07-24Fix
CVE-2026-16801Devolutions PowerShell Universal variables feature code injection8.8CISA ADP v3.10.5%2026-07-24Fix
CVE-2026-16800Devolutions PowerShell Universal schedule feature code injection8.8CISA ADP v3.10.5%2026-07-24Fix
CVE-2026-16799Devolutions PowerShell Universal automation tests and workflows features improper access control5.0CISA ADP v3.10.3%2026-07-24Fix
CVE-2026-16798Devolutions PowerShell Universal automation jobs API information disclosure6.5CISA ADP v3.10.4%2026-07-24Fix
CVE-2026-16743Red Hat Enterprise Linux 10 accountsservice: Accountsservice: Arbitrary file read5.5CNA v3.10.1%2026-07-24
CVE-2026-16730Red Hat Enterprise Linux 10 dbus-broker: Dbus-broker: Session bus denial of service5.5CNA v3.10.1%2026-07-24Fix
CVE-2026-16634TOML::XS versions for Perl bundle an unsupported and vulnerable version of tomlc999.8CISA ADP v3.10.8%2026-07-24Fix
CVE-2026-16519GeoVision GV-IP Device Utility DLL search order hijacking7.3CNA v3.10.2%2026-07-24Fix
CVE-2026-16280GPU Ddk integer overflow in _PMRLogicalOffsetToPhysicalOffset9.8CISA ADP v3.10.5%2026-07-24Fix
CVE-2026-15821SureDash WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-24Fix
CVE-2026-15810Cross-site scripting (XSS) in Looker allows admin account takeover8.7CNA v4.00.5%2026-07-24Fix
CVE-2026-15755Open User Map WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-07-24Fix
CVE-2026-15739Rich Showcase for Google Reviews WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-07-24Fix
CVE-2026-15704ABAC authorization bypass via trailing slash route normalization in Eclipse BaSyx Go Components9.8CNA v3.10.7%2026-07-24Fix
CVE-2026-15665Fluent Support WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-24Fix
CVE-2026-15663Ninja Forms WordPress plugin SQL injection4.9CNA v3.10.5%2026-07-24Fix
CVE-2026-15653Visualizer WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-24Fix
CVE-2026-15648Brands for WooCommerce WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-24Fix
CVE-2026-15464WP Hotel Booking WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-24Fix
CVE-2026-15420Nexter Blocks WordPress plugin path traversal to arbitrary CSS/JS file deletion4.3CNA v3.10.9%2026-07-24Fix
CVE-2026-15401VikBooking Hotel Booking Engine and PMS WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.6%2026-07-24Fix
CVE-2026-15346VikBooking Hotel Booking Engine and PMS WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2026-07-24Fix
CVE-2026-15334Cozy Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-07-24Fix
CVE-2026-15333Cozy Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-07-24Fix
CVE-2026-15243Improper validation of Certificate in CAS Client7.4CNA v4.00.3%2026-07-24
CVE-2026-15100Post Grid Gutenberg Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-24Fix
CVE-2026-14603WowOptin WordPress plugin unauthenticated Opt-in deactivation and Template Row injection7.5CISA ADP v3.10.4%2026-07-24Fix
CVE-2026-14172Rapid7 InsightVM, Nexpose, and Insight Agent local privilege escalation7.8CNA v3.10.2%2026-07-24Fix
CVE-2026-13464Kirki WordPress plugin insecure direct object reference5.3CNA v3.10.5%2026-07-24Fix
CVE-2026-12981CAFEHAUS API WordPress plugin unauthenticated arbitrary user password reset7.5CISA ADP v3.10.6%2026-07-24
CVE-2026-12877Software Issue Manager WordPress plugin unauthenticated SQL injection via Search parameter9.1CISA ADP v3.10.4%2026-07-24Fix
CVE-2026-12736WPify Woo WordPress plugin privilege escalation8.0CNA v3.10.6%2026-07-24Fix
CVE-2026-12702Octopus Deploy Octopus Server improper access control5.1CNA v4.00.3%2026-07-24Fix
CVE-2026-12690ProfileGrid WordPress plugin Subscriber+ Premium License tampering via missing authorization3.8CISA ADP v3.10.3%2026-07-24Fix
CVE-2026-12689ProfileGrid WordPress plugin Cross-User Private Message Thread deletion and tampering5.4CISA ADP v3.10.2%2026-07-24Fix
CVE-2026-12688ProfileGrid PayPal IPN handling improper access control6.5CISA ADP v3.10.3%2026-07-24Fix
CVE-2026-12654Payment Plugins for Stripe WooCommerce WordPress plugin authorization bypass5.3CNA v3.10.6%2026-07-24Fix
CVE-2026-12504Loytec LINX firmware: Improper authentication in PAM configuration8.4CNA v4.00.2%2026-07-24Fix
CVE-2026-12503Loytec LINX firmware: Improper Link Resolution in /usr/bin/larm_starter9.2CNA v4.00.2%2026-07-24Fix
CVE-2026-12502Loytec LINX firmware: Improper privilege management in /usr/bin/ltsudo8.4CNA v4.00.2%2026-07-24Fix
CVE-2026-12497ProfilePress registration role selection field privilege escalation7.5CISA ADP v3.10.4%2026-07-24Reported exploitedFix
CVE-2026-12496Loytec LINX firmware: Unauthenticated stored XSS in OPC XML-DA server8.7CNA v4.00.6%2026-07-24Fix
CVE-2026-11922ZenML login rate limiter authentication bypass6.5CNA v3.00.3%2026-07-24Fix
CVE-2026-11354Participants Database WordPress plugin information disclosure5.3CNA v3.10.4%2026-07-24Fix
CVE-2026-10610Local privilege escalation in ESET security applications for macOS8.5CNA v4.00.1%2026-07-24Fix
CVE-2026-10033EventON Action User WordPress plugin missing authorization unauthenticated privilege escalation7.3CNA v3.10.3%2026-07-24Fix
CVE-2026-9765Grafana IRM improper access control7.1CNA v3.10.4%2026-07-24Fix
CVE-2026-8789Easy Appointments WordPress plugin missing authorization authenticated arbitrary Connection deletion8.1CNA v3.10.4%2026-07-24Fix
CVE-2026-8308Reflected XSS Polen Media's Website Template6.1CNA v3.10.3%2026-07-24Fix
CVE-2026-7484Improper access control in ABIS Technology's AVESİS5.3CNA v3.10.3%2026-07-24Fix
CVE-2026-7483Local privilege escalation in ESET security applications for macOS8.5CNA v4.00.1%2026-07-24Fix
CVE-2026-7007Division by zero in Zephyr ext2 superblock parsing allows DoS via crafted filesystem image4.6CNA v3.10.2%2026-07-24Fix
CVE-2026-6454Firelight Lightbox WordPress plugin stored DOM cross-site scripting6.4CNA v3.10.4%2026-07-24Fix
CVE-2026-65920Diffusers path traversal via weight_map arbitrary file read5.3CNA v4.00.4%2026-07-23
CVE-2026-65919Meshery Unauthenticated arbitrary file read via fileView and fileDownload8.7CNA v4.02.1%2026-07-23NucleiFix
CVE-2026-65918PyTorch Torchvision GIF Decoder Out-of-bounds Heap Read7.1CNA v4.00.4%2026-07-23Fix
CVE-2026-65917CyberPanel IncBackups IDOR via Sequential Backup ID8.7CNA v4.00.5%2026-07-23
CVE-2026-65916CyberPanel missing authorization in cancelBackupCreation handler7.2CNA v4.00.5%2026-07-23
CVE-2026-65914DOMPurify Mutation XSS via Re-Contextualization6.1v3.10.3%2026-07-23Fix
CVE-2026-65913DOMPurify prototype pollution via USE_PROFILES5.1CNA v4.00.3%2026-07-23Fix
CVE-2026-65912DOMPurify URI Validation Bypass via ADD_ATTR5.1CNA v4.00.3%2026-07-23Fix
CVE-2026-65911DOMPurify XSS via ADD_ATTR/ADD_TAGS State Leakage5.1CNA v4.00.3%2026-07-23Fix
CVE-2026-65908JetBrains PyCharm inclusion of untrusted functionality8.6CNA v3.10.2%2026-07-23Fix
CVE-2026-65907JetBrains TeamCity code injection9.1CNA v3.10.7%2026-07-23Fix
CVE-2026-65906JetBrains TeamCity code injection8.8CNA v3.10.7%2026-07-23Fix
CVE-2026-65904DOMPurify cross-site scripting via IN_PLACE mode2.3CNA v4.00.3%2026-07-23Fix
CVE-2026-65903DOMPurify ADD_TAGS Function Bypasses FORBID_TAGS5.1CNA v4.00.3%2026-07-23Fix
CVE-2026-65902DOMPurify Hook Mutation Pollution via allowedTags5.3CNA v4.00.4%2026-07-23Fix
CVE-2026-65901DOMPurify cross-site scripting via IN_PLACE nodeName5.1CNA v4.00.3%2026-07-23Fix
CVE-2026-65900DOMPurify Template Expression injection via RETURN_DOM5.1CNA v4.00.3%2026-07-23Fix
CVE-2026-65899DOMPurify Trusted Types Policy State Contamination5.1CNA v4.00.4%2026-07-23Fix
CVE-2026-65898DOMPurify Permanent Attribute Allowlist Pollution via setConfig5.1CNA v4.00.3%2026-07-23Fix
CVE-2026-65897Grav API plugin privilege escalation via Invitations groups8.7CNA v4.00.5%2026-07-23Fix
CVE-2026-65896Grav API plugin path traversal via move7.1CNA v4.00.5%2026-07-23Fix
CVE-2026-65895Grav API plugin broken access control8.2CNA v4.00.3%2026-07-23Fix
CVE-2026-65763Joomla extension phoca.cz reflected XSS vulnerability in Phoca Maps5.1CNA v4.00.4%2026-07-23
CVE-2026-65762Joomla extension phoca.cz reflected XSS vulnerability in Phoca Guestbook5.1CNA v4.00.4%2026-07-23
CVE-2026-65761Joomla extension joomshaper.com unauthenticated SQL injection in Easy Store extension9.3CNA v4.01.0%2026-07-23NucleiExploit code
CVE-2026-65760JoomShaper Easy Store order management information disclosure9.2CNA v4.00.4%2026-07-23
CVE-2026-65759Joomla extension joomshaper.com unauthenticated payment/order forgery in Easy Store extension8.7CNA v4.00.4%2026-07-23
CVE-2026-65758Joomla extension tassos.gr sensitive data exposure in Convert Forms extension8.2CNA v4.00.3%2026-07-23
CVE-2026-65757RegularLabs Modules Anywhere editor popup improper access control8.1CISA ADP v3.10.2%2026-07-23
CVE-2026-65756Joomla extension regularlabs.com XSS vector in Keyboard Shortcuts extension6.1CISA ADP v3.10.3%2026-07-23
CVE-2026-65755RegularLabs Articles Anywhere and Users Anywhere query cache information disclosure7.5CISA ADP v3.10.4%2026-07-23
CVE-2026-65754Joomla extension regularlabs.com Insecure path handling in ReReplacer Pro extension7.5CISA ADP v3.10.5%2026-07-23
CVE-2026-65713Joomla extension regularlabs.com Insecure path handling in Modals Pro extension6.5CISA ADP v3.10.3%2026-07-23
CVE-2026-65712Joomla extension regularlabs.com Insecure path handling in CDN for Joomla Pro extension6.2CISA ADP v3.10.2%2026-07-23
CVE-2026-65706FFmpeg vf_swaprect out-of-bounds write via NV12 Frame Processing8.5CNA v4.00.2%2026-07-23Fix
CVE-2026-65705FFmpeg vf_floodfill out-of-bounds write via filter_frame7.3CNA v4.00.2%2026-07-23Fix
CVE-2026-65704FFmpeg out-of-bounds write via TY Demuxer and Shorten Decoder7.3CNA v4.00.2%2026-07-23Fix
CVE-2026-65703FFmpeg out-of-bounds write in TDSC Video Decoder8.5CNA v4.00.3%2026-07-23Fix
CVE-2026-65702Vanna path traversal via FileSystemConversationStore8.8CNA v4.00.6%2026-07-23
CVE-2026-65701svc-develop-team so-vits-svc SoftVC VITS Singing Voice Conversion path traversal9.3CNA v4.00.7%2026-07-23
CVE-2026-65700h2oGPT path traversal via OpenAI-compatible Files API9.3CNA v4.01.5%2026-07-23
CVE-2026-65699AgentGPT authorization bypass via Agent Task Creation2.3CNA v4.00.3%2026-07-23
CVE-2026-65698Void path traversal via AI Agent File-Reading tools6.0CNA v4.00.5%2026-07-23
CVE-2026-65697Fathom Lite stored XSS via /collect endpoint5.1CNA v4.00.3%2026-07-23
CVE-2026-65696Overseerr authorization bypass via pushSubscriptions API5.3CNA v4.00.3%2026-07-23
CVE-2026-65695Office-Word-MCP-Server path traversal via document tools7.6CNA v4.00.5%2026-07-23
CVE-2026-65694Microweber CMS path traversal via ServeStaticFileController8.7CNA v4.03.4%2026-07-23NucleiExploit code
CVE-2026-65690Bold Reports Standalone Report Designer path traversal RCE via file upload8.7CNA v4.00.9%2026-07-23Fix
CVE-2026-65689Bold Reports Standalone Report Designer arbitrary file read via Database Download9.3CNA v4.00.9%2026-07-23Fix
CVE-2026-65688Bold Reports Standalone Report Designer arbitrary file read via Font Processing9.3CNA v4.00.9%2026-07-23Fix
CVE-2026-65687Bold Reports Standalone Report Designer arbitrary file read via SVG Processing9.3CNA v4.00.9%2026-07-23Fix
