CVE-2026 list

CVE-2026 records published in July 2026

Page seven of 10: records 6,001 to 7,000 of the 9,534 published in July 2026, newest first. The first page carries the figures for July 2026.

CVE-2026 records published in July 2026, newest first: records 6,001 to 7,000 of 9,534
CVE Summary CVSS EPSS Published Signals
CVE-2026-55126Microsoft SharePoint server spoofing7.3CNA v3.10.6%2026-07-14Fix
CVE-2026-55125Microsoft Office remote code execution7.8CNA v3.10.6%2026-07-14Fix
CVE-2026-55124Microsoft Word information disclosure5.5CNA v3.10.6%2026-07-14Fix
CVE-2026-55123Microsoft PowerPoint remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55122Microsoft Excel information disclosure7.1CNA v3.10.5%2026-07-14Fix
CVE-2026-55121Microsoft Office information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-55120Microsoft PowerPoint remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55058Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55057Microsoft Office information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-55056Microsoft Office remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55055Microsoft Word remote code execution7.8CNA v3.10.6%2026-07-14Fix
CVE-2026-55054Microsoft Excel information disclosure6.5CNA v3.10.9%2026-07-14Fix
CVE-2026-55053Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55052Microsoft SharePoint elevation of privilege8.8CNA v3.10.9%2026-07-14Fix
CVE-2026-55051Microsoft SharePoint server information disclosure6.5CNA v3.10.9%2026-07-14Fix
CVE-2026-55050Microsoft Word information disclosure5.5CNA v3.10.6%2026-07-14Fix
CVE-2026-55049Microsoft Office remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55048Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55047Microsoft Office information disclosure5.5CNA v3.10.6%2026-07-14Fix
CVE-2026-55046Microsoft Excel information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-55045Microsoft Office remote code execution8.4CNA v3.10.4%2026-07-14Fix
CVE-2026-55044Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55043Microsoft PowerPoint remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55042Microsoft Office information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-55041Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55040Microsoft SharePoint weak authentication9.1CNA v3.169.5%2026-07-14KEVNucleiEmerging ThreatsExploit codeKCVFix
CVE-2026-55039Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55038Microsoft Word remote code execution7.8CNA v3.10.6%2026-07-14Fix
CVE-2026-55037Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55036Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55035Microsoft Office information disclosure5.5CNA v3.10.6%2026-07-14Fix
CVE-2026-55034Microsoft SharePoint server spoofing7.3CNA v3.10.9%2026-07-14Fix
CVE-2026-55033Microsoft Word remote code execution7.8CNA v3.10.6%2026-07-14Fix
CVE-2026-55032Microsoft Word remote code execution7.8CNA v3.10.6%2026-07-14Fix
CVE-2026-55031Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55030Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-07-14Fix
CVE-2026-55029Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55028Microsoft Office information disclosure5.5CNA v3.10.6%2026-07-14Fix
CVE-2026-55027Microsoft Office information disclosure5.5CNA v3.10.6%2026-07-14Fix
CVE-2026-55026Microsoft Office information disclosure6.2CNA v3.10.4%2026-07-14Fix
CVE-2026-55025Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55024Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55023Microsoft Office information disclosure5.5CNA v3.10.6%2026-07-14Fix
CVE-2026-55022Microsoft Office remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55021Microsoft SharePoint server spoofing7.3CNA v3.10.9%2026-07-14Fix
CVE-2026-55020Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-07-14Fix
CVE-2026-55019Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-07-14Fix
CVE-2026-55018Microsoft Office remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55017Microsoft Office remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55016Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-07-14Fix
CVE-2026-55014Microsoft Windows Remote Help Defense elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-55012Microsoft Defender remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55011Microsoft Defender remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-55010Microsoft Minecraft Bedrock Dedicated Server remote code execution9.8CNA v3.11.0%2026-07-14Fix
CVE-2026-55009Microsoft Exchange Server elevation of privilege7.8CNA v3.12.5%2026-07-14Fix
CVE-2026-55008Microsoft Exchange Server spoofing9.6CNA v3.10.9%2026-07-14Fix
CVE-2026-55006Microsoft Exchange Server elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-55005Microsoft Exchange Server remote code execution8.8CNA v3.11.0%2026-07-14Fix
CVE-2026-55004Microsoft Windows Print Configuration elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-55003Microsoft Windows Remote Desktop Protocol (RDP) information disclosure6.5CNA v3.10.9%2026-07-14Fix
CVE-2026-55002Microsoft SQL server elevation of privilege8.8CNA v3.10.9%2026-07-14Fix
CVE-2026-55001Microsoft Windows active Directory Domain services elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-55000Microsoft Windows USB Print driver elevation of privilege6.4CNA v3.10.3%2026-07-14Fix
CVE-2026-54999Microsoft Windows TCP/IP remote code execution8.8CNA v3.10.4%2026-07-14Fix
CVE-2026-54997Microsoft Windows SMB information disclosure5.5CNA v3.10.4%2026-07-14Fix
CVE-2026-54996Microsoft Windows USB Print driver elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-54995Microsoft Windows Reliable Multicast Transport Driver (RMCAST) remote code execution8.1CNA v3.10.8%2026-07-14Fix
CVE-2026-54993Microsoft Windows Media Foundation remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-54992Microsoft Message Queuing Queue Manager remote code execution8.4CNA v3.10.3%2026-07-14Exploit codeFix
CVE-2026-54991Microsoft Windows USB Print driver elevation of privilege7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-54990Microsoft Windows remote Desktop client remote code execution9.8CNA v3.10.8%2026-07-14Fix
CVE-2026-54989Microsoft Quality Windows Audio/Video Experience (QWAVE) elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-54988Microsoft Excel information disclosure6.1CNA v3.10.5%2026-07-14Fix
CVE-2026-54987Microsoft Windows Overlay Filter elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-54986Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-54983Microsoft Windows Active Directory Federation services denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-54982Microsoft Windows Reliable Multicast Transport Driver (RMCAST) remote code execution8.8CNA v3.10.5%2026-07-14Fix
CVE-2026-54684skylot jadx XAPK plugin loader path traversal7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-54572rclone local backend symlink handling link following7.5CNA v3.10.4%2026-07-14Fix
CVE-2026-54433Roundcube Webmail cross-site scripting10.0v3.10.3%2026-07-14Fix
CVE-2026-54432Roundcube Webmail cross-site scripting4.7CNA v3.10.2%2026-07-14Fix
CVE-2026-54429Siemens SIMATIC S7-PLCSIM Advanced resource exhaustion6.0CNA v4.00.3%2026-07-14
CVE-2026-54132Microsoft Windows Kernel elevation of privilege6.8CNA v3.10.4%2026-07-14Fix
CVE-2026-54131Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-54129Microsoft Windows Hyper-V elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-54128Microsoft Windows DHCP client remote code execution8.4CNA v3.10.4%2026-07-14Fix
CVE-2026-54127Microsoft Windows Hyper-V elevation of privilege7.4CNA v3.10.3%2026-07-14Fix
CVE-2026-54126Microsoft Windows Remote Desktop Protocol (RDP) information disclosure6.5CNA v3.10.9%2026-07-14Fix
CVE-2026-54125Microsoft Windows Runtime elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-54124Microsoft Windows Terminal remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-54122Microsoft Windows GDI+ remote code execution8.4CNA v3.10.4%2026-07-14Fix
CVE-2026-54121Microsoft Windows active Directory Certificate services elevation of privilege8.8CNA v3.10.8%2026-07-14Exploit codeFix
CVE-2026-54119Microsoft Windows Active Directory denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-54118Microsoft SQL server remote code execution9.8CNA v3.11.5%2026-07-14Fix
CVE-2026-54117Microsoft SQL Server remote code execution9.8CNA v3.11.5%2026-07-14Fix
CVE-2026-54116Microsoft SQL Server information disclosure6.5CNA v3.11.0%2026-07-14Fix
CVE-2026-54115Microsoft Windows Message Queuing (MSMQ) elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-54114Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-54112Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-54111Microsoft Windows universal Print Management service elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-54109Microsoft Windows Resilient File System (ReFS) remote code execution7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-54108Microsoft SharePoint server spoofing6.5CNA v3.11.1%2026-07-14Fix
CVE-2026-54107Microsoft Windows Win32k elevation of privilege8.8CNA v3.10.2%2026-07-14Exploit codeFix
CVE-2026-54058Pillow: Out-of-bounds read8.3CNA v4.00.5%2026-07-14Fix
CVE-2026-53633Vitest: Exposed Browser Mode API can Proxy CDP and Overwrite Config files, leading to RCE9.8CNA v3.10.9%2026-07-14Fix
CVE-2026-53566Citrix Secure Access Client out-of-bounds memory read6.8CNA v4.00.2%2026-07-14
CVE-2026-53565Citrix Secure Access Client improper privilege management8.5CNA v4.00.2%2026-07-14
CVE-2026-53486Decompress: Archive extraction can create files and links outside of the target directory9.1CNA v3.10.7%2026-07-14Fix
CVE-2026-52841Easy!Appointments Google OAuth provider binding insecure direct object reference3.1CNA v3.10.2%2026-07-14Fix
CVE-2026-52840Easy!Appointments CalDAV connection test server-side request forgery2.7CNA v3.10.3%2026-07-14Fix
CVE-2026-52839Easy!Appointments appointment store and update endpoints missing authorization3.3CNA v3.10.2%2026-07-14Fix
CVE-2026-52838Easy!Appointments public booking page stored cross-site scripting2.6CNA v3.10.2%2026-07-14Fix
CVE-2026-52837Easy!Appointments booking reschedule page information disclosure6.9CNA v4.00.6%2026-07-14Fix
CVE-2026-52101andreimarcu linux-server remote upload handler information disclosure9.1CISA ADP v3.10.6%2026-07-14
CVE-2026-52100andreimarcu linux-server v.1.0 cross-site request forgery7.5CISA ADP v3.10.3%2026-07-14
CVE-2026-51808OpenHTJ2K v.0.18.4 and buffer overflow9.8CISA ADP v3.10.9%2026-07-14
CVE-2026-51807j2k_precinct_subband::parse_packet_header in OpenHTJ2K versions Heap-based out-of-bounds write9.8CISA ADP v3.10.7%2026-07-14
CVE-2026-51105aMULE-Project aMule v.2.3.3 buffer overflow7.5CISA ADP v3.10.5%2026-07-14Fix
CVE-2026-50697Microsoft Windows Common Log File System driver elevation of privilege7.8CNA v3.10.4%2026-07-14Fix