CVE-2026-65608Grav remote code execution via FlexDirectory8.7CNA v4.01.1%2026-07-23Fix
CVE-2026-65607SiYuan path traversal via /export/temp/7.1CNA v4.00.6%2026-07-23Fix
CVE-2026-65606SiYuan cross-site scripting to RCE9.4CNA v4.00.8%2026-07-23Fix
CVE-2026-65605SiYuan stored XSS to RCE via attribute view9.4CNA v4.00.8%2026-07-23Fix
CVE-2026-65604Skipper Incomplete Fix for Policy Bypass8.8CNA v4.00.4%2026-07-23
CVE-2026-65550Tabs WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-07-23
CVE-2026-65540Popup for CF7 with Sweet Alert WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2026-07-23Exploit code
CVE-2026-65539Kwayy HTML Sitemap WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2026-07-23Fix
CVE-2026-65538Machete WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-07-23Fix
CVE-2026-65537Cyr to Lat reloaded transliteration of links and file names WordPress plugin broken access control4.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65536افزونه حمل و نقل ووکامرس WordPress plugin cross-site request forgery6.5CNA v3.10.2%2026-07-23
CVE-2026-65535TinyMCE Templates WordPress plugin sensitive data exposure4.3CNA v3.10.3%2026-07-23
CVE-2026-65534Custom links in Elementor Image Carousel WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-07-23
CVE-2026-65533Smart SEO Tool WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23
CVE-2026-65532Persian Woocommerce SMS WordPress plugin SQL injection7.6CNA v3.10.4%2026-07-23
CVE-2026-65531Qubely WordPress plugin broken access control4.8CNA v3.10.2%2026-07-23
CVE-2026-65530TemplateSpare WordPress plugin broken access control4.3CNA v3.10.3%2026-07-23
CVE-2026-65529Graphina WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23
CVE-2026-65528BSK PDF Manager WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-65527LIQUID SPEECH BALLOON WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23
CVE-2026-65526Visualizer WordPress plugin SQL injection8.5CNA v3.10.4%2026-07-23Fix
CVE-2026-65525Civi Framework WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23
CVE-2026-65524Avada Custom Branding WordPress plugin broken access control4.3CNA v3.10.3%2026-07-23
CVE-2026-65522Manual - Documentation, Knowledge Base and Education WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23
CVE-2026-65521WP Social Ninja WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65519Photo Gallery WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-65518Accept Donations with PayPal and Stripe WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-65516PeproDev Ultimate Invoice WordPress plugin server side request forgery (SSRF)7.2CNA v3.10.3%2026-07-23
CVE-2026-65514Appointment Hour Booking WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-65512WordPress WP Activity Log and WP Activity Log Premium plugins plugin cross-site request forgery5.4CNA v3.10.1%2026-07-23Fix
CVE-2026-65511Manual - Documentation, Knowledge Base and Education WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23
CVE-2026-65510PeproDev Ultimate Invoice WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23
CVE-2026-65506MP3 Audio Player for Music, Radio and Podcast by Sonaar WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65505Ultimate Store Kit Elementor Addons WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65503Ultimate Store Kit Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-65501Shiptastic for WooCommerce WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65500Manual - Documentation, Knowledge Base and Education WordPress theme broken access control7.5CNA v3.10.4%2026-07-23
CVE-2026-65499PeproDev Ultimate Invoice WordPress plugin broken access control6.5CNA v3.10.3%2026-07-23
CVE-2026-65498Complianz WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65497Complianz WordPress plugin PHP object injection7.2CNA v3.10.5%2026-07-23Fix
CVE-2026-65496Complianz WordPress plugin server side request forgery (SSRF)4.4CNA v3.10.2%2026-07-23Fix
CVE-2026-65495Dokan Pro WordPress plugin broken access control7.5CNA v3.10.4%2026-07-23
CVE-2026-65494Dokan Pro WordPress plugin SQL injection7.1CNA v3.10.3%2026-07-23
CVE-2026-65493Dokan Pro WordPress plugin PHP object injection7.5CNA v3.10.4%2026-07-23
CVE-2026-65492Dokan Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-65491Query Wrangler WordPress plugin broken access control4.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65490Create by Mediavine WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65489LA-Studio Element Kit for Elementor WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65488LA-Studio Element Kit for Elementor WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2026-07-23Fix
CVE-2026-65487Photography WordPress theme broken access control5.3CNA v3.10.3%2026-07-23
CVE-2026-65486Event post WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65485Content Control WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23
CVE-2026-65484Style Kits WordPress plugin broken access control6.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65483HashThemes Demo Importer WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-07-23Fix
CVE-2026-65482LA-Studio Element Kit for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23
CVE-2026-65481Vino WordPress theme local file inclusion7.5CNA v3.10.4%2026-07-23
CVE-2026-65480TheGem WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-65479Reviewer WordPress plugin broken access control5.4CNA v3.10.3%2026-07-23
CVE-2026-65478ListingPro WordPress plugin broken access control5.4CNA v3.10.2%2026-07-23
CVE-2026-65477Tonda Core WordPress plugin local file inclusion7.5CNA v3.10.4%2026-07-23
CVE-2026-65476Civi WordPress theme broken access control5.3CNA v3.10.3%2026-07-23
CVE-2026-65475WP Chill Modula Image Gallery stored cross-site scripting6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-65474Ninja Tables WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65473Virtue/Ascend/Pinnacle Toolkit WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-65472Kit (formerly ConvertKit) WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65471Avada Core WordPress plugin cross-site request forgery (CSRF)9.6CNA v3.10.2%2026-07-23Fix
CVE-2026-65470Fluent Support WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-65469AWP Classifieds WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65468JetBooking WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65467JetEngine WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2026-07-23Fix
CVE-2026-65466JetBooking WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2026-07-23Fix
CVE-2026-65465JetElements For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-65464GiveWP WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2026-07-23Fix
CVE-2026-65463Masteriyo - LMS WordPress plugin insecure direct object references (IDOR)5.4CNA v3.10.3%2026-07-23Fix
CVE-2026-65462Uncanny Automator WordPress plugin SQL injection7.6CNA v3.10.4%2026-07-23Fix
CVE-2026-65461Really Simple CSV Importer WordPress plugin arbitrary file upload9.1CNA v3.10.5%2026-07-23Fix
CVE-2026-65460Zarinpal Gateway WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-07-23Fix
CVE-2026-65458WordPress Polylang and Polylang Pro plugins plugin sensitive data exposure4.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65457ЮKassa для WooCommerce WordPress plugin broken access control4.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65456Product Slider for WooCommerce WordPress plugin insecure direct object references (IDOR)4.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65455MapSVG WordPress plugin arbitrary file upload9.1CNA v3.10.5%2026-07-23Fix
CVE-2026-65454Quiz And Survey Master WordPress plugin SQL injection8.5CNA v3.10.4%2026-07-23Fix
CVE-2026-65453Ebook Store WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65452Ebook Store WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-65451MapSVG WordPress plugin SQL injection8.5CNA v3.10.4%2026-07-23Fix
CVE-2026-65450MapSVG WordPress plugin SQL injection8.5CNA v3.10.4%2026-07-23Fix
CVE-2026-65449MapSVG WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-65431Joomla extension regularlabs.com Zipslip in GeoIP extension9.8CISA ADP v3.10.6%2026-07-23
CVE-2026-65430Joomla extension regularlabs.com MaxMind credential leakage in GeoIP extension7.5CISA ADP v3.10.4%2026-07-23
CVE-2026-65010Datasets Symlink-following arbitrary file write via Extractor.extract4.4CNA v4.00.2%2026-07-23
CVE-2026-64876RegularLabs GeoIP database update action cross-site request forgery8.8CISA ADP v3.10.2%2026-07-23
CVE-2026-64875Joomla extension regularlabs.com IP spoofing vulnerability in GeoIP extension6.5CISA ADP v3.10.4%2026-07-23
CVE-2026-64874Joomla extension regularlabs.com CDN credential leakage Cache Cleaner Pro extension9.8CISA ADP v3.10.5%2026-07-23
CVE-2026-64873Joomla extension regularlabs.com SSRF in Cache Cleaner Pro extension9.8CISA ADP v3.10.5%2026-07-23
CVE-2026-64872Joomla extension regularlabs.com path traversal in Cache Cleaner Pro extension6.5CISA ADP v3.10.3%2026-07-23
CVE-2026-64871RegularLabs Cache Cleaner cache purge action cross-site request forgery5.4CISA ADP v3.10.1%2026-07-23
CVE-2026-64815JetBrains IntelliJ IDEA code injection8.1CNA v3.10.5%2026-07-23Fix
CVE-2026-64814JetBrains IntelliJ IDEA missing authorization8.6CNA v3.10.4%2026-07-23Fix
CVE-2026-64813JetBrains IntelliJ IDEA client-side enforcement of server-side security10.0CNA v3.10.5%2026-07-23Fix
CVE-2026-64812JetBrains IntelliJ IDEA missing authentication10.0CNA v3.10.5%2026-07-23Fix
CVE-2026-64811JetBrains IntelliJ IDEA inclusion of untrusted functionality7.8CNA v3.10.2%2026-07-23Fix
CVE-2026-64810JetBrains IntelliJ IDEA cross-site scripting4.3CNA v3.10.3%2026-07-23Fix
CVE-2026-64809JetBrains PhpStorm inclusion of untrusted functionality8.4CNA v3.10.2%2026-07-23Fix
CVE-2026-64808JetBrains PhpStorm inclusion of untrusted functionality8.4CNA v3.10.2%2026-07-23Fix
CVE-2026-64807JetBrains WebStorm inclusion of untrusted functionality7.8CNA v3.10.2%2026-07-23Fix
CVE-2026-64806JetBrains WebStorm inclusion of untrusted functionality8.4CNA v3.10.2%2026-07-23Fix
CVE-2026-64805JetBrains WebStorm inclusion of untrusted functionality8.4CNA v3.10.2%2026-07-23Fix
CVE-2026-64804JetBrains WebStorm inclusion of untrusted functionality8.4CNA v3.10.2%2026-07-23Fix
CVE-2026-64803JetBrains GoLand code injection7.8CNA v3.10.2%2026-07-23Fix
CVE-2026-64802JetBrains GoLand code injection7.8CNA v3.10.2%2026-07-23Fix
CVE-2026-64800JetBrains GoLand sensitive information in log files3.5CNA v3.10.8%2026-07-23Fix
CVE-2026-64799Joomla extension regularlabs.com SSRF7.5CISA ADP v3.10.4%2026-07-23
CVE-2026-64785Apple swift-nio-http2: Missing CR/LF/NUL validation in header values5.3CISA ADP v3.10.3%2026-07-23Fix
CVE-2026-64611Red Hat Enterprise Linux 10 libcupsfilters: Cups-filters: Libcupsfilters: Cpu exhaustion7.5CNA v3.10.6%2026-07-23Fix
CVE-2026-64600Linux kernel XFS reflink race condition7.8CNA v3.10.5%2026-07-23Exploit codeFix
CVE-2026-63765Chatwoot Unauthenticated ActiveStorage Direct upload arbitrary Blob Creation8.8CNA v4.00.7%2026-07-23Fix
CVE-2026-637329router remote code execution via default password9.4CNA v4.01.0%2026-07-23Fix
CVE-2026-63359Appriss Insights VINE SQLI9.3CNA v4.00.7%2026-07-23Fix
CVE-2026-633139Router server-side request forgery via /v1/web/fetch8.3CNA v4.00.5%2026-07-23Fix
CVE-2026-63226Ricoh printers and Multifunction Printers (MFPs) improper channel restriction6.9CNA v4.00.4%2026-07-23
CVE-2026-61981Simple Link Directory Pro WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2026-07-23Fix
CVE-2026-61973ShopLentor Pro WordPress plugin broken access control4.3CNA v3.10.3%2026-07-23Fix
CVE-2026-61972ShopLentor Pro WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-61954PayU India WordPress plugin broken access control7.5CNA v3.10.3%2026-07-23Fix
CVE-2026-61951TrueBooker WordPress plugin privilege escalation9.8CNA v3.10.5%2026-07-23Fix
CVE-2026-61950TrueBooker WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-23Fix
CVE-2026-61949Bookly WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-23Fix
CVE-2026-61948WPDM Premium Packages WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-23Fix
CVE-2026-61947Form Vibes Database Manager for Forms WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-61946Easy Appointments WordPress plugin insecure direct object references (IDOR)6.5CNA v3.10.3%2026-07-23Exploit codeFix
CVE-2026-61945WooCommerce Product Stock Alert WordPress plugin sensitive data exposure6.5CNA v3.10.4%2026-07-23Fix
CVE-2026-61944Bookly WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-61943WPDM Premium Packages WordPress plugin broken access control7.5CNA v3.10.4%2026-07-23Fix
CVE-2026-60122GPSd gpsprof code injection via SKY.satellites used field8.5CNA v4.00.3%2026-07-23Fix
CVE-2026-59678Linux-Gaming PortProtonQt incorrect authorization7.1CNA v4.00.2%2026-07-23Fix
CVE-2026-59677SELinuxProject selinux Process Kill Attack Vector in killall in seunshare6.8CNA v4.00.1%2026-07-23Fix
CVE-2026-59676SELinuxProject selinux local file deletion Attack Vector in rm_rf in seunshare5.8CNA v4.00.1%2026-07-23Fix
CVE-2026-59555Participants Database WordPress plugin arbitrary file deletion10.0CNA v3.10.6%2026-07-23Fix
CVE-2026-59554Ziina WordPress plugin broken authentication7.5CNA v3.10.4%2026-07-23Fix
CVE-2026-59547Payment Gateway for PayPal on WooCommerce WordPress plugin broken access control7.5CNA v3.10.3%2026-07-23Fix
CVE-2026-59545miniOrange Discord Integration WordPress plugin broken authentication8.1CNA v3.10.5%2026-07-23Fix
CVE-2026-59544Thrive Quiz Builder WordPress plugin PHP object injection9.8CNA v3.10.6%2026-07-23Fix
CVE-2026-59543Advanced Views WordPress plugin remote code execution (RCE)9.9CNA v3.10.8%2026-07-23Fix
CVE-2026-59542Kali Forms WordPress plugin arbitrary file deletion7.7CNA v3.10.5%2026-07-23Fix
CVE-2026-59541WP BASE Booking WordPress plugin privilege escalation8.8CNA v3.10.4%2026-07-23Fix
CVE-2026-59540SMS Alert Order Notifications WordPress plugin privilege escalation9.8CNA v3.10.5%2026-07-23Fix
CVE-2026-59526MapSVG WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-23Fix
CVE-2026-59525Participants Database WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-23Fix
CVE-2026-59524Easy Digital Downloads WordPress plugin broken authentication6.5CNA v3.10.4%2026-07-23Fix
CVE-2026-59522WP ERP WordPress plugin broken access control6.5CNA v3.10.3%2026-07-23Fix
CVE-2026-59517Easy Form Builder WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-59514Buddyboss Platform WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-23Fix
CVE-2026-59513Masteriyo - LMS WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-59512Product Enquiry for WooCommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-57809AffiliateWP WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-57808WP EasyPay WordPress plugin arbitrary content deletion vulnerability6.5CNA v3.10.3%2026-07-23Fix
CVE-2026-57785ApusListing WordPress theme cross-site request forgery (CSRF)8.8CNA v3.10.2%2026-07-23Fix
CVE-2026-57784Ninja Forms File Uploads Extension WordPress plugin cross-site request forgery (CSRF)9.6CNA v3.10.2%2026-07-23
CVE-2026-57769Grand Photography WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23
CVE-2026-57767WP Google Maps Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-57735Breakdance WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-57717Knit Pay WordPress plugin broken access control6.5CNA v3.10.3%2026-07-23Fix
CVE-2026-57716Broadcast Live Video WordPress plugin arbitrary file deletion5.3CNA v3.10.4%2026-07-23Fix
CVE-2026-57704Smart Manager WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-57703Sunshine Photo Cart WordPress plugin broken access control6.3CNA v3.10.3%2026-07-23Fix
CVE-2026-57701Real Estate Manager Pro WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-57699Slider Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-57696Picture Gallery WordPress plugin arbitrary file deletion7.1CNA v3.10.4%2026-07-23Fix
CVE-2026-57626MailPoet WordPress plugin cross-site request forgery7.1CNA v3.10.1%2026-07-23Fix
CVE-2026-57428Sprout Clients WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-57427Download Monitor - WPForms Lock WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-57425Autopay dla WooCommerce WordPress plugin broken access control6.5CNA v3.10.3%2026-07-23Fix
CVE-2026-57397Coaching WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-57384WishList Member X WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-57374Funnel Kit Funnel Builder PRO WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-57373Funnel Kit Funnel Builder PRO WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-57370Visitor Traffic Real Time Statistics Pro WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-57367WP Booking System WordPress plugin broken access control7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-56167Microsoft Azure AI Search elevation of privilege8.5CNA v3.10.6%2026-07-23Fix
CVE-2026-56165Microsoft Account remote code execution9.8CNA v3.11.0%2026-07-23Fix
CVE-2026-56160Microsoft Azure Red Hat OpenShift (ARO) elevation of privilege9.1CNA v3.10.8%2026-07-23Fix
CVE-2026-54120Microsoft Surface remote code execution9.9CNA v3.11.0%2026-07-23Fix
CVE-2026-52688PowerDNS Recursor RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation7.5CNA v3.10.2%2026-07-23Fix
CVE-2026-52686PowerDNS Recursor wildcard CNAME proof validation bypass3.7CNA v3.10.2%2026-07-23Fix
CVE-2026-52684PowerDNS Recursor Prefetch feature allows Persistent Ghost Domain cache poisoning Attack3.7CNA v3.10.2%2026-07-23Fix
CVE-2026-52439xiandafu beetl property reflection mechanism expression language injection9.8CISA ADP v3.10.9%2026-07-23
CVE-2026-50103Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC618507.1CNA v4.00.3%2026-07-23Fix
CVE-2026-50044Inadequate encryption strength in Panduit IntraVUE by Pronetiqs7.6CNA v4.00.1%2026-07-23Fix
CVE-2026-50039Stack-based buffer overflow in MZ Automation libIEC618508.7CNA v4.00.5%2026-07-23Fix
CVE-2026-50032Null pointer dereference in MZ Automation libIEC618508.7CNA v4.00.5%2026-07-23Fix
CVE-2026-49035Stack-based buffer overflow in MZ Automation libIEC618509.2CNA v4.00.6%2026-07-23Fix
CVE-2026-48539GFI Archiver stored XSS via MailInsights.aspx5.1CNA v4.00.2%2026-07-23Fix
CVE-2026-48538GFI Archiver stored XSS via ImportSettingsWizard.ashx5.1CNA v4.00.2%2026-07-23Fix
CVE-2026-48537GFI Archiver stored XSS via FileArchiveAssistantWizard.aspx5.1CNA v4.00.2%2026-07-23Fix
CVE-2026-48536GFI Archiver stored XSS via GeneralSettingsWizard.aspx5.1CNA v4.00.2%2026-07-23Fix
CVE-2026-48535GFI Archiver stored XSS via CallHomeSettingsWizard.aspx5.1CNA v4.00.2%2026-07-23Fix
CVE-2026-48534GFI Archiver stored XSS via ImapServerWizard.aspx5.1CNA v4.00.2%2026-07-23Fix
CVE-2026-48532GFI Archiver stored XSS via FAARetentionPolicyWizard.aspx5.1CNA v4.00.2%2026-07-23Fix
CVE-2026-48531GFI Archiver stored XSS via RetentionPolicyWizard.aspx5.1CNA v4.00.2%2026-07-23Fix
CVE-2026-48530GFI Archiver stored XSS via CategorizationPolicyWizard.aspx5.1CNA v4.00.2%2026-07-23Fix
CVE-2026-48013Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation4.1CNA v3.10.4%2026-07-23Fix
CVE-2026-48012Shopware SSO referer trust leading to an arbitrary redirect target4.3CNA v3.10.3%2026-07-23Fix
CVE-2026-47769APIFold vulnerable to Unauthenticated Webhook Event injection5.3CNA v3.10.5%2026-07-23
CVE-2026-47755ITFlow vulnerable to Authenticated Cross-Tenant credential disclosure6.5CNA v3.10.4%2026-07-23Fix
CVE-2026-47752Quenary Tugtainer notification templates server-side template injection9.9CNA v3.10.5%2026-07-23Fix
CVE-2026-47743Shopper: Multiple data integrity and disclosure issues in admin Livewire components8.7CNA v3.10.4%2026-07-23Fix
CVE-2026-47724juev nebula-mesh API endpoints privilege escalation9.9CNA v3.10.5%2026-07-23Fix
CVE-2026-47723juev nebula-mesh web UI and API responses clickjacking7.1CNA v4.00.5%2026-07-23Fix
CVE-2026-47722juev nebula-mesh agent config.yml generator code injection8.7CNA v4.00.5%2026-07-23Fix
CVE-2026-47670DbGate vulnerable to authenticated remote code execution via loadReader functionName code injection9.4CNA v4.01.8%2026-07-23NucleiExploit codeFix
CVE-2026-47669DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE9.3CNA v4.00.5%2026-07-23Fix
CVE-2026-47668DbGate: Unauthenticated remote code execution via JSON Script Runner10.0CNA v3.13.9%2026-07-23NucleiExploit codeFix
CVE-2026-44955Pronetiqs Panduit IntraVUE information disclosure6.9CNA v4.00.3%2026-07-23Fix
CVE-2026-44909Proxygen HTTP/2 flow control denial of service7.5CNA v3.10.6%2026-07-23Fix
CVE-2026-44210Kata Containers virtiofsd argument injection5.8CNA v4.00.6%2026-07-23Fix
CVE-2026-43823Apple swift-crypto double free7.5CISA ADP v3.10.4%2026-07-23Fix
CVE-2026-43820Apple swift-nio-ssl out-of-bounds read7.7CISA ADP v3.10.1%2026-07-23
CVE-2026-42933Unintended proxy or intermediary in Panduit IntraVUE by Pronetiqs10.0CNA v4.00.5%2026-07-23Fix
CVE-2026-40430Plaintext storage of a password in Panduit IntraVUE by Pronetiqs8.7CNA v4.00.4%2026-07-23Fix
CVE-2026-39155Knot DNS online signing module denial of service6.5CISA ADP v3.10.2%2026-07-23Fix
CVE-2026-38764Unistal Systems Protegent 360 pgsecdl.sys driver privilege escalation7.8CISA ADP v3.10.1%2026-07-23Exploit code
CVE-2026-34496victor Web Priviledge Escalation7.1CNA v4.00.3%2026-07-23Fix
CVE-2026-28698Pronetiqs IntraVUE information disclosure9.2CNA v4.00.4%2026-07-23Fix
CVE-2026-27423Participants Database WordPress plugin broken access control4.3CNA v3.10.3%2026-07-23Fix
CVE-2026-27422YT Player WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23
CVE-2026-27418WP Fast Total Search WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-27403Hubbub Lite WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-23Fix
CVE-2026-27399MarketKing WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-27392uListing WordPress plugin broken access control4.3CNA v3.10.3%2026-07-23
CVE-2026-27391uListing WordPress plugin broken access control5.4CNA v3.10.3%2026-07-23
CVE-2026-27377QuickCal - Appointment Booking Calendar for WordPress plugin broken access control6.7CNA v3.10.4%2026-07-23