CVE-2026-50696Microsoft Windows internet Key Exchange (IKE) protocol denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50695Microsoft Windows Active Directory Federation services denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50694Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution8.1CNA v3.10.8%2026-07-14Fix
CVE-2026-50692Microsoft Windows Desktop Window Manager elevation of privilege8.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50690Microsoft Windows SMB information disclosure5.5CNA v3.10.4%2026-07-14Fix
CVE-2026-50689Microsoft Windows Clipboard Server elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50688Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50687Microsoft Windows Win32k elevation of privilege8.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50686Microsoft Windows OLE remote code execution8.1CNA v3.10.7%2026-07-14Fix
CVE-2026-50685Microsoft Windows DHCP server remote code execution7.5CNA v3.10.7%2026-07-14Fix
CVE-2026-50684Microsoft Windows Active Directory Federation Server spoofing4.8CNA v3.10.4%2026-07-14Fix
CVE-2026-50683Microsoft Windows DHCP client elevation of privilege8.0CNA v3.10.6%2026-07-14Fix
CVE-2026-50682Microsoft Windows active Directory denial of service7.1CNA v3.10.9%2026-07-14Fix
CVE-2026-50681Microsoft Windows Secure Channel information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50680Microsoft Windows Hyper-V elevation of privilege8.2CNA v3.10.3%2026-07-14Fix
CVE-2026-50679Microsoft Windows Search service elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50678Microsoft Excel information disclosure6.6CNA v3.10.5%2026-07-14Fix
CVE-2026-50677Microsoft Windows Media elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50676Microsoft Windows Media elevation of privilege7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-50675Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50674Microsoft Windows USB Print driver elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50673Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-50672Microsoft Windows NTFS elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-50670Microsoft Windows Win32k elevation of privilege8.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50669Microsoft Windows Telephony Server elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-50668Microsoft Windows Resilient File System (ReFS) elevation of privilege6.8CNA v3.10.4%2026-07-14Fix
CVE-2026-50667Microsoft Windows Common Log File System driver elevation of privilege7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-50666Microsoft Windows Remote Access elevation of privilege8.8CNA v3.10.9%2026-07-14Fix
CVE-2026-50665Microsoft Office information disclosure7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50663Microsoft Game: Age of Empires II: Definitive Edition remote code execution8.8CNA v3.10.9%2026-07-14Fix
CVE-2026-50661Microsoft Windows BitLocker security feature bypass6.1CNA v3.10.5%2026-07-14Fix
CVE-2026-50659Microsoft .NET spoofing6.5CNA v3.10.7%2026-07-14Fix
CVE-2026-50658Microsoft Defender For Endpoint for Mac elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-50657Microsoft Defender For Endpoint for Mac information disclosure4.7CNA v3.10.4%2026-07-14Fix
CVE-2026-50655Microsoft Windows Media Foundation remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50653Microsoft Azure Active Directory denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50652Microsoft Azure Active Directory denial of service7.5CNA v3.11.7%2026-07-14Fix
CVE-2026-50651Microsoft .NET denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50650Microsoft .NET Framework elevation of privilege7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50649Microsoft .NET remote code execution7.8CNA v3.14.0%2026-07-14Fix
CVE-2026-50648Microsoft .NET Framework denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50647Microsoft .NET Framework Active Directory Federation Server denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50646Microsoft .NET Framework remote code execution7.8CNA v3.14.0%2026-07-14Fix
CVE-2026-50528Microsoft .NET security feature bypass8.2CNA v3.10.6%2026-07-14Fix
CVE-2026-50527Microsoft .NET Framework denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50526Microsoft .NET tampering7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-50525Microsoft .NET denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50524Microsoft .NET Framework denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50522Microsoft SharePoint deserialization of untrusted data9.8CNA v3.13.0%2026-07-14KEVExploit codeFix
CVE-2026-50520Microsoft Visual Studio Code remote code execution8.4CNA v3.10.4%2026-07-14Fix
CVE-2026-50518Microsoft Windows DHCP server remote code execution9.8CNA v3.11.0%2026-07-14Fix
CVE-2026-50510Microsoft GitHub Copilot remote code execution7.8CNA v3.10.4%2026-07-14Fix
CVE-2026-50509Microsoft Windows Wireless Wide Area Network Service (WwanSvc) elevation of privilege7.8CNA v3.13.5%2026-07-14Fix
CVE-2026-50506OData for ASP.NET and ASP.NET Core denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50505Microsoft Windows Message Queuing Service (MSMQ) remote code execution7.5CNA v3.10.7%2026-07-14Fix
CVE-2026-50504Microsoft Windows Remote Desktop client information disclosure6.5CNA v3.10.9%2026-07-14Fix
CVE-2026-50503Microsoft Windows Runtime elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-50502Microsoft Windows Event Logging service remote code execution8.0CNA v3.10.7%2026-07-14Fix
CVE-2026-50501Microsoft Windows Resilient File System (ReFS) remote code execution7.8CNA v3.10.4%2026-07-14Fix
CVE-2026-50500Microsoft Windows Netlogon elevation of privilege7.5CNA v3.10.7%2026-07-14Fix
CVE-2026-50499Microsoft Windows Print Spooler elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50498Microsoft Windows Universal Disk Format File System Driver (UDFS) elevation of privilege7.8CNA v3.10.4%2026-07-14Fix
CVE-2026-50497Microsoft Windows Remote Desktop Protocol (RDP) information disclosure6.5CNA v3.10.9%2026-07-14Fix
CVE-2026-50496Microsoft Windows Network Policy Server SNMP information disclosure7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50495Microsoft Windows DNS client tampering6.1CNA v3.10.3%2026-07-14Fix
CVE-2026-50494Microsoft Windows NTFS remote code execution7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50493Microsoft Windows DirectX Graphics Kernel elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50492Microsoft Windows Resilient File System (ReFS) remote code execution6.8CNA v3.10.4%2026-07-14Fix
CVE-2026-50491Microsoft Windows code Integrity DLL (ci.dll) elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50490Microsoft Windows Installer elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50489Microsoft Windows win32k elevation of privilege8.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50488Microsoft Windows clipboard User service elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50487Microsoft Windows DNS client elevation of privilege8.1CNA v3.10.8%2026-07-14Fix
CVE-2026-50486Microsoft Windows Runtime elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50485Microsoft Windows Hyper-V denial of service4.5CNA v3.10.7%2026-07-14Fix
CVE-2026-50484Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50483Microsoft Windows Graphics component information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50482Microsoft Windows NTFS remote code execution7.3CNA v3.10.4%2026-07-14Fix
CVE-2026-50480Microsoft Windows Web Proxy Auto-Discovery Protocol (WPAD) elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50479Microsoft Windows USB Hub driver elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50478Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50477Microsoft Windows Kernel elevation of privilege8.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50476Microsoft Windows Network Connections service elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50475Microsoft Windows Kernel information disclosure5.5CNA v3.10.4%2026-07-14Fix
CVE-2026-50474Microsoft Windows remote Desktop client remote code execution8.8CNA v3.10.8%2026-07-14Fix
CVE-2026-50473Microsoft Windows File Explorer information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50471Microsoft Windows NTFS remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50470Microsoft Windows Network Policy Server SNMP information disclosure7.5CNA v3.11.0%2026-07-14Fix
CVE-2026-50469Microsoft Windows Projected File System elevation of privilege7.8CNA v3.10.4%2026-07-14Fix
CVE-2026-50468Microsoft SQL Server information disclosure6.5CNA v3.11.0%2026-07-14Fix
CVE-2026-50467Microsoft Office remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50466Microsoft Brokering File System elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50465Microsoft Windows DNS client tampering7.1CNA v3.10.3%2026-07-14Fix
CVE-2026-50463Microsoft Windows Kernel information disclosure7.5CNA v3.11.0%2026-07-14Fix
CVE-2026-50462Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50461Microsoft Windows NTFS remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50460Microsoft Windows Runtime elevation of privilege8.1CNA v3.10.5%2026-07-14Fix
CVE-2026-50459Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50458Microsoft Brokering File System elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50457Microsoft Windows Runtime elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50456Microsoft Windows File Explorer information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50455Microsoft Windows Universal Plug and Play (upnp.dll) information disclosure5.5CNA v3.10.4%2026-07-14Fix
CVE-2026-50454Microsoft Windows User Interface Core elevation of privilege7.8CNA v3.10.4%2026-07-14Fix
CVE-2026-50453Microsoft Windows USB Audio class driver information disclosure6.1CNA v3.10.5%2026-07-14Fix
CVE-2026-50452Microsoft Windows Runtime elevation of privilege7.0CNA v3.10.4%2026-07-14Fix
CVE-2026-50451Microsoft Windows Routing and Remote Access Service (RRAS) elevation of privilege7.1CNA v3.10.3%2026-07-14Fix
CVE-2026-50450Microsoft Windows Network Connections service elevation of privilege7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-50449Microsoft Windows Runtime elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50448Microsoft Windows NTFS remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50447Microsoft Windows Message Queuing Service (MSMQ) remote code execution9.8CNA v3.11.0%2026-07-14Fix
CVE-2026-50445Microsoft Windows Remote Desktop Protocol (RDP) information disclosure6.5CNA v3.10.9%2026-07-14Fix
CVE-2026-50444Microsoft Windows Server Update Service (WSUS) elevation of privilege8.8CNA v3.10.8%2026-07-14Fix
CVE-2026-50442Microsoft Windows File Explorer information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50441Microsoft Windows Resilient File System (ReFS) elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50440Microsoft Windows Audio service elevation of privilege7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-50439Microsoft Message Queuing Queue Manager remote code execution8.1CNA v3.10.8%2026-07-14Fix