CVE-2026-27372PeproDev Ultimate Invoice WordPress plugin sensitive data exposure6.5CNA v3.10.4%2026-07-23
CVE-2026-27355Ditty WordPress plugin broken access control5.3CNA v3.10.4%2026-07-23Fix
CVE-2026-27064Mailster WordPress plugin arbitrary file upload9.1CNA v3.10.5%2026-07-23Fix
CVE-2026-25800Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly7.5CNA v3.10.8%2026-07-23Fix
CVE-2026-25466WP Go Maps WordPress plugin broken access control5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-25427eRoom WordPress plugin broken access control5.4CNA v3.10.3%2026-07-23
CVE-2026-25424Mediavine Control Panel WordPress plugin broken access control4.3CNA v3.10.3%2026-07-23Fix
CVE-2026-25405eRoom WordPress plugin SQL injection8.5CNA v3.10.4%2026-07-23
CVE-2026-24639Photo Block WordPress plugin server side request forgery (SSRF)4.4CNA v3.10.2%2026-07-23
CVE-2026-24628Photo Gallery by Supsystic WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-07-23Fix
CVE-2026-24552Create by Mediavine WordPress plugin SQL injection8.5CNA v3.10.4%2026-07-23Fix
CVE-2026-24537WP Accessibility Helper (WAH) WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-07-23Fix
CVE-2026-21723Grafana OSS alertmanager templates test endpoint denial of service5.3CNA v3.10.3%2026-07-23Fix
CVE-2026-21655C-CURE 9000 and Victor Application Server deserialization of untrusted data8.7CNA v4.00.5%2026-07-23Fix
CVE-2026-21653CCure and Victor Application Server server side request forgery7.2CNA v4.00.4%2026-07-23
CVE-2026-16807Google Chrome Codecs out-of-bounds write8.8CISA ADP v3.10.3%2026-07-23Fix
CVE-2026-16806Google Chrome WebMCP use-after-free8.8CISA ADP v3.10.5%2026-07-23Fix
CVE-2026-16805Google Chrome Blink use-after-free8.8CISA ADP v3.10.4%2026-07-23Fix
CVE-2026-16804Google Chrome Input use-after-free8.3CISA ADP v3.10.3%2026-07-23Fix
CVE-2026-16796Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages8.4CNA v4.00.7%2026-07-23Fix
CVE-2026-16768Gdk-Pixbuf: Out-of-bounds read in ico parser5.3CNA v3.10.2%2026-07-23
CVE-2026-16767Ne-Lexa php-zip ZIP ZipFile.php extractTo path traversal6.9CNA v4.00.7%2026-07-23
CVE-2026-16765CodeAstro Online Classroom loginlinkadmin.php SQL injection6.9CNA v4.00.4%2026-07-23
CVE-2026-16764OWASP DefectDojo API/Web serializers.py UserSerializer privileges management5.3CNA v4.00.4%2026-07-23Exploit codeFix
CVE-2026-16763localstack serverless-localstack Configuration index.js os command injection4.8CNA v4.01.2%2026-07-23
CVE-2026-16756aws-smithy-http-server request timeout handling denial of service8.7CNA v4.00.8%2026-07-23Fix
CVE-2026-16745Red Hat OpenShift AI console backend authentication authentication bypass8.8CNA v3.10.5%2026-07-23Fix
CVE-2026-16735A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried out4.8CNA v4.01.1%2026-07-23
CVE-2026-16733bahmutov find-cypress-specs Branch index.js shell.exec os command injection4.8CNA v4.01.1%2026-07-23
CVE-2026-16723Remote code execution in Fastjson9.0CNA v3.10.7%2026-07-23Emerging ThreatsExploit code
CVE-2026-16653boazsegev facil.io Public Folder http.c http_sendfile2 path traversal6.9CNA v4.00.7%2026-07-23
CVE-2026-16584AWS API MCP Server Security Policy Bypass via Startup failure7.3CNA v4.00.2%2026-07-23Fix
CVE-2026-16287Root command injection via Offline Update in TÜBİTAK BİLGEM's pardus-update7.8CNA v3.10.8%2026-07-23Fix
CVE-2026-16078WCPOS WordPress plugin path traversal to arbitrary file read6.5CNA v3.10.9%2026-07-23Fix
CVE-2026-16002Out-of-bounds read in MZ Automation lib608708.8CNA v4.00.4%2026-07-23Fix
CVE-2026-15981SAML Single Sign On WordPress plugin unauthenticated authentication bypass9.8CNA v3.11.9%2026-07-23Reported exploitedExploit codeFix
CVE-2026-15968Stored XSS vulnerability in MOVEit Transfer7.1CNA v3.10.3%2026-07-23Fix
CVE-2026-15967MOVEit Transfer refresh-token processing does not enforce updated account restrictions7.5CNA v3.10.4%2026-07-23Fix
CVE-2026-15966Improper CORS handling in MOVEit Transfer7.5CNA v3.10.4%2026-07-23Fix
CVE-2026-15906Premium Packages WordPress plugin authenticated (Admin+) SQL injection via orderby parameter6.5CNA v3.10.5%2026-07-23Fix
CVE-2026-15827GutenKit WordPress plugin missing authorization unauthenticated sensitive information exposure5.3CNA v3.10.5%2026-07-23Fix
CVE-2026-15794Grid/List View for WooCommerce WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-23Fix
CVE-2026-15786WP Encryption WordPress plugin arbitrary file write4.4CNA v3.10.6%2026-07-23Fix
CVE-2026-15761Tickera WordPress plugin authenticated (Staff+) SQL injection via tc_event_filter parameter6.5CNA v3.10.5%2026-07-23Fix
CVE-2026-15687kubernetes-client/java path traversal via non-tar copyDirectoryFromPod2.7CNA v3.00.4%2026-07-23
CVE-2026-15647Brands for WooCommerce WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-07-23Fix
CVE-2026-15646Brands for WooCommerce WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-23Fix
CVE-2026-15630Casdoor incorrect authorization9.9CISA ADP v3.10.3%2026-07-23Fix
CVE-2026-15617Logto principal/domain lookup without case normalization9.1CISA ADP v3.10.4%2026-07-23Fix
CVE-2026-15616Logto local MFA not enforced during SSO sign-in9.1CISA ADP v3.10.5%2026-07-23Fix
CVE-2026-15615Logto SAML Conditions element vulnerability7.5CISA ADP v3.10.2%2026-07-23Fix
CVE-2026-15614Logto IdP-initiated SAML sessions not reliably invalidated (replay)7.5CISA ADP v3.10.3%2026-07-23Fix
CVE-2026-15612Logto LOIDC nonce validation bypass9.1CISA ADP v3.10.2%2026-07-23Fix
CVE-2026-15611Logto unverified email-based SSO account linking9.1CISA ADP v3.10.5%2026-07-23Fix
CVE-2026-15448Tickera WordPress plugin authenticated (Staff+) SQL injection via tc_order_status_filter parameter6.5CNA v3.10.4%2026-07-23Fix
CVE-2026-15404Bulk Page Generator WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-23Fix
CVE-2026-15394Header Footer Script Adder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-23Fix
CVE-2026-15348Premium Packages WordPress plugin authentication bypass to Non-Admin via wpdmppdl parameter6.3CNA v3.10.6%2026-07-23Fix
CVE-2026-15212WPO365 WordPress plugin cross-site request forgery8.8CNA v3.10.2%2026-07-23Fix
CVE-2026-15074@fastify/static vulnerable to route guard bypass via path traversal7.5CNA v3.10.7%2026-07-23Fix
CVE-2026-15037Qt XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization2.9CNA v4.00.4%2026-07-23Fix
CVE-2026-15017MDJM Event Management WordPress plugin privilege escalation8.8CNA v3.10.7%2026-07-23Fix
CVE-2026-15015MountDev AI MCP Connector for WordPress plugin unauthenticated privilege escalation9.8CNA v3.12.6%2026-07-23NucleiFix
CVE-2026-15011Customer Support Ticket System and Helpdesk WordPress plugin unauthenticated code injection9.8CNA v3.11.0%2026-07-23Fix
CVE-2026-14481Equalize Digital Accessibility Checker WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-07-23Fix
CVE-2026-14291Security Ninja two-factor authentication authentication bypass7.5CISA ADP v3.10.5%2026-07-23Fix
CVE-2026-14282GoDAM WordPress plugin unauthenticated arbitrary file upload via WPForms file upload field9.8CNA v3.11.3%2026-07-23Exploit codeFix
CVE-2026-14257brace-expansion DoS via unbounded expansion length causing an out-of-memory process crash7.5CNA v3.10.6%2026-07-23Fix
CVE-2026-13119Registrations for the Events Calendar WordPress plugin SQL injection6.5CNA v3.10.4%2026-07-23Fix
CVE-2026-13009AI Copilot WordPress plugin authenticated (Subscriber+) SQL injection via order[0][dir] parameter6.5CNA v3.10.5%2026-07-23Fix
CVE-2026-12421ARforms WordPress plugin unauthenticated stored cross-site scripting via password field Values7.2CNA v3.10.3%2026-07-23Fix
CVE-2026-12353Red Hat Certificate System 9 rhcs: Memory leak during HTTPS connection leads to denial of service5.3CNA v3.10.4%2026-07-23
CVE-2026-12082Praison AI SEO WordPress plugin unauthenticated Multiple missing authorization7.5CISA ADP v3.10.4%2026-07-23Fix
CVE-2026-11804Tridium Niagara Framework improper handling of insufficient permissions5.2CNA v3.10.2%2026-07-23Fix
CVE-2026-10697Progress MOVEit Transfer improper authentication7.5CNA v3.10.6%2026-07-23Fix
CVE-2026-9729Web Push Notifications WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-23
CVE-2026-9713Product Designer for WooCommerce WordPress Lumise plugin unauthenticated SQL injection7.5CNA v3.10.5%2026-07-23Fix
CVE-2026-9635WP Shortcode by MyThemeShop WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-23
CVE-2026-9577Post Status Notifier Lite WordPress plugin reflected XSS via mod parameter4.8CISA ADP v3.10.2%2026-07-23Fix
CVE-2026-9066WP Compress WordPress plugin reflected XSS via test_zone6.1CISA ADP v3.10.3%2026-07-23Fix
CVE-2026-8287Unrestricted file upload in BizimHesap Information Systems' Online Pre-Accounting Software4.3CNA v3.10.4%2026-07-23
CVE-2026-7534SUMO Reward Points for WooCommerce WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-07-23Fix
CVE-2026-7232FormCraft WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-07-23Fix
CVE-2026-7120@fastify/static vulnerable to authorization bypass via Non-Canonical URL Paths5.3CNA v3.10.4%2026-07-23Fix
CVE-2026-6924Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path8.7CNA v4.00.4%2026-07-23Fix
CVE-2026-6516Zoho ManageEngine ADAudit Plus remote code execution10.0CNA v3.14.7%2026-07-23Fix
CVE-2026-6390GNU nano multi-buffer error message handling format string6.8CNA v3.10.2%2026-07-23Fix
CVE-2026-65650Elgg resource exhaustion4.3CNA v3.10.5%2026-07-22Exploit codeFix
CVE-2026-65603Grav Login plugin privilege escalation via Profile Update8.7CNA v4.00.4%2026-07-22Fix
CVE-2026-65602Traefik IngressRouteTCP ServersTransport Namespace Bypass8.8NVD v3.10.3%2026-07-22Fix
CVE-2026-65601Traefik Namespace Confusion via HTTPRoute ExtensionRef8.8NVD v3.10.5%2026-07-22Fix
CVE-2026-65600Traefik authentication bypass via ReplacePathRegex5.3NVD v3.10.6%2026-07-22Emerging ThreatsFix
CVE-2026-65599n8n,, and credential exposure via JWT header6.5v3.10.2%2026-07-22Fix
CVE-2026-65598n8n remote code execution via Git Clone7.5v3.10.3%2026-07-22Fix
CVE-2026-65597n8n DOM-based XSS via Unsandboxed iframe5.4NVD v3.10.3%2026-07-22Fix
CVE-2026-65596n8n Credential Exfiltration via GraphQL Node8.1v3.10.4%2026-07-22Fix
CVE-2026-65595n8n and privilege escalation via Token Exchange8.8v3.10.7%2026-07-22Fix
CVE-2026-65594n8n Missing OAuth Authorization Check6.5v3.10.4%2026-07-22Fix
CVE-2026-65593n8n,, and SSRF via Dynamic Node parameters5.4v3.10.2%2026-07-22Fix
CVE-2026-65592n8n Stored DOM XSS via cachedResultUrl5.4NVD v3.10.2%2026-07-22Fix
CVE-2026-65591n8n Sanitizer Bypass remote code execution8.8v3.10.7%2026-07-22Exploit codeFix
CVE-2026-65590n8n Shell sandbox bypass on Linux Windows9.8v3.10.6%2026-07-22Fix
CVE-2026-65589n8n credential exposure via LLM Node Execution Data6.5v3.10.5%2026-07-22Fix
CVE-2026-65016n8n,, and privilege escalation via SSO Instance-Role8.8v3.10.4%2026-07-22Fix
CVE-2026-65015n8n privilege escalation via run_node_tool8.8v3.10.6%2026-07-22Fix
CVE-2026-65014n8n authentication bypass via test-webhook5.3v3.10.6%2026-07-22Fix
CVE-2026-65013Onlook tRPC insecure direct object reference via multiple procedures8.7CNA v4.00.5%2026-07-22
CVE-2026-65012InvokeAI Unauthenticated Directory Enumeration via scan_folder6.3CNA v4.00.4%2026-07-22Fix
CVE-2026-65011Graylog2 server missing permission check on Event Definition Duplicate5.3CNA v4.00.4%2026-07-22
CVE-2026-64835FFmpeg out-of-bounds memory access in ADX Audio Decoder8.7CNA v4.00.5%2026-07-22Fix
CVE-2026-64834FFmpeg infinite loop DoS via RTP/ASF Demuxer8.7CNA v4.00.7%2026-07-22Fix
CVE-2026-64833FFmpeg out-of-bounds read via S/PDIF Muxer spdifenc.c7.1CNA v4.00.4%2026-07-22Fix
CVE-2026-64832FFmpeg double free in NVDEC Hardware Decoder via nvdec.c8.7CNA v4.00.3%2026-07-22Fix
CVE-2026-64831FFmpeg stack buffer overflow in Vulkan HEVC Decoder8.7CNA v4.00.9%2026-07-22Fix
CVE-2026-64830FFmpeg heap buffer overflow via VobSub Subtitle Demuxer8.7CNA v4.00.6%2026-07-22Fix
CVE-2026-64829Question2Answer session fixation via Forgot-Password Flow9.1CNA v4.00.4%2026-07-22
CVE-2026-64828Froiden TableTrack stored XSS via Order Notes field5.3CNA v4.00.4%2026-07-22
CVE-2026-64798Joomla extension regularlabs.com Insecure login URL keys in IP login extension9.1CISA ADP v3.10.4%2026-07-22
CVE-2026-64797Joomla extension regularlabs.com IP spoofing vulnerability in IP login extension7.5CISA ADP v3.10.3%2026-07-22
CVE-2026-64796Joomla extension regularlabs.com various code injection vectors in Sourcerer extension9.8CISA ADP v3.10.5%2026-07-22
CVE-2026-64795Joomla extensions cross-site scripting5.4CISA ADP v3.10.2%2026-07-22
CVE-2026-64794Articles Anywhere and Users Anywhere extensions information disclosure6.5CISA ADP v3.10.4%2026-07-22
CVE-2026-64793regularlabs.com Articles Anywhere and Modules Anywhere extensions for Joomla improper access control9.1CISA ADP v3.10.4%2026-07-22
CVE-2026-64792Joomla extensions Smart Search indexing information disclosure7.5CISA ADP v3.10.4%2026-07-22
CVE-2026-64791Regular Labs Extension Manager cross-site request forgery8.8CISA ADP v3.10.2%2026-07-22
CVE-2026-63685Joomla extension regularlabs.com authorization bypass in DB Replacer extension8.8CISA ADP v3.10.4%2026-07-22
CVE-2026-63684Content Templater, ReReplacer and Snippets extensions for Joomla cross-site request forgery8.8CISA ADP v3.10.2%2026-07-22
CVE-2026-63683Joomla extension regularlabs.com client IP spoofing vulnerability in Regular Labs conditions manager7.5CISA ADP v3.10.4%2026-07-22
CVE-2026-63281Joomla extension regularlabs.com XSS vulnerability in Regular Labs conditions manager4.8CISA ADP v3.10.2%2026-07-22
CVE-2026-63280Joomla extensions conditions manager cross-site request forgery8.8CISA ADP v3.10.2%2026-07-22
CVE-2026-63265regularlabs.com Regular Labs extensions AJAX endpoints cross-site request forgery8.0CISA ADP v3.10.2%2026-07-22
CVE-2026-63264Joomla extension joomshopping.com Reflective XSS in JoomShopping5.3CNA v4.00.4%2026-07-22
CVE-2026-63048Joomla extension joomlack.fr improper access control in Page Builder CK9.4CNA v4.00.4%2026-07-22
CVE-2026-63047joomdonation.com Events Booking invoice download improper access control7.5CISA ADP v3.10.4%2026-07-22
CVE-2026-62145A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.7.5CNA v3.10.4%2026-07-22
CVE-2026-62144An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways.9.1CISA ADP v3.11.0%2026-07-22
CVE-2026-61392Hikvision DS-2CD Series some information disclosure5.3CNA v3.10.3%2026-07-22
CVE-2026-61391Hikvision DS-2CD Series some stack-based buffer overflow7.2CNA v3.10.5%2026-07-22
CVE-2026-61390Hikvision DS-2CD Series some heap-based buffer overflow7.7CNA v3.10.4%2026-07-22
CVE-2026-61246Oracle Platform Security for Java Centralized Thirdparty Jars component takeover8.8CNA v3.10.5%2026-07-22Fix
CVE-2026-60455Oracle Platform Security for Java Centralized Thirdparty Jars component takeover8.8CNA v3.10.4%2026-07-22Fix
CVE-2026-60439Oracle Platform Security for Java Centralized Thirdparty Jars component takeover8.8CNA v3.10.5%2026-07-22Fix
CVE-2026-60373Oracle Platform Security for Java Centralized Thirdparty Jars component takeover8.8CNA v3.10.5%2026-07-22Fix
CVE-2026-60372Oracle Platform Security for Java Centralized Thirdparty Jars component takeover9.8CNA v3.10.5%2026-07-22Fix
CVE-2026-60371Oracle Platform Security for Java Centralized Thirdparty Jars component takeover8.0CNA v3.10.3%2026-07-22Fix
CVE-2026-60370Oracle Platform Security for Java Centralized Thirdparty Jars component takeover7.5CNA v3.10.3%2026-07-22Fix
CVE-2026-60369Oracle Platform Security for Java Centralized Thirdparty Jars component takeover9.9CNA v3.10.5%2026-07-22Fix
CVE-2026-60368Oracle Platform Security for Java Centralized Thirdparty Jars component takeover8.8CNA v3.10.5%2026-07-22Fix
CVE-2026-60367Oracle Platform Security for Java Centralized Thirdparty Jars component takeover9.8CNA v3.10.5%2026-07-22Fix
CVE-2026-60366Oracle Platform Security for Java Centralized Thirdparty Jars component takeover10.0CNA v3.10.5%2026-07-22Fix
CVE-2026-57600Hikvision DS-2CD Series improper input validation7.5CNA v3.10.4%2026-07-22
CVE-2026-57599Hikvision DS-2CD Series some privilege escalation6.6CNA v3.10.4%2026-07-22
CVE-2026-56844Veeam Backup and Replication path traversal8.4CNA v4.00.2%2026-07-22
CVE-2026-56444NLnet Labs Unbound serve-expired handling vulnerability5.9CNA v3.10.4%2026-07-22Fix
CVE-2026-56416NLnet Labs Unbound DNSSEC validator heap-based buffer overflow4.8CNA v3.10.1%2026-07-22Fix
CVE-2026-55991NLnet Labs Unbound remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp25.9CNA v3.10.4%2026-07-22Fix
CVE-2026-55990Packet of death for a DNSCrypt misconfigured Unbound5.9CNA v3.10.4%2026-07-22Fix
CVE-2026-55973NLnet Labs Unbound dns-error-reporting: Yes leads to stack buffer overflow7.5CNA v3.10.5%2026-07-22Fix
CVE-2026-55717NLnet Labs Unbound serve-expired-client-timeout and response-ip CNAME redirect could lead to a crash5.9CNA v3.10.4%2026-07-22Fix
CVE-2026-55708NLnet Labs Unbound unbound-control local data views vulnerability3.1CNA v3.10.2%2026-07-22Fix
CVE-2026-54478NLnet Labs Unbound DNS Cookie bypass when combined with proxy-protocol use3.7CNA v3.10.2%2026-07-22Fix
CVE-2026-53910Heap-based buffer overflow in GNU diffutils2.1CNA v4.00.3%2026-07-22Fix
CVE-2026-52863NLnet Labs Unbound memory corruption could lead to crash and denial of service5.9CNA v3.10.4%2026-07-22Fix
CVE-2026-50252NLnet Labs Unbound possible cache poisoning attack by mapping source port population per thread5.7CNA v4.00.2%2026-07-22Fix
CVE-2026-50251NLnet Labs Unbound attacker supplied ''/'::' glue triggers defensive full-cache flush5.3CNA v3.10.4%2026-07-22Fix
CVE-2026-50248NLnet Labs Unbound BOGUS configured primary hostname accepted for XFR in auth/rpz zones6.5CNA v3.10.2%2026-07-22Fix
CVE-2026-50243NLnet Labs Unbound 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL6.3CNA v4.00.1%2026-07-22Fix
CVE-2026-50046NLnet Labs Unbound DNS-over-TLS forwarding use-after-free5.9CNA v3.10.4%2026-07-22Fix
CVE-2026-50045NLnet Labs Unbound max-global-quota reset by DNSSEC validation restarts5.3CNA v3.10.5%2026-07-22Fix
CVE-2026-49499Dell PowerProtect Data Manager elevation of privilege8.8CNA v3.10.4%2026-07-22Fix
CVE-2026-48029Struktur libheif grid tile decoder out-of-bounds read7.1CNA v3.10.4%2026-07-22Fix
CVE-2026-46738Dell PowerProtect Data Manager improper input validation9.1CNA v3.10.5%2026-07-22Fix
CVE-2026-46737Dell PowerProtect Data Manager improper input validation6.7CNA v3.10.6%2026-07-22Fix
CVE-2026-46582NLnet Labs Unbound serve-expired reply path vulnerability3.7CNA v3.10.2%2026-07-22Fix
CVE-2026-45820fflate unzipSync can enter an infinite loop when parsing malformed ZIP64 archives7.5NVD v3.10.5%2026-07-22Fix
CVE-2026-44690NLnet Labs Unbound cross-zone wildcard cache poisoning via RRSIG.labels manipulation7.5CNA v3.10.1%2026-07-22Fix
CVE-2026-44687NLnet Labs Unbound harden-below-nxdomain zone guard off-by-one error3.7CNA v3.10.2%2026-07-22Fix
CVE-2026-44621NLnet Labs Unbound libunbound reply threshold handling denial of service5.9CNA v3.10.2%2026-07-22Fix
CVE-2026-44276Dell PowerProtect Data Manager information disclosure6.0CNA v3.10.2%2026-07-22Fix
CVE-2026-44192Ansible-lightspeed: Ansible lightspeed mcp server: Remote code execution and data exfiltration6.6CNA v3.10.2%2026-07-22
CVE-2026-44191Ansible-lightspeed: Visual studio code ansible lightspeed extension: Remote code execution7.8CNA v3.10.8%2026-07-22
CVE-2026-44190Ansible-lightspeed: Ansible lightspeed visual studio code extension: Arbitrary code execution7.8CNA v3.10.8%2026-07-22
CVE-2026-44189Ansible-lightspeed: Visual studio code ansible lightspeed extension: Arbitrary code execution7.8CNA v3.11.0%2026-07-22
CVE-2026-44187Red Hat Ansible Automation Platform 2 information disclosure3.3CNA v3.10.1%2026-07-22
CVE-2026-42955NLnet Labs Unbound glue record cache vulnerability3.7CNA v3.10.2%2026-07-22Fix
CVE-2026-41637NLnet Labs Unbound DNS-over-QUIC query handling vulnerability3.7CNA v3.10.4%2026-07-22Fix
CVE-2026-40714Dell PowerProtect Data Manager improper input validation7.2CNA v3.10.5%2026-07-22Fix
CVE-2026-40712Dell PowerProtect Data Manager improper input validation9.1CNA v3.10.5%2026-07-22Fix
CVE-2026-40691NLnet Labs Unbound packet of death for DNSCrypt over TCP7.5CNA v3.10.3%2026-07-22Fix
CVE-2026-38766Unistal Systems Protegent 360 sub_186f4 function privilege escalation7.8CISA ADP v3.10.1%2026-07-22Exploit code
CVE-2026-38765Unistal Systems Protegent 360 pgsecdl.sys driver privilege escalation7.8CISA ADP v3.10.1%2026-07-22Exploit code
CVE-2026-38763Unistal Systems Protegent 360 denial of service5.5CISA ADP v3.10.1%2026-07-22Exploit code
CVE-2026-32665NLnet Labs Unbound remote DNS-over-QUIC denial of service due to `quic-size` budget bypass7.5CNA v3.10.5%2026-07-22Fix
CVE-2026-22049NetApp ONTAP 9 authentication bypass8.7CNA v4.00.5%2026-07-22Fix
CVE-2026-16632boazsegev facil.io WebSocket Frame websocket_parser.h websocket_on_protocol_error input validation6.9CNA v4.00.5%2026-07-22
CVE-2026-16631publint package-manager pack.js child_process.exec os command injection4.8CNA v4.01.1%2026-07-22
CVE-2026-16630syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection4.8CNA v4.01.1%2026-07-22
CVE-2026-16629danger danger-js CLI localGetFileAtSHA.ts danger.git.diffForFile os command injection4.8CNA v4.01.1%2026-07-22Fix
CVE-2026-16628oclif JIT Plugin Entry child_process.exec os command injection4.8CNA v4.01.1%2026-07-22
CVE-2026-16624Cal.com webhook creation insecure direct object reference9.6CISA ADP v3.10.4%2026-07-22Fix
CVE-2026-16615Librest: Weak random number generation in pkce implementation6.8CNA v3.10.3%2026-07-22Fix
CVE-2026-16607Authenticated local root privilege escalation vulnerability in openFT for Linux and Oracle Solaris8.5CNA v4.00.1%2026-07-22Fix
CVE-2026-16606Unauthenticated remote code execution vulnerability in openFT for Linux and Oracle Solaris9.3CNA v4.01.1%2026-07-22Fix
CVE-2026-16560Red Hat Directory Server 389-ds-base vulnerability5.3CNA v3.10.4%2026-07-22
CVE-2026-16551Denial of service in OpenCanary's MongoDB module6.9CNA v4.00.4%2026-07-22
CVE-2026-16544Red Hat Ansible Automation Platform AWX websocket event consumer missing authorization6.5CNA v3.10.4%2026-07-22