CVE-2026-50438Microsoft PC Manager elevation of privilege8.8CNA v3.10.4%2026-07-14Fix
CVE-2026-50437Microsoft Windows DWM Core library information disclosure5.5CNA v3.10.4%2026-07-14Fix
CVE-2026-50436Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50435Microsoft Windows Overlay Filter elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50434Microsoft Windows Push Notification information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50433Microsoft Windows Media elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50432Microsoft Windows Window Virtual Filtering Platform (VFP) denial of service5.3CNA v3.11.0%2026-07-14Fix
CVE-2026-50431Microsoft Windows Quality of Service (QoS) Packet Scheduler information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50430Microsoft Windows Push Notification information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50429Microsoft Windows Kernel information disclosure8.2CNA v3.11.1%2026-07-14Fix
CVE-2026-50428Microsoft Windows Container Isolation FS Filter driver (unionfs.sys) information disclosure7.1CNA v3.10.4%2026-07-14Fix
CVE-2026-50427Microsoft Windows Content Delivery Manager elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50426Microsoft Windows DNS server remote code execution6.8CNA v3.10.6%2026-07-14Fix
CVE-2026-50425Microsoft Windows Internal System User Profile elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50424Microsoft Windows Domain controller denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50423Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50422Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50421Microsoft Windows Connected User Experiences and Telemetry elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50420Microsoft Windows HTTP.sys information disclosure6.2CNA v3.10.4%2026-07-14Fix
CVE-2026-50419Microsoft Windows Kernel information disclosure3.3CNA v3.10.5%2026-07-14Fix
CVE-2026-50418Microsoft Windows System Secure Feature Bypass vulnerability5.1CNA v3.10.3%2026-07-14Fix
CVE-2026-50417Microsoft Windows NTFS remote code execution7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50416Microsoft Windows win32k information disclosure3.3CNA v3.10.5%2026-07-14Exploit codeFix
CVE-2026-50415Microsoft Windows Media information disclosure5.3CNA v3.10.9%2026-07-14Fix
CVE-2026-50414Microsoft Windows Media elevation of privilege7.5CNA v3.10.6%2026-07-14Fix
CVE-2026-50413Microsoft Windows Runtime elevation of privilege8.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50412Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50411Windows Active Directory Federation services denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50410Microsoft Windows Runtime elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50409Microsoft Windows Overlay Filter information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50408Microsoft Excel information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50407Microsoft Windows Resilient File System (ReFS) elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50406Microsoft Windows Backup Engine elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50405Microsoft Windows Filtering Platform elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50404Microsoft Windows Media elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-50403Microsoft Windows Runtime elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-50402Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50401Microsoft Windows Cloud Files Mini Filter driver information disclosure5.5CNA v3.10.4%2026-07-14Fix
CVE-2026-50400Microsoft Windows App Package Installer elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50399Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50398Microsoft Windows Media elevation of privilege8.8CNA v3.10.6%2026-07-14Fix
CVE-2026-50397Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50396Microsoft Windows Kernel-Mode driver elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50394Microsoft Windows Media information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50393Microsoft Windows Kernel-Mode driver elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50392Microsoft Windows Secure Kernel Mode elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50391Microsoft Windows Group Policy elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50390Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50389Microsoft Windows File Explorer information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50388Microsoft Windows NTFS remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50387Windows GDI elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50386Microsoft Windows NTFS remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50385Microsoft Windows Runtime elevation of privilege8.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50384Microsoft Windows Clip service elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-50383Microsoft Windows Print Spooler information disclosure6.1CNA v3.10.4%2026-07-14Fix
CVE-2026-50382Microsoft Windows DirectX Graphics Kernel remote code execution8.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50381Microsoft Windows composite Image File System driver (cimfs.sys) information disclosure5.5CNA v3.10.4%2026-07-14Fix
CVE-2026-50380Microsoft Windows GDI+ remote code execution9.6CNA v3.10.8%2026-07-14Fix
CVE-2026-50379Microsoft Windows Media elevation of privilege7.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50378Microsoft Windows Key Guard elevation of privilege7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-50377Microsoft Windows Kernel elevation of privilege5.5CNA v3.10.4%2026-07-14Fix
CVE-2026-50376Microsoft Windows Remote Desktop client information disclosure6.5CNA v3.10.9%2026-07-14Fix
CVE-2026-50375Microsoft Windows DirectX Graphics Kernel elevation of privilege6.3CNA v3.10.3%2026-07-14Fix
CVE-2026-50374Microsoft Windows Cloud Files Mini Filter driver elevation of privilege6.3CNA v3.10.3%2026-07-14Fix
CVE-2026-50373Microsoft Windows Search service elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50372Microsoft Windows Redirected Drive Buffering System elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50371Microsoft Windows LUA File Virtualization Filter driver elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-50370Microsoft Windows DHCP server service remote code execution8.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50369Microsoft Windows Remote Desktop services elevation of privilege8.8CNA v3.10.7%2026-07-14Exploit codeFix
CVE-2026-50368Windows Active Directory Federation services denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50367Microsoft Windows Sensor Data service elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50366Microsoft Windows Active Directory Domain services denial of service6.5CNA v3.11.1%2026-07-14Fix
CVE-2026-50365Microsoft Windows remote Access Management service/API (RPC server) elevation of privilege8.0CNA v3.10.5%2026-07-14Fix
CVE-2026-50364Microsoft Windows Backup service elevation of privilege7.3CNA v3.10.5%2026-07-14Fix
CVE-2026-50363Microsoft Windows Push Notifications elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50362Microsoft Windows Resilient File System (ReFS) remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50361Microsoft Brokering File System elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50360Microsoft Windows SMB server elevation of privilege8.8CNA v3.10.8%2026-07-14Fix
CVE-2026-50359Microsoft XML Core services elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50358Microsoft Windows Media elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50357Microsoft Windows Resilient File System (ReFS) elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50356Microsoft Windows App Store elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-50355Windows Active Directory Federation services denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50354Microsoft Windows Kernel elevation of privilege7.1CNA v3.10.3%2026-07-14Fix
CVE-2026-50353Microsoft Windows DirectX Graphics Kernel elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50352Microsoft Windows Cryptographic services information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50351Microsoft Windows Audio Compression Manager (ACM) elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50350Microsoft Windows Trusted Runtime interface driver information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50348Microsoft Windows Runtime elevation of privilege7.0CNA v3.10.4%2026-07-14Fix
CVE-2026-50347Microsoft Windows Data.dll remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50346Microsoft Windows netlogon RPC elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50345Microsoft Windows Runtime elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-50344Microsoft Windows OLE elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50343Microsoft Install service elevation of privilege7.8CNA v3.10.3%2026-07-14Exploit codeFix
CVE-2026-50342Microsoft Windows MIDI service module elevation of privileges8.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50341Microsoft Windows NTFS information disclosure5.5CNA v3.10.4%2026-07-14Fix
CVE-2026-50340Microsoft Windows Runtime elevation of privilege8.5CNA v3.10.7%2026-07-14Fix
CVE-2026-50339Microsoft Windows Push Notification information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50338Microsoft Azure Spring Apps elevation of privilege8.2CNA v3.10.5%2026-07-14Fix
CVE-2026-50337Microsoft Windows Notification elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50336Microsoft Windows Media elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50335Microsoft Windows Operating Systems elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50334Microsoft Windows Push Notification information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50333Microsoft Windows Spaceport.sys elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50332Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50331Microsoft Windows Application Model Core API elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50330Microsoft Windows Remote Desktop client elevation of privilege7.5CNA v3.11.3%2026-07-14Fix
CVE-2026-50329Microsoft DWM Core library elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50328Microsoft Windows Server Update Service (WSUS) tampering7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50327Microsoft Windows Media remote code execution7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50326Microsoft Windows Unified Consent System elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50325Microsoft Windows win32k elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-50324Windows Active Directory Federation services denial of service5.9CNA v3.10.9%2026-07-14Fix