CVE-2026-16492umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection5.1CNA v4.03.9%2026-07-22Fix
CVE-2026-16490itsourcecode Hospital Management System prescription.php SQL injection5.3CNA v4.00.3%2026-07-22
CVE-2026-16473Red Hat Enterprise Linux 10 sbc: Sbc: Heap out-of-bounds read via crafted sbc audio frame4.3CNA v3.10.3%2026-07-22Fix
CVE-2026-16270ReDoS in Open Mercato6.9CNA v4.00.5%2026-07-22Fix
CVE-2026-16232Check Point SmartConsole improper authentication9.3CNA v4.078.0%2026-07-22KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2026-16157Duplicati backup software is vulnerable to an incorrect permission assignment7.8CISA ADP v3.10.1%2026-07-22
CVE-2026-15802WP Foodbakery WordPress plugin arbitrary file deletion8.1CNA v3.10.8%2026-07-22
CVE-2026-15787Ultimate Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-07-22Fix
CVE-2026-14985Analog Way Picturall Quad Compact Mark II maintenance script privilege escalation7.8CISA ADP v3.10.2%2026-07-22Fix
CVE-2026-14932Progress Telerik UI for ASP.NET AJAX RadChart ChartImage.axd handler hard-coded cryptographic key6.5CNA v3.10.4%2026-07-22Fix
CVE-2026-14899Mozilla Thunderbird off-by-one out-of-bounds read in MIME header parser for forwarding7.5CISA ADP v3.10.3%2026-07-22Fix
CVE-2026-14881MongoDB Compass OIDC browser open command OS command injection8.4CNA v4.00.2%2026-07-22Fix
CVE-2026-14865XXE denial of service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX5.3CNA v3.10.4%2026-07-22Fix
CVE-2026-14586NLnet Labs Unbound DNS-over-QUIC support reachable assertion5.9CNA v3.10.3%2026-07-22Fix
CVE-2026-14551Local privilege escalation in servereye client (sensorhub)8.8CNA v3.10.1%2026-07-22Fix
CVE-2026-14322Timetics WordPress plugin unauthenticated Booking Auto-Approval via arbitrary payment_method5.3CISA ADP v3.10.3%2026-07-22Fix
CVE-2026-13321ISC BIND 9 DNSSEC Validation Bypass via Out-of-Zone NSEC Next field8.6CNA v3.10.2%2026-07-22Fix
CVE-2026-13204ISC BIND 9 unexpected exit in certain situations with NSEC and NSEC3 both present7.5CNA v3.10.5%2026-07-22Fix
CVE-2026-13192RadEditor PDF export SSRF vulnerability in Telerik UI for ASP.NET AJAX6.5CNA v3.10.4%2026-07-22Fix
CVE-2026-13190PersistenceFramework Unsafe Type Resolution vulnerability in Telerik UI for ASP.NET AJAX8.1CNA v3.10.5%2026-07-22Fix
CVE-2026-13189SpellChecker DictionaryLanguage path traversal vulnerability in Telerik UI for ASP.NET AJAX7.5CNA v3.10.4%2026-07-22Fix
CVE-2026-13188DialogHandler parameters tampering vulnerability in Telerik UI for ASP.NET AJAX5.9CNA v3.10.2%2026-07-22Fix
CVE-2026-13187DialogHandler Provider Type tampering vulnerability in Telerik UI for ASP.NET AJAX8.1CNA v3.10.3%2026-07-22Fix
CVE-2026-13186AppDataStorageProvider path traversal deserialization vulnerability in Telerik UI for ASP.NET AJAX8.1CNA v3.10.7%2026-07-22Fix
CVE-2026-13185PersistenceFramework Cookie deserialization vulnerability in Telerik UI for ASP.NET AJAX8.1CNA v3.10.7%2026-07-22Fix
CVE-2026-13184RadAsyncUpload Default HMAC Key Fallback vulnerability in Telerik UI for ASP.NET AJAX7.5CNA v3.10.3%2026-07-22Fix
CVE-2026-13183RadAsyncUpload Upload Metadata Timing Oracle vulnerability in Telerik UI for ASP.NET AJAX7.5CNA v3.10.4%2026-07-22Fix
CVE-2026-13182RadAsyncUpload Client-State Decrypt-vs-Parse Oracle vulnerability in Telerik UI for ASP.NET AJAX7.5CNA v3.10.4%2026-07-22Fix
CVE-2026-13181RadAsyncUpload AsyncUploadTypeName Type Resolution vulnerability in Telerik UI for ASP.NET AJAX8.1CNA v3.10.7%2026-07-22Exploit codeFix
CVE-2026-13089OIDC::Lite versions for Perl allow ID Token signature verification bypass7.5CISA ADP v3.10.4%2026-07-22
CVE-2026-13078Local File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader6.3CNA v4.00.3%2026-07-22Fix
CVE-2026-13077MongoDB Server BSON CodeWScope element parsing out-of-bounds read7.1CNA v4.00.4%2026-07-22Fix
CVE-2026-13076MongoDB Server Aggregation Framework memory exhaustion leading to Process Termination7.1CNA v4.00.4%2026-07-22Fix
CVE-2026-13075MongoDB Server $rankFusion and $scoreFusion aggregation stages resource exhaustion7.1CNA v4.00.4%2026-07-22Fix
CVE-2026-13074MongoDB Server awaitable hello command exhaust mode denial of service6.9CNA v4.00.4%2026-07-22Fix
CVE-2026-13073MongoDB Aggregation Command Invariant assertion failure leading to Process Termination5.3CNA v4.00.4%2026-07-22Fix
CVE-2026-13072MongoDB Server compute mode external data processing heap buffer overflow9.2CNA v4.00.4%2026-07-22Fix
CVE-2026-13071MongoDB Server server-side JavaScript aggregation expressions use-after-free7.1CNA v4.00.4%2026-07-22Fix
CVE-2026-13070MongoDB Server outbound TLS OCSP stapling validation null pointer dereference6.0CNA v4.00.1%2026-07-22Fix
CVE-2026-13069MongoDB Server Queryable Encryption FLE2 find payload resource exhaustion7.1CNA v4.00.3%2026-07-22Fix
CVE-2026-13068MongoDB Server mongos cursor termination incorrect authorization2.3CNA v4.00.3%2026-07-22Fix
CVE-2026-13067MongoDB Server tlsCATrusts Role Restriction not Enforced via PROXY protocol v2 on Unix Domain Socket7.2CNA v4.00.1%2026-07-22Fix
CVE-2026-13066MongoDB Server Server-Side JavaScript DBPointer BSON Serialization Memory Disclosure7.1CNA v4.00.4%2026-07-22Fix
CVE-2026-13065MongoDB $linearFill window function improper input validation leading to Process Termination7.1CNA v4.00.5%2026-07-22Fix
CVE-2026-13064MongoDB $jsonSchema Query Operator Excessive CPU Consumption leading to denial of service7.1CNA v4.00.5%2026-07-22Fix
CVE-2026-13063MongoDB Server libmongocrypt improper input validation leading to Process Termination5.3CNA v4.00.4%2026-07-22Fix
CVE-2026-13062MongoDB Server mongos Queryable Encryption write commands confused deputy7.1CNA v4.00.2%2026-07-22Fix
CVE-2026-13061MongoDB Server $listSessions aggregation stage vulnerability5.3CNA v4.00.3%2026-07-22Fix
CVE-2026-13060MongoDB Server $graphLookup aggregation stage incorrect authorization7.1CNA v4.00.4%2026-07-22Fix
CVE-2026-13059MongoDB Server command parameter validation improper access control8.6CNA v4.00.4%2026-07-22Fix
CVE-2026-13058MongoDB Server transaction command insufficient input validation leading to Process Termination7.1CNA v4.00.4%2026-07-22Fix
CVE-2026-13057MongoDB Server authorization bypass6.0CNA v4.00.3%2026-07-22Fix
CVE-2026-13056MongoDB Server query engine denial of service7.1CNA v4.00.4%2026-07-22Fix
CVE-2026-13055MongoDB Server server crash7.1CNA v4.00.4%2026-07-22Fix
CVE-2026-12987Events Manager WordPress plugin unauthenticated SQL injection7.5CISA ADP v3.10.5%2026-07-22Fix
CVE-2026-12968Product Addons WowAddons WordPress plugin unauthenticated stored XSS via arbitrary SVG upload8.8CISA ADP v3.10.5%2026-07-22Fix
CVE-2026-12617ISC BIND 9 record ordering based unexpected exit with CNAME or DNAME7.5CNA v3.10.5%2026-07-22Fix
CVE-2026-11721ISC BIND 9 cache poisoning possible with label count discrepancy, RRSIG, and wildcards7.5CNA v3.10.4%2026-07-22Fix
CVE-2026-11622ISC BIND 9 potential memory usage beyond configured limits7.5CNA v3.10.5%2026-07-22Fix
CVE-2026-11605ISC BIND 9 unnecessary validation of DNSSEC signed records7.5CNA v3.10.5%2026-07-22Fix
CVE-2026-11331ISC BIND 9 potential wildcard CNAME RPZ policy bypass7.5CNA v3.10.4%2026-07-22Fix
CVE-2026-10822ISC BIND 9 key Record using PRIVATEDNS algorithm may lead to unexpected exit6.5CNA v3.10.4%2026-07-22Fix
CVE-2026-10723ISC BIND 9 incorrect acceptance of NSEC3 records6.8CNA v3.10.3%2026-07-22Fix
CVE-2026-9737MongoDB Server find command with $meta sort can lead to crash7.1CNA v4.00.4%2026-07-22Fix
CVE-2026-8152Unblu Spark open redirect leading to DOM-based XSS9.3CNA v4.00.4%2026-07-22
CVE-2026-7328Caliptra Core Runtime Firmware missing authorization6.8CNA v4.00.1%2026-07-22
CVE-2026-4773Magarsus Consulting IDM-MFA improper type validation8.1CNA v3.10.5%2026-07-22Fix
CVE-2026-3821SMCI X14DBG-DAP,X14DBI supermicro SMASH service contain an arbitrary code execution issue8.8CNA v3.10.6%2026-07-22
CVE-2026-3482IBM Sterling B2B Integrator and IBM Sterling File Gateway authorization bypass5.3CNA v3.10.5%2026-07-22Fix
CVE-2026-2406IDOR in Universe Software's Online Registration and Workflow Management System6.5CNA v3.10.4%2026-07-22Exploit code
CVE-2026-2395SQLi in Xpoda Türkiye Informatics Technology's No Code Platform9.8CNA v3.10.5%2026-07-22Exploit codeFix
CVE-2026-65319Feedbin Unauthenticated Entry Content Disclosure via GET /API/v2/entries/:id/text8.7CNA v4.00.5%2026-07-21
CVE-2026-65318Verba unauthenticated server-side request forgery9.2CNA v4.00.6%2026-07-21
CVE-2026-65317Verba (goldenverba) server-side request forgery via /API/connect and Same-Origin Middleware Bypass9.2CNA v4.00.6%2026-07-21
CVE-2026-65316xxl-job Cross-Job-Group Log Disclosure via missing authorization Check in /joblog/logDetailCat7.1CNA v4.00.5%2026-07-21
CVE-2026-65315Ollama Remote denial of service via Attacker-Controlled Allocation in GGUF Metadata parser8.7CNA v4.00.8%2026-07-21
CVE-2026-65314Electric Postgres Sync Excluded-Column Value Inference via Subset where Clauses5.3CNA v4.00.4%2026-07-21Fix
CVE-2026-65069EGOR Data::DisjointSet::Shared mmap backing file link following4.0CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-65068EGOR Data::SpatialHash::Shared mmap backing file link following3.8CISA ADP v3.10.1%2026-07-21Fix
CVE-2026-65067EGOR Data::Intern::Shared mmap backing file link following3.8CISA ADP v3.10.1%2026-07-21Fix
CVE-2026-65066EGOR Data::RingBuffer::Shared mmap backing file link following3.8CISA ADP v3.10.1%2026-07-21Fix
CVE-2026-65065EGOR Data::RoaringBitmap::Shared mmap backing file link following5.5CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-65064EGOR Data::HashMap::Shared mmap backing file link following3.8CISA ADP v3.10.1%2026-07-21Fix
CVE-2026-65063EGOR Data::RadixTree::Shared mmap backing file link following3.8CISA ADP v3.10.1%2026-07-21Fix
CVE-2026-65062EGOR Data::SortedSet::Shared mmap backing file link following3.8CISA ADP v3.10.1%2026-07-21Fix
CVE-2026-65061EGOR Data::ReqRep::Shared mmap backing file link following3.8CISA ADP v3.10.1%2026-07-21Fix
CVE-2026-65058Trezor Safe improper security check in on-device display5.9CNA v4.00.4%2026-07-21Fix
CVE-2026-65057Keep Unauthenticated server-side request forgery via POST /providers/healthcheck9.2CNA v4.00.4%2026-07-21
CVE-2026-65056mcp-webresearch server-side request forgery in visit_page due to Missing Internal-IP Filtering8.3CNA v4.00.4%2026-07-21Fix
CVE-2026-65055Taiga taiga-back Private Project Member Roster Disclosure via Unauthenticated filters_data endpoints6.9CNA v4.00.3%2026-07-21
CVE-2026-65054MediaCMS Private Media Metadata Disclosure via Playlist Ownership Loophole8.2CNA v4.00.3%2026-07-21
CVE-2026-65052Ninja Forms Calculation and Payment Total tampering8.7CNA v4.00.6%2026-07-21Fix
CVE-2026-65051Saturday Drive Ninja Forms AJAX submission handler vulnerability6.9CNA v4.00.5%2026-07-21Fix
CVE-2026-65050Saturday Drive Ninja Forms submissions-table block missing authorization7.1CNA v4.00.4%2026-07-21Fix
CVE-2026-65049Saturday Drive Ninja Forms nf_delete_all_data AJAX action incorrect authorization8.4CNA v4.00.4%2026-07-21Fix
CVE-2026-65048Ninja Forms Unauthenticated stored cross-site scripting via Repeatable Fieldset Submission Index9.3CNA v4.00.5%2026-07-21Fix