CVE-2026-50323Microsoft Windows Runtime elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50322Microsoft Windows Runtime elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-50321Microsoft Windows USB driver elevation of privilege7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-50318Microsoft Windows Resilient File System (ReFS) elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50317Microsoft Windows Operating Systems elevation of privilege7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-50316Microsoft Windows Kernel information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-50315Microsoft Windows Image Acquisition elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50314Microsoft Office remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50313Microsoft Windows NTFS remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50312Microsoft Windows Ancillary function driver for WinSock elevation of privilege4.7CNA v3.10.4%2026-07-14Fix
CVE-2026-50311Microsoft Windows Server elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50310Microsoft Windows Human Interface Device information disclosure4.7CNA v3.10.3%2026-07-14Fix
CVE-2026-50309Microsoft Windows NTFS remote code execution7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50308Microsoft Windows NTFS remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50307Microsoft Windows TCP/IP elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50306Microsoft Windows TCP/IP elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50305Microsoft Brokering File System elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50304Windows Active Directory Federation services denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-50303Microsoft Windows Key Guard security feature bypass5.5CNA v3.10.3%2026-07-14Fix
CVE-2026-50302Microsoft Windows Cryptographic services security feature bypass4.2CNA v3.10.3%2026-07-14Fix
CVE-2026-50301Microsoft Office remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-50300Microsoft Windows DWM Core library information disclosure5.5CNA v3.10.4%2026-07-14Fix
CVE-2026-50299Microsoft Windows Storage Spaces Direct remote code execution6.8CNA v3.10.4%2026-07-14Fix
CVE-2026-50298Microsoft Windows Spaceport.sys elevation of privilege6.8CNA v3.10.4%2026-07-14Fix
CVE-2026-50297Microsoft Windows win32k elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-50296Microsoft Windows DirectX Graphics Kernel elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-50295Microsoft Windows Zero Trust DNS security feature bypass5.5CNA v3.10.3%2026-07-14Fix
CVE-2026-50294Microsoft Windows Kernel information disclosure6.2CNA v3.10.5%2026-07-14Fix
CVE-2026-50293Microsoft Windows Internal Task Bar elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-50130Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`8.8CNA v3.10.3%2026-07-14Fix
CVE-2026-49981Symfony Twig sandbox extension vulnerability6.0CNA v4.00.4%2026-07-14Fix
CVE-2026-49978DOMPurify shadow DOM sanitization cross-site scripting6.3CNA v4.00.4%2026-07-14Fix
CVE-2026-49855tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)7.5CNA v3.10.6%2026-07-14Fix
CVE-2026-49854Tornado: Out-of-bounds memory access in C extension5.3CNA v3.10.4%2026-07-14Fix
CVE-2026-49853Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient7.7CNA v3.10.5%2026-07-14Fix
CVE-2026-49808Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-49807Microsoft Windows DirectX information disclosure6.2CNA v3.10.5%2026-07-14Fix
CVE-2026-49806Microsoft Windows USB Print driver elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-49805Microsoft Windows win32k elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-49804Microsoft Windows USB Video driver elevation of privilege6.6CNA v3.10.5%2026-07-14Fix
CVE-2026-49803Microsoft Windows AppX Deployment extensions elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-49802Microsoft Windows USB Print driver elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-49801Microsoft Windows SMB information disclosure5.5CNA v3.10.4%2026-07-14Fix
CVE-2026-49800Microsoft Windows Web Proxy Auto-Discovery Protocol (WPAD) elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-49799Microsoft Windows Local Security Authority subsystem Service (LSASS) denial of service6.5CNA v3.11.1%2026-07-14Fix
CVE-2026-49798Microsoft Windows Kernel elevation of privilege9.3CNA v3.10.4%2026-07-14Fix
CVE-2026-49797Microsoft Windows NTFS remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-49796Microsoft Windows GDI+ remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-49795Microsoft Windows Kernel elevation of privilege8.8CNA v3.10.3%2026-07-14Fix
CVE-2026-49794Microsoft Windows USB Audio class driver information disclosure4.6CNA v3.10.5%2026-07-14Fix
CVE-2026-49793Microsoft Windows Resilient File System (ReFS) remote code execution7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-49792Microsoft Windows Resilient File System (ReFS) remote code execution7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-49791Microsoft Windows Routing and Remote Access Service (RRAS) elevation of privilege7.1CNA v3.10.4%2026-07-14Fix
CVE-2026-49790Microsoft Windows Universal Disk Format File System Driver (UDFS) elevation of privilege7.3CNA v3.10.4%2026-07-14Fix
CVE-2026-49789Microsoft Windows NTFS elevation of privilege7.3CNA v3.10.4%2026-07-14Fix
CVE-2026-49788Microsoft Windows HTTP/2 denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-49787Microsoft Windows HTTP.sys denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-49784Microsoft Windows App Store elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-49783Microsoft Windows secure Boot security feature bypass7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-49488Apache OpenMeetings: Arbitrary file read6.5v3.10.7%2026-07-14Fix
CVE-2026-49477Soup Sieve: Regular expression denial of service (ReDoS) in soupsieve Selector parser7.5CNA v3.10.6%2026-07-14Fix
CVE-2026-49476Soup Sieve: Memory exhaustion via Large Comma-Separated Selector Lists in soupsieve7.5CNA v3.10.6%2026-07-14Fix
CVE-2026-49459DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS6.1CNA v3.10.4%2026-07-14Fix
CVE-2026-49458DOMPurify IN_PLACE sanitization cross-site scripting6.1CNA v3.10.4%2026-07-14Fix
CVE-2026-49184Microsoft Windows NTFS remote code execution8.4CNA v3.10.3%2026-07-14Fix
CVE-2026-49183Microsoft Windows Clipboard Server elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-49181Microsoft Windows DHCP client elevation of privilege7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-49180Microsoft Windows Universal Plug and Play (upnp.dll) information disclosure5.5CNA v3.10.4%2026-07-14Fix
CVE-2026-49178Microsoft Windows Active Directory Domain services remote code execution8.8CNA v3.10.9%2026-07-14Fix
CVE-2026-49177Microsoft Windows TCP/IP information disclosure5.5CNA v3.10.4%2026-07-14Fix
CVE-2026-49176Microsoft Windows WalletService elevation of privilege7.8CNA v3.10.3%2026-07-14Exploit codeFix
CVE-2026-49175Microsoft Windows DNS client elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-49174Microsoft Windows DNS client tampering6.1CNA v3.10.3%2026-07-14Fix
CVE-2026-49173Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-49172Microsoft Windows FTP service remote code execution9.8CNA v3.11.0%2026-07-14Fix
CVE-2026-49171Microsoft Windows Speech Runtime elevation of privilege7.5CNA v3.10.3%2026-07-14Fix
CVE-2026-49170Microsoft Windows StateRepository API Server file elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-49169Microsoft Windows DNS server remote code execution8.0CNA v3.10.8%2026-07-14Fix
CVE-2026-49168Microsoft Windows Storage Spaces Direct elevation of privilege6.8CNA v3.10.4%2026-07-14Fix
CVE-2026-49167Microsoft Windows Kernel elevation of privilege4.7CNA v3.10.4%2026-07-14Fix
CVE-2026-49166Microsoft Windows Print Configuration elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-49165Microsoft Windows App Store information disclosure7.1CNA v3.10.3%2026-07-14Fix
CVE-2026-49164Microsoft Windows Active Directory Domain services remote code execution8.1CNA v3.10.8%2026-07-14Fix
CVE-2026-49162Microsoft Brokering File System elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-48816sigstore-js has insufficient verification of data authenticity6.5CNA v3.10.2%2026-07-14Fix
CVE-2026-48815Sigstore's `certificateOIDs` verification constraints are silently dropped and never enforced7.5CNA v3.10.2%2026-07-14Fix
CVE-2026-48808Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`6.0CNA v4.00.4%2026-07-14Fix
CVE-2026-48807Twig: Sandbox `__toString` policy bypass via `Traversable` in `join` and `replace` filters7.1CNA v4.00.4%2026-07-14Fix
CVE-2026-48806Twig: Sandbox `__toString` policy bypass via dynamic mapping keys7.1CNA v4.00.4%2026-07-14Fix
CVE-2026-48805Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`5.3CNA v4.00.5%2026-07-14Fix
CVE-2026-48801markdown-it linkify-it LinkifyIt#match scan loop has quadratic algorithmic complexity8.7CNA v4.00.5%2026-07-14Fix
CVE-2026-48784SensioLabs Symfony URL generator open redirect5.1CNA v4.00.3%2026-07-14Fix
CVE-2026-48761Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL attributes5.3CNA v4.00.3%2026-07-14Fix
CVE-2026-48760SensioLabs Symfony HTML sanitizer URL parser UI misrepresentation5.3CNA v4.00.3%2026-07-14Fix
CVE-2026-48758@sigstore/core has DSSE payloadType type-binding failure5.4CNA v3.10.3%2026-07-14Fix
CVE-2026-48747SensioLabs Symfony Mailomat webhook signature parser improper signature verification6.3CNA v4.00.2%2026-07-14Fix
CVE-2026-48736symfony NoPrivateNetworkHttpClient server-side request forgery6.9CNA v4.00.6%2026-07-14Fix
CVE-2026-48581Surface Broker SDMA elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48580Microsoft Excel information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-48572Microsoft Windows App Package Installer elevation of privilege7.0CNA v3.10.2%2026-07-14Fix
CVE-2026-48571Microsoft Windows App Package Installer elevation of privilege7.0CNA v3.10.3%2026-07-14Fix
CVE-2026-48564Microsoft Windows DHCP server service remote code execution8.8CNA v3.10.9%2026-07-14Fix
CVE-2026-48561Microsoft Edge Copilot remote code execution9.6CNA v3.10.9%2026-07-14Fix
CVE-2026-48489SensioLabs Symfony authentication failure handler incorrect authorization8.7CNA v4.00.6%2026-07-14Fix
CVE-2026-48371Adobe Commerce cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-07-14Fix
CVE-2026-48370Media Encoder out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48369Adobe Premiere Pro out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48368Adobe Audition out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48367Adobe After Effects out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48366Media Encoder out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48365Adobe Audition out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48359Adobe Experience Manager improper restriction of XML external entity reference (XXE)9.6CNA v3.11.0%2026-07-14Fix
CVE-2026-48358Adobe Commerce improper encoding or escaping of output9.1CNA v3.11.2%2026-07-14Fix
CVE-2026-48357Adobe CAI Content Credentials uncontrolled resource consumption6.2CNA v3.10.3%2026-07-14Fix
CVE-2026-48356Adobe Commerce unrestricted upload of file with dangerous type9.3CNA v3.11.0%2026-07-14Exploit codeFix
CVE-2026-48355Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-07-14Fix
CVE-2026-48354Adobe CAI Content Credentials integer overflow or wraparound6.2CNA v3.10.3%2026-07-14Fix
CVE-2026-48353Adobe CAI Content Credentials improper input validation5.5CNA v3.10.3%2026-07-14Fix
CVE-2026-48352Adobe CAI Content Credentials improper input validation7.5CNA v3.10.9%2026-07-14Fix
CVE-2026-48351Adobe CAI Content Credentials improper input validation7.5CNA v3.10.9%2026-07-14Fix
CVE-2026-48350Animate improper limitation of a pathname to a restricted directory (path traversal)8.6CNA v3.10.3%2026-07-14Fix
CVE-2026-48349Animate incorrect authorization8.1CNA v3.10.2%2026-07-14Fix
CVE-2026-48348Animate incorrect authorization7.7CNA v3.10.2%2026-07-14Fix
CVE-2026-48347Animate improper neutralization of special elements used in an OS command (OS command injection)7.7CNA v3.10.7%2026-07-14Fix
CVE-2026-48346Animate untrusted search path7.9CNA v3.10.3%2026-07-14Fix
CVE-2026-48345Animate improper neutralization of special elements used in an OS command (OS command injection)8.2CNA v3.10.9%2026-07-14Fix
CVE-2026-48344Adobe Creative Cloud Desktop GoCart time-of-check time-of-use (TOCTOU) race condition7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-48343Bridge out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48342Bridge integer overflow or wraparound7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48341Bridge out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48340Bridge untrusted pointer dereference7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48339Bridge heap-based buffer overflow7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48338Adobe ColdFusion improper limitation of a pathname to a restricted directory (path traversal)6.8CNA v3.10.5%2026-07-14Fix
CVE-2026-48337Adobe Illustrator out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48336Adobe Illustrator out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48335Adobe Illustrator out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48334Adobe Illustrator improper input validation9.3CNA v3.11.0%2026-07-14Fix
CVE-2026-48332Adobe ColdFusion server-side request forgery (SSRF)7.7CNA v3.10.8%2026-07-14Fix
CVE-2026-48329Adobe ColdFusion insufficient session expiration2.7CNA v3.10.6%2026-07-14Fix
CVE-2026-48328Adobe ColdFusion improper input validation7.7CNA v3.10.8%2026-07-14Fix
CVE-2026-48327Adobe ColdFusion incorrect authorization9.0CNA v3.10.4%2026-07-14Fix
CVE-2026-48325Adobe ColdFusion missing authentication for critical function9.3CNA v3.10.6%2026-07-14Fix
CVE-2026-48324Adobe ColdFusion improper neutralization of special elements used in an SQL command (SQL injection)9.1CNA v3.11.1%2026-07-14Fix
CVE-2026-48322Adobe ColdFusion improper control of generation of code (code injection)9.9CNA v3.11.2%2026-07-14Fix
CVE-2026-48321Adobe ColdFusion incorrect authorization9.3CNA v3.10.4%2026-07-14Fix
CVE-2026-48320Adobe ColdFusion cross-site scripting (reflected XSS)8.5CNA v3.10.5%2026-07-14Fix
CVE-2026-48319Adobe ColdFusion improper limitation of a pathname to a restricted directory (path traversal)9.1CNA v3.11.4%2026-07-14Fix
CVE-2026-48318Adobe ColdFusion improper limitation of a pathname to a restricted directory (path traversal)9.9CNA v3.11.1%2026-07-14Fix
CVE-2026-48312Adobe CAI Content Credentials improper input validation6.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48311Bridge out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48310Adobe Experience Manager improper limitation of a pathname to a restricted directory8.6CNA v3.11.0%2026-07-14Fix
CVE-2026-48309Adobe Audition out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48308Adobe Premiere Pro improper input validation5.9CNA v3.10.2%2026-07-14Fix
CVE-2026-48302Adobe CAI Content Credentials improper input validation6.2CNA v3.10.3%2026-07-14Fix
CVE-2026-48298Adobe CAI Content Credentials integer underflow (wrap or wraparound)6.2CNA v3.10.3%2026-07-14Fix
CVE-2026-48296Adobe CAI Content Credentials integer underflow (wrap or wraparound)6.2CNA v3.10.3%2026-07-14Fix
CVE-2026-48295Adobe CAI Content Credentials insufficiently protected credentials7.5CNA v3.10.8%2026-07-14Fix
CVE-2026-48290Adobe CAI Content Credentials server-side request forgery (SSRF)8.2CNA v3.10.3%2026-07-14Fix
CVE-2026-48287Adobe CAI Content Credentials untrusted search path7.4CNA v3.10.2%2026-07-14Fix
CVE-2026-48284Adobe ColdFusion improper input validation9.6CNA v3.10.5%2026-07-14Fix
CVE-2026-48275Adobe Illustrator untrusted search path8.6CNA v3.10.3%2026-07-14Fix
CVE-2026-48274Adobe After Effects out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48272Adobe Creative Cloud Desktop uncontrolled search path element7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-48270Adobe Premiere Pro out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48269Adobe Premiere Pro heap-based buffer overflow7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-48263Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-07-14Fix
CVE-2026-48262Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-07-14Fix
CVE-2026-48261Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-07-14Fix
CVE-2026-48260Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-07-14Fix
CVE-2026-48259Adobe Experience Manager server-side request forgery (SSRF)9.6CNA v3.10.9%2026-07-14Fix
CVE-2026-48257Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-07-14Fix
CVE-2026-48255Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-07-14Fix
CVE-2026-48254Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-07-14Fix
CVE-2026-48253Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2026-07-14Fix
CVE-2026-48252Adobe Experience Manager missing authentication for critical function8.6CNA v3.10.9%2026-07-14Fix
CVE-2026-48125UAParser.js Client Hints parser denial of service5.3CNA v3.10.5%2026-07-14Fix
CVE-2026-48069@grpc/grps-js: An incoming malformed compressed message can cause a client or server crash7.5CNA v3.10.9%2026-07-14Fix
CVE-2026-48068@grpc/grps-js: A malformed request can cause a server crash7.5CNA v3.10.9%2026-07-14Fix
CVE-2026-48038joi has an uncaught RangeError on deeply nested input through recursive `link` schemas5.3CNA v3.10.5%2026-07-14Fix
CVE-2026-48001Adobe Commerce information exposure3.7CNA v3.10.5%2026-07-14Fix
CVE-2026-48000Adobe Commerce URL redirection to untrusted site (open redirect)6.1CNA v3.10.5%2026-07-14Fix
CVE-2026-47999Adobe Commerce cross-site scripting (stored XSS)4.8CNA v3.10.4%2026-07-14Fix
CVE-2026-47998Adobe Commerce incorrect authorization5.9CNA v3.10.7%2026-07-14Fix
CVE-2026-47997Adobe Commerce incorrect authorization5.9CNA v3.10.7%2026-07-14Fix
CVE-2026-47996Adobe Commerce incorrect authorization6.8CNA v3.10.9%2026-07-14Fix
CVE-2026-47995Adobe Commerce cross-site scripting (stored XSS)8.1CNA v3.10.7%2026-07-14Fix
CVE-2026-47994Adobe Commerce cross-site scripting (stored XSS)8.7CNA v3.10.7%2026-07-14Fix
CVE-2026-47992Adobe Commerce improper neutralization of special elements used in an SQL command (SQL injection)7.2CNA v3.11.0%2026-07-14Fix
CVE-2026-47988Adobe Commerce incorrect authorization8.6CNA v3.10.8%2026-07-14Fix
CVE-2026-47984Adobe Commerce incorrect authorization8.2CNA v3.10.7%2026-07-14Fix
CVE-2026-47979Media Encoder out-of-bounds read5.5CNA v3.10.3%2026-07-14Fix
CVE-2026-47976Media Encoder out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-47971Media Encoder stack-based buffer overflow7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-47969Adobe Audition out-of-bounds read5.5CNA v3.10.3%2026-07-14Fix
CVE-2026-47968Adobe Audition out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-47967Adobe Audition out-of-bounds write7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-47767Sensiolabs Symfony SymfonyRuntime interpretation conflict8.3CNA v4.00.7%2026-07-14Fix
CVE-2026-47737Puma PROXY protocol v1 Accepts Repeated protocol headers on Persistent Connections7.5CNA v3.10.3%2026-07-14Fix
CVE-2026-47736Puma PROXY protocol v1 parser allows Remote memory exhaustion7.5CNA v3.10.6%2026-07-14Fix
CVE-2026-47732Twig Sandbox: Multiple `__toString` policy bypasses via unguarded string coercion points7.1CNA v4.00.4%2026-07-14Fix
CVE-2026-47730Twig: XSS in profiler HtmlDumper via unescaped template and profile names5.1CNA v4.00.3%2026-07-14Fix
CVE-2026-47642Microsoft Excel remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-47632Microsoft Azure Connected Machine Agent elevation of privilege8.8CNA v3.10.5%2026-07-14Fix
CVE-2026-47482NVIDIA Triton Inference Server memory leak7.5CNA v3.10.5%2026-07-14Fix
CVE-2026-47481NVIDIA Triton Inference Server authentication bypass6.5CNA v3.10.4%2026-07-14Fix
CVE-2026-47480NVIDIA Triton Inference Server uncaught exception7.5CNA v3.10.5%2026-07-14Fix
CVE-2026-47479NVIDIA Triton Inference Server resource exhaustion7.5CNA v3.10.5%2026-07-14Fix
CVE-2026-47478NVIDIA Triton Inference Server expired file descriptor use7.5CNA v3.10.5%2026-07-14Fix
CVE-2026-47477NVIDIA Triton Inference Server stack-based buffer overflow7.5CNA v3.10.5%2026-07-14Fix
CVE-2026-47476NVIDIA Triton Inference Server resource exhaustion7.5CNA v3.10.5%2026-07-14Fix
CVE-2026-47475NVIDIA TensorRT-LLM reachable assertion6.2CNA v3.10.2%2026-07-14Fix
CVE-2026-47473NVIDIA TensorRT-LLM write-what-where condition7.4CNA v3.10.2%2026-07-14Fix
CVE-2026-47472NVIDIA TensorRT-LLM deserialization of untrusted data7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-47471NVIDIA TensorRT-LLM heap-based buffer overflow7.5CNA v3.10.3%2026-07-14Fix
CVE-2026-47470NVIDIA TensorRT-LLM denial of service6.2CNA v3.10.2%2026-07-14Fix
CVE-2026-47429Vitest: Arbitrary file can be read and executed when Vitest UI server is listening9.8CNA v3.10.9%2026-07-14Fix
CVE-2026-47428Vitest browser mode serves unsanitized otelCarrier query parameter as inline script9.6CNA v3.10.6%2026-07-14Fix
CVE-2026-47423DOMPurify XSS via `selectedcontent` re-clone8.2CNA v3.10.4%2026-07-14Fix
CVE-2026-47305Visual Studio remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-47304Microsoft .NET security feature bypass8.1CNA v3.10.3%2026-07-14Fix
CVE-2026-47303Microsoft NET ASP.NET Core elevation of privilege8.8CNA v3.10.8%2026-07-14Fix
CVE-2026-47302Microsoft .NET denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-47301Configuration Manager elevation of privilege8.8CNA v3.10.8%2026-07-14Exploit codeFix
CVE-2026-47300Microsoft NET ASP.NET Core elevation of privilege8.8CNA v3.10.8%2026-07-14Fix
CVE-2026-47296Microsoft SQL server elevation of privilege7.5CNA v3.10.7%2026-07-14Fix