CVE-2026-65009OpenRemote information disclosure via Syslog REST API5.3CNA v4.00.2%2026-07-21Fix
CVE-2026-65008Grav remote code execution via Blueprint dynamicData9.3CNA v4.02.5%2026-07-21Exploit codeFix
CVE-2026-65007Grav missing authorization on API Key Generation8.7CNA v4.00.4%2026-07-21Fix
CVE-2026-64881Tenable Security Center command injection8.7CNA v4.02.2%2026-07-21Fix
CVE-2026-64880Tenable Security Center blind SQL injection7.1CNA v4.00.3%2026-07-21Fix
CVE-2026-64879Tenable Security Center command injection9.4CNA v4.02.3%2026-07-21
CVE-2026-64878Tenable Security Center command injection9.4CNA v4.00.8%2026-07-21Fix
CVE-2026-64877Tenable Security Center SQL injection9.4CNA v4.00.3%2026-07-21
CVE-2026-64825Home Assistant Core path traversal File Write via Backup upload9.0CNA v4.00.6%2026-07-21Fix
CVE-2026-64824Home Assistant Core Symlink path traversal RCE via backup-restore9.3CNA v4.00.8%2026-07-21Exploit codeFix
CVE-2026-64823Home Assistant Core XSS via Shelly media_player.py thumb URI2.1CNA v4.00.3%2026-07-21Fix
CVE-2026-64822djangoSIGE User Enumeration via ForgotPasswordView6.9CNA v4.00.4%2026-07-21
CVE-2026-64821djangoSIGE CSRF via GET-based Order Cancellation Views5.3CNA v4.00.2%2026-07-21
CVE-2026-64628Grav stored cross-site scripting via shortcode Attribute Handlers5.1CNA v4.00.3%2026-07-21
CVE-2026-64627parse-community parse-server Parse Server Schema Disclosure via GraphQL Variable Coercion6.9CNA v4.00.5%2026-07-21Fix
CVE-2026-64617EGOR Data::PubSub::Shared link following3.8CISA ADP v3.10.1%2026-07-21Fix
CVE-2026-64616EGOR Data::NDArray::Shared link following3.3CISA ADP v3.10.1%2026-07-21Fix
CVE-2026-64615EGOR Data::Graph::Shared link following3.3CISA ADP v3.10.1%2026-07-21Fix
CVE-2026-64614EGOR Data::Deque::Shared link following3.8CISA ADP v3.10.1%2026-07-21Fix
CVE-2026-64613EGOR Data::Buffer::Shared link following6.2CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-64609Apache Fory, Apache Fory: Out-of-bounds read via sun.misc.Unsafe in zero-copy java deserialization9.1CISA ADP v3.10.8%2026-07-21Fix
CVE-2026-64608Apache Fory Heap type confusion9.8CISA ADP v3.10.8%2026-07-21Fix
CVE-2026-64606Apache Fory Java lambda deserialization deserialization of untrusted data9.8CISA ADP v3.10.8%2026-07-21Fix
CVE-2026-63764LMDeploy server-side request forgery via HTTP Redirect Bypass7.7CNA v4.00.5%2026-07-21
CVE-2026-63729TeX Live SyncTeX Parser Heap use-after-free via Malformed SyncTeX file6.8CNA v4.00.2%2026-07-21Fix
CVE-2026-63454Authenticated path traversal vulnerability leads to remote code execution in AOS-CX7.2CNA v3.10.9%2026-07-21Fix
CVE-2026-63453Authenticated buffer overflow vulnerabilities lead to remote code execution in AOS-CX7.2CNA v3.10.6%2026-07-21Fix
CVE-2026-63358FileGator privilege escalation8.4CNA v4.00.2%2026-07-21NucleiFix
CVE-2026-63263Uncontrolled resource consumption in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-63262Missing authorization in Kibana leading to information disclosure4.3CNA v3.10.3%2026-07-21Fix
CVE-2026-63261Uncontrolled resource consumption in Kibana leading to denial of service6.5CNA v3.10.5%2026-07-21Fix
CVE-2026-63260Uncontrolled resource consumption in Kibana leading to denial of service6.5CNA v3.10.5%2026-07-21Fix
CVE-2026-63259Authorization bypass through user-controlled key in Kibana leading to information disclosure4.3CNA v3.10.3%2026-07-21Fix
CVE-2026-63145Incorrect authorization in Kibana leading to Machine Learning Audit Log Integrity Compromise4.3CNA v3.10.3%2026-07-21Fix
CVE-2026-63144Uncontrolled recursion in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-63143Missing authorization in Kibana leading to unauthorized information disclosure4.3CNA v3.10.3%2026-07-21Fix
CVE-2026-63142Incomplete list of disallowed inputs in Kibana leading to server-side request forgery5.0CNA v3.10.3%2026-07-21Fix
CVE-2026-63141Missing authorization in Kibana leading to unauthorized access to Cloud Connect Management functions6.3CNA v3.10.2%2026-07-21Fix
CVE-2026-63140Reachable assertion in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-63139Uncontrolled resource consumption in Kibana leading to denial of service6.5CNA v3.10.5%2026-07-21Fix
CVE-2026-63136Uncontrolled resource consumption in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-63092kirby-modules License key disclosure via modules/activate dialog5.3CNA v4.00.3%2026-07-21
CVE-2026-63080Aptabase SQL injection via ClickHouse query backend7.1CNA v4.00.4%2026-07-21
CVE-2026-62574Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition Install component takeover7.8CNA v3.10.1%2026-07-21Fix
CVE-2026-62567Oracle E-Business Suite HRMS (UK) UK Payroll component unauthorized data access7.7CNA v3.10.4%2026-07-21Fix
CVE-2026-62565Oracle E-Business Suite HRMS (US) US Payroll Year End component unauthorized data access7.1CNA v3.10.3%2026-07-21Fix
CVE-2026-62563Oracle E-Business Suite Work in Process Internal Operations component unauthorized data modification5.4CNA v3.10.1%2026-07-21Fix
CVE-2026-62562Oracle E-Business Suite HRMS (US) Internal Operations component unauthorized data access6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-62561Oracle E-Business Suite HRMS (US) Internal Operations component takeover7.8CNA v3.10.2%2026-07-21Fix
CVE-2026-62560Oracle E-Business Suite HRMS (Norway) Internal Operations component unauthorized data access7.7CNA v3.10.4%2026-07-21Fix
CVE-2026-62559Oracle E-Business Suite HRMS (US) Internal Operations component unauthorized data access6.8CNA v3.10.4%2026-07-21Fix
CVE-2026-62557Oracle E-Business Suite HRMS (UK) UK Payroll component unauthorized data access7.1CNA v3.10.3%2026-07-21Fix
CVE-2026-62556Oracle E-Business Suite HRMS (US) Internal Operations component unauthorized data access6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-62549Oracle E-Business Suite HRMS (UK) UK Payroll component unauthorized data access9.6CNA v3.10.4%2026-07-21Fix
CVE-2026-62548Oracle E-Business Suite HRMS (US) Internal Operations component takeover7.2CNA v3.10.5%2026-07-21Fix
CVE-2026-62547Oracle E-Business Suite Workflow Notification Mailer component takeover8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-62546Oracle E-Business Suite Applications Framework Web Utilities component takeover9.1CNA v3.10.5%2026-07-21Fix
CVE-2026-62542Oracle E-Business Suite Advanced Benefits unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-62534Oracle E-Business Suite Applications Framework Web Utilities component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-62530Oracle E-Business Suite HRMS (France) French HR component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-62528Oracle E-Business Suite HCM Configuration Workbench Install component unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-62527Oracle E-Business Suite Learning Management unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-62525Oracle E-Business Suite Quality Workbench HTML system component unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-62524Oracle E-Business Suite HRMS (US) US Payroll - General component unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-62521Oracle E-Business Suite HRMS (US) US Payroll - General component unauthorized data access7.5CNA v3.10.4%2026-07-21Fix
CVE-2026-62519Oracle E-Business Suite Succession planning unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-62518Oracle E-Business Suite Production Scheduling unauthorized data modification7.6CNA v3.10.3%2026-07-21Fix
CVE-2026-62517Oracle E-Business Suite Production Scheduling Internal Operations component unauthorized data access5.3CNA v3.10.2%2026-07-21Fix
CVE-2026-62516Oracle Supply Chain Demantra Demand Management Product Security component takeover8.8CNA v3.10.5%2026-07-21Fix
CVE-2026-62515Oracle Advanced Planning Command Center Internal Operations component unauthorized data access7.6CNA v3.10.3%2026-07-21Fix
CVE-2026-62514Oracle Process Manufacturing Regulatory Management unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-62513Oracle Process Manufacturing Regulatory Management unauthorized data access8.5CNA v3.10.3%2026-07-21Fix
CVE-2026-62508Oracle E-Business Suite Time and Labor Internal Operations component denial of service3.1CNA v3.10.3%2026-07-21Fix
CVE-2026-62507Oracle E-Business Suite Time and Labor Internal Operations component unauthorized data modification5.3CNA v3.10.2%2026-07-21Fix
CVE-2026-62505Oracle E-Business Suite Time and Labor Internal Operations component unauthorized data modification6.1CNA v3.10.2%2026-07-21Fix
CVE-2026-62504Oracle E-Business Suite Time and Labor Internal Operations component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-62503Oracle E-Business Suite Time and Labor Internal Operations component unauthorized data access6.7CNA v3.10.4%2026-07-21Fix
CVE-2026-62498Oracle E-Business Suite Flow Manufacturing Internal Operations component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-62497Oracle E-Business Suite Flow Manufacturing Internal Operations component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-62496Oracle E-Business Suite Yard Management Internal Operations component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-62495Oracle Process Manufacturing Process Execution Internal Operations component takeover7.5CNA v3.10.3%2026-07-21Fix
CVE-2026-62494Oracle E-Business Suite Time and Labor Internal Operations component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-62493Oracle E-Business Suite Purchasing Internal Operations component takeover7.5CNA v3.10.3%2026-07-21Fix
CVE-2026-62490Oracle E-Business Suite Contracts Integration Internal Operations component unauthorized data access5.3CNA v3.10.3%2026-07-21Fix
CVE-2026-62489Oracle E-Business Suite Contracts Integration unauthorized data modification4.2CNA v3.10.2%2026-07-21Fix
CVE-2026-62488Oracle E-Business Suite Contracts Integration unauthorized data modification6.5CNA v3.10.3%2026-07-21Fix
CVE-2026-62487Oracle E-Business Suite Contracts Integration unauthorized data modification6.1CNA v3.10.1%2026-07-21Fix
CVE-2026-62486Oracle E-Business Suite Contracts Integration unauthorized data modification5.0CNA v3.10.2%2026-07-21Fix
CVE-2026-62484Oracle E-Business Suite Contracts Integration unauthorized data modification5.9CNA v3.10.3%2026-07-21Fix
CVE-2026-62483Oracle E-Business Suite Project Contracts unauthorized data modification4.3CNA v3.10.3%2026-07-21Fix
CVE-2026-62482Oracle E-Business Suite Public Sector Financials unauthorized data modification5.4CNA v3.10.2%2026-07-21Fix
CVE-2026-62480Oracle E-Business Suite Public Sector Financials unauthorized data access6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-62479Oracle E-Business Suite Public Sector Financials unauthorized data modification5.4CNA v3.10.2%2026-07-21Fix
CVE-2026-62478Oracle E-Business Suite Public Sector Financials Internal Operations component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-62476Oracle E-Business Suite Public Sector Payroll Internal Operations component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-62474Oracle Lease and Finance Management Lease Authoring component unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-62473Oracle E-Business Suite Installed Base Create Item Instance component unauthorized data access8.3CNA v3.10.4%2026-07-21Fix