CVE-2026-47295Microsoft SQL server elevation of privilege8.8CNA v3.11.0%2026-07-14Fix
CVE-2026-47290Microsoft Office remote code execution7.8CNA v3.10.5%2026-07-14Fix
CVE-2026-47282Microsoft GitHub Copilot and Visual Studio Code information disclosure6.5CNA v3.10.9%2026-07-14Fix
CVE-2026-47212Sensiolabs Symfony Twilio Notifier webhook parser improper signature verification6.9CNA v4.01.5%2026-07-14Fix
CVE-2026-46644Symfony Polyfill Intl-Idn IDN label normalization improper equivalence validation6.9CNA v4.00.5%2026-07-14Fix
CVE-2026-46640Symfony Twig macro reference compiler code injection8.7CNA v4.00.6%2026-07-14Fix
CVE-2026-46639Twig: Sandbox property and method bypass via object-destructuring assignment7.1CNA v4.00.4%2026-07-14Fix
CVE-2026-46638Symfony Twig sandbox extension protection mechanism failure6.0CNA v4.00.5%2026-07-14Fix
CVE-2026-46637Symfony Twig HTML output filters improper output encoding5.1CNA v4.00.3%2026-07-14Fix
CVE-2026-46635Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects)5.3CNA v4.00.3%2026-07-14Fix
CVE-2026-46634Twig: `template_from_string` escapes a SourcePolicy-driven sandbox via synthesized template name7.7CNA v4.00.6%2026-07-14Fix
CVE-2026-46633Symfony Twig template compiler code injection8.7CNA v4.00.7%2026-07-14Fix
CVE-2026-46629Twig: Unbounded formatter memoisation in Twig/intl-extra keyed on template-controlled arguments5.3CNA v4.00.5%2026-07-14Fix
CVE-2026-46628Twig: The `spaceless` filter implicitly marks its output as safe5.1CNA v4.00.3%2026-07-14Fix
CVE-2026-46627Twig: Sandbox resource exhaustion via unbounded `for` / `range`7.1CNA v4.00.5%2026-07-14Fix
CVE-2026-45756symfony JsonPath component denial of service8.2CNA v4.00.6%2026-07-14Fix
CVE-2026-45755Symfony Mailtrap mailer bridge improper signature verification6.9CNA v4.00.3%2026-07-14Fix
CVE-2026-45754Symfony Mailjet and LOX24 notifier bridges missing authentication6.9CNA v4.00.4%2026-07-14Fix
CVE-2026-45753symfony html-sanitizer UrlAttributeSanitizer cross-site scripting2.1CNA v4.00.3%2026-07-14Fix
CVE-2026-45646OData for ASP.NET and ASP.NET Core denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-45496Microsoft Visual Studio Code security feature bypass5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-45363`jwt` (Ruby gem) empty-key HMAC bypass9.1CNA v3.10.4%2026-07-14Fix
CVE-2026-45305Symfony: YAML Parser ReDoS via Catastrophic Backtracking in Parser::cleanup Regex8.7CNA v4.00.7%2026-07-14Fix
CVE-2026-45304symfony Yaml Parser vulnerability8.7CNA v4.00.7%2026-07-14Fix
CVE-2026-45133Symfony: [Yaml] Harden the parser when handling untrusted input8.2CNA v4.00.6%2026-07-14Fix
CVE-2026-45077Symfony: Unauthenticated PHP object deserialization in MonologBridge server:log Listener8.3CNA v4.00.7%2026-07-14Fix
CVE-2026-45075Sensiolabs Symfony access control attributes incorrect authorization8.3CNA v4.00.4%2026-07-14Fix
CVE-2026-45074Sensiolabs Symfony Cas2Handler CAS service URL vulnerability7.6CNA v4.00.5%2026-07-14Fix
CVE-2026-45073Symfony: SQL injection in PdoAdapter::doClear via Unsanitized $prefix6.3CNA v4.00.5%2026-07-14Fix
CVE-2026-45072Symfony: Stored XSS in WebProfiler CodeExtension::fileExcerpt Unescaped Non-PHP File Rendering2.0CNA v4.00.3%2026-07-14Fix
CVE-2026-45071Symfony: XXE (Local File Disclosure) in DomCrawler::addXmlContent via validateOnParse = true8.7CNA v4.00.6%2026-07-14Exploit codeFix
CVE-2026-45070Symfony: Email header injection via Non-Token Characters in Mime Parameter Names6.3CNA v4.00.4%2026-07-14Fix
CVE-2026-45069Symfony: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims8.8CNA v4.00.3%2026-07-14Fix
CVE-2026-45068Symfony: Argument injection in SendmailTransport via Dash-Prefixed Recipient Address8.7CNA v4.00.5%2026-07-14Fix
CVE-2026-45067Symfony: Email header / SMTP command injection via CRLF in Symfony\Component\Mime\Address6.3CNA v4.00.6%2026-07-14Fix
CVE-2026-45066Sensiolabs Symfony HtmlSanitizer host allowlist vulnerability2.3CNA v4.00.3%2026-07-14Fix
CVE-2026-45065Sensiolabs Symfony UrlGenerator route requirement validation open redirect2.3CNA v4.00.3%2026-07-14Fix
CVE-2026-45064Symfony: HtmlSanitizer URL Attributes Pass through BiDi Override Characters → Visual href spoofing2.3CNA v4.00.3%2026-07-14Fix
CVE-2026-45063Symfony: Identity spoofing via Unanchored DN Regex in X509Authenticator9.1CNA v4.00.4%2026-07-14Fix
CVE-2026-44806Microsoft Windows Secure Channel denial of service5.3CNA v3.11.2%2026-07-14Fix
CVE-2026-44800Microsoft Windows Push Notifications elevation of privilege7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-44771Missing authorization check in SAP S/4HANA (Draft operation)4.3CNA v3.10.3%2026-07-14Fix
CVE-2026-44770Missing authorization check in SAP S/4 HANA (Create Single Payment)4.3CNA v3.10.3%2026-07-14Fix
CVE-2026-44769SQL injection vulnerability in SAP S/4HANA Project Management (PPM-PRO)5.5CNA v3.10.3%2026-07-14Fix
CVE-2026-44768SAP CRM WebClient UI content security policy configuration vulnerability4.1CNA v3.10.3%2026-07-14Fix
CVE-2026-44767SAP @ui5/webcomponents-base Allowlist Bypass in setThemeRoot enables Cross-Origin CSS injection6.1CNA v3.10.3%2026-07-14
CVE-2026-44761Insecure Sample Credentials in SAP Commerce Cloud9.1CNA v3.10.5%2026-07-14Fix
CVE-2026-44760Cross-site scripting vulnerability in SAP NetWeaver Application Server ABAP4.7CNA v3.10.2%2026-07-14Fix
CVE-2026-44759Cross-site scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal6.1CNA v3.10.3%2026-07-14Fix
CVE-2026-44753Information disclosure vulnerability in SAP HANA Extended Application Services classic model3.7CNA v3.10.3%2026-07-14Fix
CVE-2026-44752Cross-site scripting vulnerability in SAP NetWeaver Application Server Java8.2CNA v3.10.4%2026-07-14Fix
CVE-2026-44747Memory corruption vulnerability in SAP NetWeaver Application Server ABAP9.9CNA v3.10.6%2026-07-14Fix
CVE-2026-44745Open redirect vulnerability in SAP Approuter8.1CNA v3.10.5%2026-07-14Fix
CVE-2026-42990Microsoft Windows SQL Server ODBC driver elevation of privilege9.8CNA v3.11.0%2026-07-14Fix
CVE-2026-42982Microsoft Windows Secure Kernel Mode elevation of privilege7.8CNA v3.10.3%2026-07-14Fix
CVE-2026-42975Microsoft Windows Bluetooth Port driver remote code execution8.0CNA v3.10.5%2026-07-14Fix
CVE-2026-42900Microsoft Windows App Store elevation of privilege8.1CNA v3.10.5%2026-07-14Fix
CVE-2026-42447jadx Summary panel cross-site scripting3.6CNA v3.10.2%2026-07-14Fix
CVE-2026-42049jadx Gradle export template code injection8.4CNA v4.00.2%2026-07-14Fix
CVE-2026-41087Microsoft Windows File Explorer information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-40422Microsoft Windows File Explorer information disclosure5.5CNA v3.10.4%2026-07-14Fix
CVE-2026-40400Microsoft Windows PowerShell remote code execution8.0CNA v3.10.9%2026-07-14Fix
CVE-2026-40378Microsoft Windows Local Security Authority subsystem Service (LSASS) denial of service7.5CNA v3.11.2%2026-07-14Fix
CVE-2026-38450Aetopia Digital Asset Management Add/Update Project function code injection9.8CISA ADP v3.11.1%2026-07-14
CVE-2026-36214osTicket cross-site scripting5.4CISA ADP v3.10.4%2026-07-14Exploit codeFix
CVE-2026-36035CAXPerts UniversalPlantViewer WebServices Server license deactivation endpoint denial of service6.5CISA ADP v3.10.5%2026-07-14
CVE-2026-34349Microsoft Windows Media information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-34348Microsoft Windows Event Logging service information disclosure6.5CNA v3.11.0%2026-07-14Fix
CVE-2026-34346Microsoft Windows Ancillary function driver for WinSock information disclosure5.5CNA v3.10.3%2026-07-14Fix
CVE-2026-34328Microsoft Windows Audio service information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-33842Microsoft Windows File Explorer information disclosure5.5CNA v3.10.5%2026-07-14Fix
CVE-2026-27690HTTP request smuggling in SAP Approuter9.1CNA v3.10.7%2026-07-14Fix
CVE-2026-24272NVIDIA TensorRT heap-based buffer overflow7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-24271NVIDIA TensorRT-LLM resource exhaustion6.2CNA v3.10.2%2026-07-14Fix
CVE-2026-24268NVIDIA TensorRT heap-based buffer overflow7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-24259NVIDIA TensorRT-LLM missing authentication6.4CNA v3.10.2%2026-07-14Fix
CVE-2026-24238NVIDIA TensorRT improper array index validation7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-24234NVIDIA TensorRT-LLM server-side request forgery6.8CNA v3.10.2%2026-07-14Fix
CVE-2026-24233NVIDIA TensorRT-LLM deserialization of untrusted data8.4CNA v3.10.4%2026-07-14Fix
CVE-2026-24229NVIDIA TensorRT-LLM missing authentication7.3CNA v3.10.2%2026-07-14Fix
CVE-2026-24227NVIDIA TensorRT deserialization of untrusted data5.3CNA v3.11.0%2026-07-14Fix
CVE-2026-24226NVIDIA TensorRT-LLM inclusion of untrusted functionality6.3CNA v3.10.2%2026-07-14Fix
CVE-2026-24220NVIDIA TensorRT-LLM deserialization of untrusted data6.4CNA v3.10.3%2026-07-14Fix
CVE-2026-23573Fortinet FortiOS cross-site scripting6.1CNA v3.10.4%2026-07-14Fix
CVE-2026-21840HCL BigFix Platform is affected by a user enumeration vulnerability3.1CNA v3.10.2%2026-07-14
CVE-2026-15778Google Chrome improper input validation6.5CISA ADP v3.10.3%2026-07-14Fix
CVE-2026-15777Google Chrome UI use-after-free7.5CISA ADP v3.10.3%2026-07-14Fix
CVE-2026-15776Google Chrome V8 inappropriate implementation8.8CISA ADP v3.10.5%2026-07-14Fix
CVE-2026-15775Google Chrome V8 inappropriate implementation6.5CISA ADP v3.10.3%2026-07-14Fix
CVE-2026-15774Google Chrome Skia use-after-free8.3CISA ADP v3.10.3%2026-07-14Fix
CVE-2026-15773Google Chrome Core use-after-free9.6CISA ADP v3.10.4%2026-07-14Fix
CVE-2026-15772Google Chrome GPU use-after-free8.3CISA ADP v3.10.3%2026-07-14Fix
CVE-2026-15771Google Chrome improper input validation5.3CISA ADP v3.10.4%2026-07-14Fix
CVE-2026-15770Google Chrome uninitialized variable use6.5CISA ADP v3.10.4%2026-07-14Fix
CVE-2026-15769Google Chrome sandbox escape8.3CISA ADP v3.10.3%2026-07-14Fix
CVE-2026-15768Google Chrome HTML-in-Canvas insufficient policy enforcement6.5CISA ADP v3.10.3%2026-07-14Fix
CVE-2026-15767Google Chrome libyuv heap-based buffer overflow8.8CISA ADP v3.10.4%2026-07-14Fix
CVE-2026-15766Google Chrome uninitialized variable use6.5CISA ADP v3.10.4%2026-07-14Fix
CVE-2026-15765Google Chrome Ozone use-after-free7.5CISA ADP v3.10.5%2026-07-14Fix
CVE-2026-15764Google Chrome Ozone use-after-free7.5CISA ADP v3.10.5%2026-07-14Fix
CVE-2026-15757Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem router6.3CNA v4.00.3%2026-07-14Fix
CVE-2026-15753zhinianboke xianyu-auto-reply review approve trusting HTTP permission methods on the server side5.3CNA v4.00.4%2026-07-14
CVE-2026-15752zhinianboke xianyu-auto-reply Backend User endpoint users authorization6.9CNA v4.00.5%2026-07-14
CVE-2026-15751mastergo-design mastergo-magic-mcp component generator tool path traversal4.8CNA v4.00.2%2026-07-14
CVE-2026-15750mastergo-design mastergo-magic-mcp component link tool server-side request forgery5.3CNA v4.00.4%2026-07-14
CVE-2026-15749mastergo-design mastergo-magic-mcp mcp__C2d get-c2d.ts execute path traversal4.8CNA v4.00.2%2026-07-14
CVE-2026-15747Mojolicious session CSRF token information disclosure9.1CISA ADP v3.10.3%2026-07-14Fix
CVE-2026-15738Amazon aws-load-balancer-controller Gateway API listener-rule generation incorrect behavior order5.8CNA v4.00.6%2026-07-14Fix
CVE-2026-15736Snowflake SQLAlchemy affected by SQL injection and local file disclosure8.3CNA v3.10.4%2026-07-14Fix
CVE-2026-15720Open5GS pre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler8.6CNA v3.10.5%2026-07-14
CVE-2026-15719Mozilla Firefox site isolation issue in the DOM: Navigation component5.4CISA ADP v3.10.3%2026-07-14Fix
CVE-2026-15718Mozilla Firefox invalid pointer in the JavaScript: WebAssembly component4.3CISA ADP v3.10.5%2026-07-14Exploit codeFix
CVE-2026-15715SourceCodester Class and Exam Timetabling System exam.php cross-site scripting5.3CNA v4.00.5%2026-07-14
CVE-2026-15714libsoup multipart input stream parser out-of-bounds read6.5CNA v3.10.4%2026-07-14Fix
CVE-2026-15713libsoup HTTP/2 connection handling memory leak5.9CNA v3.10.3%2026-07-14Fix
CVE-2026-15712libsoup HTTP/2 GOAWAY frame parser out-of-bounds read5.9CNA v3.10.5%2026-07-14Fix
CVE-2026-15711libsoup WebSocket frame parser denial of service7.5CNA v3.10.7%2026-07-14Fix
CVE-2026-15709libsoup WebSocket permessage-deflate extension denial of service7.5CNA v3.10.9%2026-07-14Fix
CVE-2026-15703SourceCodester Simple and Nice Shopping Cart Script userproductdeletequery.php SQL injection6.9CNA v4.00.4%2026-07-14
CVE-2026-15702tamagui config.ts updateConfig prototype pollution5.3CNA v4.00.5%2026-07-14Fix
CVE-2026-15701Totolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflow9.3CNA v4.01.1%2026-07-14
CVE-2026-15700DedeCMS Album Publishing feature zip.class.php ExtractFile path traversal5.1CNA v4.00.5%2026-07-14
CVE-2026-15699spencermountain compromise Public Root API extend.js nlp.extend prototype pollution5.3CNA v4.00.4%2026-07-14
CVE-2026-15698kofrasa mingo Update API updateMany prototype pollution5.3CNA v4.00.5%2026-07-14Fix
CVE-2026-15697svgdotjs svg.js npm Package API EventTarget.on prototype pollution5.3CNA v4.00.4%2026-07-14
CVE-2026-15696Tenda BE12 Pro VirtualSer fromVirtualSer stack-based overflow8.7CNA v4.00.9%2026-07-14
CVE-2026-15695Tenda BE12 Pro DhcpListClient fromDhcpListClient stack-based overflow8.7CNA v4.00.9%2026-07-14
CVE-2026-15694Tenda BE12 Pro SetIpBind fromSetIpBind stack-based overflow8.7CNA v4.00.9%2026-07-14
CVE-2026-15693Tenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflow8.7CNA v4.00.9%2026-07-14
CVE-2026-15692Tenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflow8.7CNA v4.00.9%2026-07-14
CVE-2026-15691Tenda BE12 Pro SafeClientFilter fromSafeClientFilter stack-based overflow8.7CNA v4.00.9%2026-07-14
CVE-2026-15690open62541 Shared client ua_client_connect.c responseReadNamespacesArray null pointer dereference2.3CNA v4.00.4%2026-07-14
CVE-2026-15678code-projects Online Job Portal DetailJob.php cross-site scripting5.1CNA v4.00.3%2026-07-14
CVE-2026-15677code-projects Online Job Portal JobSeekerInsert.php unrestricted upload6.9CNA v4.00.5%2026-07-14
CVE-2026-15676code-projects Online Job Portal DeleteUser.php SQL injection6.9CNA v4.00.4%2026-07-14
CVE-2026-15675code-projects Online Job Portal EditUser.php SQL injection6.9CNA v4.00.4%2026-07-14
CVE-2026-15672itsourcecode Electronic Judging System add_judges.php SQL injection5.3CNA v4.00.3%2026-07-14
CVE-2026-15669louisho5 picobot exec tool exec.go ExecTool.Execute os command injection4.8CNA v4.01.1%2026-07-14
CVE-2026-15668louisho5 picobot web tool web.go WebTool.Execute server-side request forgery5.3CNA v4.00.4%2026-07-14
CVE-2026-15643AWS HealthLake MCP server SSRF via Pagination URL9.2CNA v4.00.4%2026-07-14Fix
CVE-2026-15642Devolutions Server information disclosure3.3CISA ADP v3.10.2%2026-07-14Fix
CVE-2026-15641Devolutions Server access request status endpoint improper authorization7.1CISA ADP v3.10.3%2026-07-14Fix
CVE-2026-15637Devolutions Server improper authorization7.5CISA ADP v3.10.3%2026-07-14Fix
CVE-2026-15629louisho5 picobot Workspace filesystem.go GetSkill link following5.3CNA v4.00.4%2026-07-14
CVE-2026-15628zhayujie chatgpt-on-wechat CowAgent Vision tool server-side request forgery5.3CNA v4.00.4%2026-07-14Fix
CVE-2026-15627nextlevelbuilder GoClaw tool.go handleNavigate information disclosure5.3CNA v4.00.4%2026-07-14
CVE-2026-15626nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal5.3CNA v4.00.4%2026-07-14
CVE-2026-15625nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist5.3CNA v4.00.5%2026-07-14
CVE-2026-15624nextlevelbuilder GoClaw BytePlus video download endpoint server-side request forgery5.3CNA v4.00.4%2026-07-14
CVE-2026-15622poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization6.9CNA v4.00.6%2026-07-14
CVE-2026-15621mosaxiv clawlet file tools fs_ops.go edit_file link following4.8CNA v4.00.2%2026-07-14
CVE-2026-15620mosaxiv clawlet tool_web_fetch.go tools.webFetch server-side request forgery5.3CNA v4.00.4%2026-07-14
CVE-2026-15619mosaxiv clawlet IPv4 tool_web_fetch.go web_fetch server-side request forgery5.3CNA v4.00.4%2026-07-14
CVE-2026-15429Privilege escalation via Improper Input Sanitization in TP-Link Archer VX1800v5.1CNA v4.01.4%2026-07-14Fix
CVE-2026-15428OS command injection in TR-069 (CWMP) Management interface in TP-Link Archer VX1800v8.5CNA v4.02.1%2026-07-14Fix
CVE-2026-15427OS command injection in TR-069 (CWMP) Management interface in TP-Link Archer VX1800v8.6CNA v4.00.8%2026-07-14Fix
CVE-2026-15416argoproj argo-helm argo-cd: Argo cd unauthenticated remote code execution in repo-server8.9CNA v3.10.5%2026-07-14Fix
CVE-2026-15410SonicWall SMA1000 Appliances code injection7.2CISA ADP v3.111.8%2026-07-14KEVEmerging ThreatsExploit codeKCVFix
CVE-2026-15409SonicWall SMA1000 Appliances server-side request forgery10.0CISA ADP v3.16.8%2026-07-14KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2026-15392DBD::File versions for Perl do not ensure the table file is not a symlink to an untrusted location7.7CISA ADP v3.10.2%2026-07-14Fix
CVE-2026-15389Inadequate access control in Sesame Time session management8.7CNA v4.00.4%2026-07-14
CVE-2026-15305TYPO3 CMS unrestricted file upload in Form Framework6.3CNA v4.00.3%2026-07-14Fix
CVE-2026-15265Tenable Agent path traversal leading to remote code execution9.3CNA v4.00.6%2026-07-14
CVE-2026-15183Snowflake Spark Connector SnowflakeFallbackCatalog option handling improper input validation9.2CNA v4.00.3%2026-07-14Fix
CVE-2026-15076Eclipse Vert.x origin validation error8.2CNA v4.00.2%2026-07-14Fix
CVE-2026-15075Eclipse Vert.x origin validation error8.2CNA v4.00.2%2026-07-14Fix
CVE-2026-15058Devolutions Server secure messages deletion endpoint improper authorization3.1CISA ADP v3.10.2%2026-07-14Fix
CVE-2026-15043HMBRAND DBI::SQL::Nano query predicate evaluation vulnerability9.8CISA ADP v3.10.4%2026-07-14Fix
CVE-2026-14903Ivanti Xtraction path traversal7.7CNA v3.11.2%2026-07-14Fix
CVE-2026-14902Ivanti Xtraction open redirect4.0CNA v3.10.7%2026-07-14Fix
CVE-2026-14852Checkmk mk_sap_hana: Privilege escalation via crafted sapstartsrv process name5.2CNA v4.00.2%2026-07-14Fix
CVE-2026-14646Nexus Repository 3 server-side request forgery (SSRF) via HTTP Redirect4.9CNA v4.00.3%2026-07-14Fix
CVE-2026-14645Nexus Repository 3 server-side request forgery (SSRF) via Webhook: Global Capability5.1CNA v4.00.3%2026-07-14Fix
CVE-2026-14504Nexus Repository 3 authorization bypass in component Upload API8.2CNA v4.00.2%2026-07-14Fix
CVE-2026-13699Eclipse KUKSA databroker PublishValue missing data_point panic4.3CNA v3.10.4%2026-07-14
CVE-2026-13001Podlove Podcast Publisher WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.13.8%2026-07-14NucleiExploit codeFix
CVE-2026-12988WP 2FA WordPress plugin account takeover via 2FA Setup email Binding6.4CISA ADP v3.10.3%2026-07-14Fix
CVE-2026-12707Unbounded path event queue growth in quiche via peer-driven source connection ID rotation7.5CNA v3.10.4%2026-07-14Fix
CVE-2026-12659Rockwell Automation Flex 5000® Adapter denial of service8.7CNA v4.00.4%2026-07-14Fix
CVE-2026-12606Eclipse Glassfish HTTP request smuggling6.3CNA v4.00.3%2026-07-14Fix
CVE-2026-12588Trellix HX Console decompression bomb6.0CNA v4.00.3%2026-07-14
CVE-2026-12583Newsletters WordPress plugin unauthenticated PHP object injection via Subscriber Custom field8.1CISA ADP v3.10.6%2026-07-14Fix
CVE-2026-12523Resource exhaustion in quiche HTTP/3 and QPACK layers7.5CNA v3.10.5%2026-07-14Fix
CVE-2026-12511AI Engine WordPress plugin Editor+ arbitrary file write via path traversal8.1CISA ADP v3.10.5%2026-07-14Fix
CVE-2026-12482Path traversal via Symlink Name Validation Bypass in keras-team/Keras6.5v3.10.2%2026-07-14Fix
CVE-2026-12478libsoup WebSocket frame processing out-of-bounds read4.8CNA v3.10.2%2026-07-14Fix
CVE-2026-11944openSIS Classic authenticated path traversal in SentMail attachment download6.5v3.10.5%2026-07-14
CVE-2026-11917ThinManager® path traversal via API7.2CNA v4.00.4%2026-07-14Fix
CVE-2026-11802FoodBook Lite WordPress plugin missing authorization unauthenticated user Registration5.3CNA v3.10.5%2026-07-14Fix
CVE-2026-11567SureForms WordPress plugin unauthenticated Payment Amount bypass5.9CISA ADP v3.10.3%2026-07-14Fix
CVE-2026-11563Word Count and Social Shares WordPress plugin Subscriber+ arbitrary file deletion via path traversal9.6CISA ADP v3.10.2%2026-07-14
CVE-2026-11403Nexus Repository Manager insufficient entropy in Format-Specific API Key Generation8.7CNA v4.00.3%2026-07-14Fix
CVE-2026-11390News Kit Addons For Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-07-14Fix
CVE-2026-10714Rockwell Automation FactoryTalk® Services Platform FTSP weak authentication8.8CNA v4.00.1%2026-07-14
CVE-2026-10672zephyrproject zephyr unterminated URI buffer causes out-of-bounds read in LwM2M firmware pull8.2CNA v3.10.6%2026-07-14Fix
CVE-2026-10671zephyrproject zephyr user thread can re-initialize an in-use `k_pipe`, corrupting kernel wait queues7.1CNA v3.10.2%2026-07-14Fix
CVE-2026-10670Zephyr thread name syscall verifier null pointer dereference5.5CNA v3.10.2%2026-07-14Fix
CVE-2026-10669Zephyr Xtensa MPU buffer validation integer overflow7.8CNA v3.10.2%2026-07-14Fix
CVE-2026-10577Rockwell Automation 1715 Redundant IO access control vulnerability10.0CNA v4.00.4%2026-07-14Fix
CVE-2026-105731734 POINT I/OTM denial of service via Malformed Inputs on CIP object6.3CNA v4.00.2%2026-07-14
CVE-2026-10051Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections6.9CNA v4.00.3%2026-07-14Fix
CVE-2026-96531756-EN2, 1756-EN3, and 1756-ENBT denial of service via CIP Connection ID8.7CNA v4.00.2%2026-07-14Fix
CVE-2026-9636Rockwell Automation ControlLogix 5580 CIP Security certificate revocation handling vulnerability8.2CNA v4.00.2%2026-07-14Fix
CVE-2026-9561Eclipse Kura insufficient verification of data authenticity8.8CNA v4.00.3%2026-07-14
CVE-2026-9341Academy LMS WordPress plugin insecure direct object reference4.3CNA v3.10.4%2026-07-14Fix