CVE-2026-62472Oracle E-Business Suite Installed Base Create Item Instance component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-62470Oracle E-Business Suite Self-Service Human Resources unauthorized data access6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-62469Oracle E-Business Suite Human Resources Enterprise Command Center component unauthorized data access7.1CNA v3.10.2%2026-07-21Fix
CVE-2026-62468Oracle E-Business Suite Human Resources Enterprise Command Center component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-62466Oracle E-Business Suite Human Resources Data Removal tool component takeover7.2CNA v3.10.5%2026-07-21Fix
CVE-2026-62465Oracle E-Business Suite HRMS (US) Internal Operations component unauthorized data modification6.6CNA v3.10.1%2026-07-21Fix
CVE-2026-62464Oracle E-Business Suite Payroll Internal Operations component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-62456Oracle E-Business Suite HRMS (UK) Internal Operations component unauthorized data access8.2CNA v3.10.3%2026-07-21Fix
CVE-2026-62453Oracle E-Business Suite HRMS (UK) Internal Operations component unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-62451Oracle E-Business Suite Work in Process Internal Operations component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-62447Oracle E-Business Suite Trade Management Claim LOV component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-62445Oracle E-Business Suite Order Management Product Diagnostic tools component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-62444Oracle E-Business Suite Contracts Integration unauthorized data modification6.1CNA v3.10.2%2026-07-21Fix
CVE-2026-62443Oracle E-Business Suite Contracts Integration unauthorized data modification7.1CNA v3.10.2%2026-07-21Fix
CVE-2026-62415Joomla extension joomdonation.com insecure default configuration Membership Pro9.1CISA ADP v3.10.4%2026-07-21
CVE-2026-61338Oracle E-Business Suite Contracts Integration Internal Operations component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-61337Oracle Lease and Finance Management Internal Operations component takeover7.5CNA v3.10.3%2026-07-21Fix
CVE-2026-61336Oracle Lease and Finance Management Internal Operations component takeover7.2CNA v3.10.5%2026-07-21Fix
CVE-2026-61335Oracle E-Business Suite Product Workbench Internal Operations component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-61334Oracle E-Business Suite Price Protection unauthorized data modification7.1CNA v3.10.3%2026-07-21Fix
CVE-2026-61333Oracle E-Business Suite Product Workbench Internal Operations component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-61329Oracle E-Business Suite Price Protection Internal Operations component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-61328Oracle E-Business Suite Cost Management Cost Planning component takeover6.6CNA v3.10.4%2026-07-21Fix
CVE-2026-61327Oracle E-Business Suite Bills of Material Internal Operations component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-61325Oracle E-Business Suite Advanced Benefits Internal Operations component unauthorized data access7.6CNA v3.10.3%2026-07-21Fix
CVE-2026-61324Oracle E-Business Suite Advanced Benefits unauthorized data modification7.7CNA v3.10.3%2026-07-21Fix
CVE-2026-61323Oracle E-Business Suite Advanced Benefits Internal Operations component unauthorized data access6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-61322Oracle E-Business Suite TeleSales Internal Operations component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-61320Oracle E-Business Suite Payables Internal Operations component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-61316Oracle E-Business Suite EDI Gateway information disclosure4.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61315Oracle E-Business Suite EDI Gateway information disclosure4.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61314Oracle E-Business Suite EDI Gateway All Miscellaneous EDI Issues component takeover7.2CNA v3.10.5%2026-07-21Fix
CVE-2026-61312Oracle E-Business Suite Product Hub Internal Operations component takeover8.5CNA v3.10.3%2026-07-21Fix
CVE-2026-61311Oracle E-Business Suite Product Hub Internal Operations component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-61310Oracle E-Business Suite Product Hub Internal Operations component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-61309Oracle In-Memory Cost Management for Discrete Industries unauthorized data access7.5CNA v3.10.4%2026-07-21Fix
CVE-2026-61304Oracle E-Business Suite Price Protection unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61303Oracle E-Business Suite EDI Gateway Internal Operations component information disclosure1.9CNA v3.10.1%2026-07-21Fix
CVE-2026-61301Oracle E-Business Suite Process Manufacturing Financials unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-61299Oracle E-Business Suite Process Manufacturing Logistics unauthorized data access7.1CNA v3.10.3%2026-07-21Fix
CVE-2026-61297Oracle E-Business Suite Customers Online Internal Operations component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-61294Oracle E-Business Suite Common Applications Calendar unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61292Oracle E-Business Suite U.S. Federal Financials Internal Operations component information disclosure4.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61289Oracle Process Manufacturing Product Development Quality Management Specs component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-61287Oracle E-Business Suite Process Manufacturing Systems unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-61285Oracle E-Business Suite Process Manufacturing Systems Internal Operations component takeover7.2CNA v3.10.5%2026-07-21Fix
CVE-2026-61283Oracle E-Business Suite Bills of Material Web services component unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61282Oracle E-Business Suite Advanced Benefits unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61280Oracle E-Business Suite Sales for Handhelds unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61279Oracle E-Business Suite Proposals unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61278Oracle E-Business Suite Workflow Notification Mailer component unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61277Oracle E-Business Suite Marketing Audience component unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61275Oracle E-Business Suite Product Hub Role Based Security component unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61274Oracle E-Business Suite Product Hub Item Catalog component unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61271Oracle Document Management and Collaboration Attachments component unauthorized data modification7.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61269Oracle E-Business Suite Product Workbench WebUI component unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61267Oracle E-Business Suite HCM Configuration Workbench unauthorized data modification7.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61266Oracle E-Business Suite Supply Chain Globalization unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61264Oracle E-Business Suite Call Center Technology RDBMS and UI component unauthorized data modification5.4CNA v3.10.2%2026-07-21Fix
CVE-2026-61263Oracle E-Business Suite Scripting Admin component unauthorized data modification5.4CNA v3.10.2%2026-07-21Fix
CVE-2026-61262Oracle E-Business Suite Teleservice unauthorized data modification6.5CNA v3.10.3%2026-07-21Fix
CVE-2026-61261Oracle E-Business Suite Knowledge Management User interface component unauthorized data modification5.4CNA v3.10.2%2026-07-21Fix
CVE-2026-61260Oracle E-Business Suite HRMS (UK) UK Payroll component unauthorized data modification5.4CNA v3.10.2%2026-07-21Fix
CVE-2026-61257Oracle E-Business Suite iSupport Call Back component unauthorized data modification5.4CNA v3.10.2%2026-07-21Fix
CVE-2026-61256Oracle E-Business Suite Advanced Inbound Telephony Servers component unauthorized data modification6.3CNA v3.10.3%2026-07-21Fix
CVE-2026-61255Oracle E-Business Suite HRMS (New Zealand) unauthorized data modification5.4CNA v3.10.2%2026-07-21Fix
CVE-2026-61254Oracle HRMS (Republic of Korea) Korean Payroll component unauthorized data modification5.4CNA v3.10.2%2026-07-21Fix
CVE-2026-61253Oracle E-Business Suite HRMS (Japanese) unauthorized data modification5.4CNA v3.10.1%2026-07-21Fix
CVE-2026-61252Oracle E-Business Suite HRMS (Hong Kong) Hong Kong Payroll component unauthorized data modification5.4CNA v3.10.2%2026-07-21Fix
CVE-2026-61251Oracle E-Business Suite HRMS (Australia) Payroll component unauthorized data access6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-61250Oracle E-Business Suite Payroll unauthorized data access6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-61249Oracle E-Business Suite Learning Management Import And Export component unauthorized data access6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-61247Oracle E-Business Suite Workflow Notification Mailer component unauthorized data modification4.8CNA v3.10.3%2026-07-21Fix
CVE-2026-61245Oracle PeopleSoft Enterprise FIN Manufacturing Brazil Integration component takeover9.8CNA v3.10.5%2026-07-21Fix
CVE-2026-61244Oracle PeopleSoft Enterprise FIN Manufacturing Argentina unauthorized data access9.1CNA v3.10.4%2026-07-21Fix
CVE-2026-61243Oracle PeopleSoft Enterprise FIN Common Objects Argentina Staffing component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-61242Oracle PeopleSoft Enterprise FIN Common Objects Argentina Staffing component takeover9.9CNA v3.10.4%2026-07-21Fix
CVE-2026-61240Oracle PeopleSoft Enterprise FIN Common Objects Argentina unauthorized data access8.2CNA v3.10.3%2026-07-21Fix
CVE-2026-61239Oracle PeopleSoft Enterprise FIN Common Objects Argentina unauthorized data modification9.9CNA v3.10.4%2026-07-21Fix
CVE-2026-61238Oracle PeopleSoft Enterprise FIN Common Objects Argentina unauthorized data access9.1CNA v3.10.4%2026-07-21Fix
CVE-2026-61237Oracle PeopleSoft Enterprise FIN Common Objects Argentina unauthorized data access9.9CNA v3.10.4%2026-07-21Fix
CVE-2026-61236Oracle PeopleSoft Enterprise FIN Common Objects Brazil Staffing component unauthorized data access7.5CNA v3.10.4%2026-07-21Fix
CVE-2026-61235Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland takeover9.1CNA v3.10.5%2026-07-21Fix
CVE-2026-61234Oracle PeopleSoft Enterprise FIN Common Objects Brazil unauthorized data access7.4CNA v3.10.3%2026-07-21Fix
CVE-2026-61233Oracle PeopleSoft Enterprise FIN Common Objects Brazil Integration component takeover9.8CNA v3.10.5%2026-07-21Fix
CVE-2026-61232Oracle PeopleSoft Enterprise FIN Common Objects Brazil unauthorized data access7.5CNA v3.10.4%2026-07-21Fix