CVE-2026-9292Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud stored cross-site scripting8.4CNA v4.00.5%2026-07-14Fix
CVE-2026-91401718-AENTR/1719-AENTR denial of service8.7CNA v4.00.4%2026-07-14Fix
CVE-2026-9128Rockwell Automation Studio 5000 Logix Designer external tools configuration unquoted search path7.3CNA v4.00.2%2026-07-14Fix
CVE-2026-9127Rockwell Automation Studio 5000 Logix Designer external tools configuration incorrect authorization7.3CNA v4.00.2%2026-07-14Fix
CVE-2026-9108Rockwell Automation Studio 5000 Logix Designer ACD project file import path traversal5.4CNA v4.00.2%2026-07-14Fix
CVE-2026-8590Spotfire OAuth2 PKCE Bypass for public clients8.7CNA v4.00.4%2026-07-14
CVE-2026-8384Eclipse Jetty: Path parameter traversal5.3CNA v3.10.3%2026-07-14Fix
CVE-2026-8314Rockwell Automation Arena® memory corruption7.0CNA v4.00.3%2026-07-14Fix
CVE-2026-8313Rockwell Automation Arena® memory corruption7.0CNA v4.00.3%2026-07-14Fix
CVE-2026-8312Rockwell Automation Arena® memory corruption7.0CNA v4.00.3%2026-07-14Fix
CVE-2026-8085Rockwell Automation Arena® memory corruption7.0CNA v4.00.3%2026-07-14Fix
CVE-2026-7640WP Customer Area WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-14Fix
CVE-2026-7494Nexus Repository SSRF in SSL Certificate Retrieval5.3CNA v4.00.2%2026-07-14Fix
CVE-2026-6851Improper link resolution before file access in Bitdefender Total Security7.0CNA v4.00.1%2026-07-14Fix
CVE-2026-6790Eclipse Jetty: HTTP Authority/Host mismatch5.3CNA v3.10.3%2026-07-14Fix
CVE-2026-5270Authentication bypass in Navigator and Blue Planet Products9.8CISA ADP v3.10.7%2026-07-14
CVE-2026-5269Navigator NCS and MCP System Accounts with default passwords9.8CISA ADP v3.10.5%2026-07-14
CVE-2026-5040Weak password Hashing Mechanism in TP-Link Deco M57.1CNA v4.00.1%2026-07-14Fix
CVE-2026-4018BlackBerry QNX Software Development Platform time-of-check time-of-use race condition6.4CNA v3.10.1%2026-07-14
CVE-2026-4017BlackBerry QNX Software Development Platform buffer overflow7.4CNA v3.10.1%2026-07-14
CVE-2026-3014Milestone Systems XProtect Management Server Management Server API OS command injection6.4CNA v4.00.8%2026-07-14Fix
CVE-2026-0515BlackBerry QNX Software Development Platform improper parameter handling6.2CNA v3.10.1%2026-07-14
CVE-2026-0487DLL hijacking vulnerability in SAProuter on Microsoft Windows8.4CNA v3.10.2%2026-07-14Fix
CVE-2026-623289Router unauthenticated information disclosure via API Usage endpoints8.7CNA v4.00.6%2026-07-13
CVE-2026-623279Router unauthenticated API key exposure via /API/usage/stats9.3CNA v4.00.6%2026-07-13
CVE-2026-62242codecentric spring-boot-admin Spring Boot Admin Server SSRF7.7CNA v4.00.5%2026-07-13Fix
CVE-2026-62240CrewAI SSRF Filter Bypass via HTTP Redirect in Scrape tools8.3CNA v4.00.5%2026-07-13Fix
CVE-2026-62239Dao-AILab flash-attention FlashAttention symlink attack via tarfile.extractall in hopper/setup.py5.3CNA v4.00.2%2026-07-13
CVE-2026-62200OpenClaw authentication bypass via Git ext transport8.7CNA v4.00.5%2026-07-13Fix
CVE-2026-62199OpenClaw authentication bypass via Environment Filtering8.7CNA v4.00.5%2026-07-13Fix
CVE-2026-62198OpenClaw authorization bypass via Web Search5.4v3.10.3%2026-07-13Fix
CVE-2026-62197OpenClaw Policy Bypass via CDP Discovery6.3CNA v4.00.3%2026-07-13Fix
CVE-2026-62196OpenClaw authorization bypass via WhatsApp Group IDs8.7CNA v4.00.4%2026-07-13Fix
CVE-2026-62195OpenClaw authorization bypass via MCP loopback8.7CNA v4.00.4%2026-07-13Fix
CVE-2026-62194OpenClaw privilege escalation via Plugin Install8.7CNA v4.00.4%2026-07-13Fix
CVE-2026-62193OpenClaw authentication bypass via Plugin Install6.5v3.10.3%2026-07-13Fix
CVE-2026-62192OpenClaw authorization bypass7.2CNA v4.00.4%2026-07-13Fix
CVE-2026-62191OpenClaw authorization bypass via Message Mutations7.1CNA v4.00.4%2026-07-13Fix
CVE-2026-62190OpenClaw authorization bypass via flock wrapper8.7CNA v4.00.5%2026-07-13Fix
CVE-2026-62189OpenClaw symlink following via Mirror Sync7.6CNA v4.00.4%2026-07-13Fix
CVE-2026-62188OpenClaw Feishu authorization bypass8.6CNA v4.00.4%2026-07-13Fix
CVE-2026-62187OpenClaw Feishu tools authorization bypass8.6CNA v4.00.4%2026-07-13Fix
CVE-2026-62186OpenClaw authorization bypass via HTTP Model Override7.2CNA v4.00.3%2026-07-13Fix
CVE-2026-62185argoproj argo-helm Argo CD Helm Chart Missing Network Policy RCE8.6CNA v4.00.5%2026-07-13Fix
CVE-2026-62184luci-app-banip Log Monitor IP Extraction Bypass8.7CNA v4.00.8%2026-07-13
CVE-2026-62147Red Hat OpenShift distributed tracing 3 tempo-operator: Tempo operator: Query rbac bypass6.5CNA v3.10.4%2026-07-13
CVE-2026-62143Server-side request forgery protection bypass in misp-modules html_to_markdown8.3CNA v4.00.4%2026-07-13
CVE-2026-61985Car Rental Manager WordPress plugin broken access control5.3CNA v3.10.3%2026-07-13Fix
CVE-2026-61983Church Admin WordPress plugin broken access control5.3CNA v3.10.3%2026-07-13Fix
CVE-2026-61977JetSearch WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-07-13Fix
CVE-2026-61976JetBlocks For Elementor WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-07-13Fix
CVE-2026-61975JetReviews WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-07-13Fix
CVE-2026-61971User Profile Picture WordPress plugin insecure direct object references (IDOR)2.7CNA v3.10.3%2026-07-13Fix
CVE-2026-61970Auto Featured Image (Auto Post Thumbnail) WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2026-07-13Fix
CVE-2026-61968myCred WordPress plugin broken access control5.4CNA v3.10.3%2026-07-13Fix
CVE-2026-61958License Manager for WooCommerce WordPress plugin arbitrary content deletion vulnerability5.4CNA v3.10.3%2026-07-13Fix
CVE-2026-61956ووسلام همگام سازی ووکامرس و باسلام WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.2%2026-07-13Fix
CVE-2026-61955گرویتی فرم فارسی WordPress plugin SQL injection7.6CNA v3.10.4%2026-07-13Fix
CVE-2026-61952WooCommerce Bulk Edit Products WP Sheet Editor WordPress plugin broken access control4.9CNA v3.10.3%2026-07-13Fix
CVE-2026-61505Rejetto HFS Limited File Disclosure via path traversal in lang parameter6.9CNA v4.00.5%2026-07-13Fix
CVE-2026-61504Rejetto HFS stored XSS via File Names in Basic Web Listing5.1CNA v4.00.2%2026-07-13Fix
CVE-2026-61503Rejetto HFS Username Enumeration via Login Response Differences6.9CNA v4.00.4%2026-07-13Fix
CVE-2026-61502Rejetto HFS cross-site request forgery via GET requests5.1CNA v4.00.2%2026-07-13Fix
CVE-2026-61501Rejetto HFS stored XSS in Admin Log Viewer5.3CNA v4.00.4%2026-07-13Fix
CVE-2026-61500Rejetto HFS Session Forgery via Predictable Signing Key9.3CNA v4.01.0%2026-07-13Emerging ThreatsExploit codeFix
CVE-2026-61498Vitec Flamingo Unauthenticated OS command injection via gen_graphs.php9.3CNA v4.04.0%2026-07-13
CVE-2026-61463Shiori Authenticated privilege escalation via PATCH /API/v1/auth/account8.7CNA v4.00.5%2026-07-13
CVE-2026-61462mcp-gitlab path traversal via job_id parameter9.2CNA v4.00.5%2026-07-13Fix
CVE-2026-61458PasswordPusher Passphrase brute-force via Unthrottled endpoint8.7CNA v4.00.4%2026-07-13Fix
CVE-2026-60121Vitec Flamingo Unauthenticated OS command injection via ping.php9.3CNA v4.03.3%2026-07-13Exploit code
CVE-2026-60103Blender out-of-bounds read via crafted .blend SDNA block6.8CNA v4.00.2%2026-07-13
CVE-2026-598019Router Unauthenticated API Exposure via /API/providers9.3CNA v4.02.9%2026-07-13Nuclei
CVE-2026-59523Simply Schedule Appointments WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Fix
CVE-2026-59521Real Testimonials WordPress plugin PHP object injection7.2CNA v3.10.5%2026-07-13Fix
CVE-2026-59518Directorist WordPress plugin PHP object injection9.8CNA v3.10.6%2026-07-13Fix
CVE-2026-59516ICS Calendar WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-59515AIWU WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-13Fix
CVE-2026-59245Apache Airflow FAB provider per-DAG access control privilege escalation8.1v3.10.6%2026-07-13Fix
CVE-2026-58500MCP Appium: Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGeneratorUI)8.2CNA v3.10.4%2026-07-13Fix
CVE-2026-58489HedgeDoc: CSRF in GitHub Gist export callback6.8CNA v4.00.2%2026-07-13Fix
CVE-2026-58488HedgeDoc: Rate-limit bypass via CF-Connecting-IP header spoofing6.9CNA v4.00.4%2026-07-13Fix
CVE-2026-58487HedgeDoc: Stored HTML injection via email local-part5.1CNA v4.00.5%2026-07-13Fix
CVE-2026-58486HedgeDoc: Denial of service via YAML alias expansion in note frontmatter8.3CNA v4.00.4%2026-07-13Fix
CVE-2026-58411ChurchCRM has reflected cross-site scripting7.0CNA v4.00.4%2026-07-13Fix
CVE-2026-58410ChurchCRM family-scoped endpoints insecure direct object reference7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-58409ChurchCRM: Authenticated remote code execution (RCE) via Malicious plugin upload9.1CNA v3.10.8%2026-07-13Fix
CVE-2026-58408ChurchCRM CSVCreateFile.php export endpoint missing authorization6.5CNA v3.10.4%2026-07-13Fix
CVE-2026-58228phoenixframework phoenix_live_view scheme validation bypass in Phoenix.LiveView.Utils leads to XSS5.1CNA v4.00.6%2026-07-13Fix
CVE-2026-58102Crypt::OpenSSL::X509 versions for Perl allow a heap out-of-bounds read9.1CISA ADP v3.10.3%2026-07-13Fix
CVE-2026-58101Crypt::OpenSSL::X509 versions for Perl allow denial of service via null pointer dereference7.5CISA ADP v3.10.3%2026-07-13Fix
CVE-2026-58065Apache Airflow Git provider SSH host key verification vulnerability8.1v3.10.7%2026-07-13Fix
CVE-2026-57856Cockpit CMS path traversal via Bucket Name in Bucket File Storage API8.7CNA v4.00.6%2026-07-13
CVE-2026-57855Cockpit CMS missing authorization in Bucket File Storage API8.7CNA v4.00.5%2026-07-13
CVE-2026-57830Joomla extension joomshaper.com unauthenticated arbitrary file deletion in Helix Ultimate9.1NVD v3.10.5%2026-07-13Exploit code
CVE-2026-57829Joomla extension joomshaper.com unauthenticated stored XSS in Helix Ultimate6.1NVD v3.10.3%2026-07-13Exploit code
CVE-2026-57816Funnel Builder by FunnelKit WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57815Forminator WordPress plugin arbitrary file download7.5CNA v3.10.5%2026-07-13Fix
CVE-2026-57814Forminator WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57813MailOptin WordPress plugin privilege escalation9.8CNA v3.10.5%2026-07-13Fix
CVE-2026-57812Simply Schedule Appointments WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Reported exploitedFix
CVE-2026-57811Realtyna Organic IDX WordPress plugin remote code execution (RCE)10.0CNA v3.10.6%2026-07-13Exploit codeFix
CVE-2026-57810APIExperts Square for WooCommerce WordPress plugin SQL injection8.5CNA v3.10.4%2026-07-13Fix
CVE-2026-57805Tonda WordPress theme local file inclusion7.5CNA v3.10.5%2026-07-13
CVE-2026-57804TheGem Theme Elements (for Elementor) WordPress plugin local file inclusion7.5CNA v3.10.5%2026-07-13Fix
CVE-2026-57803Struktur Core WordPress plugin local file inclusion7.5CNA v3.10.5%2026-07-13Fix
CVE-2026-57802Struktur WordPress theme local file inclusion7.5CNA v3.10.5%2026-07-13Fix
CVE-2026-57801SetSail WordPress theme local file inclusion7.5CNA v3.10.5%2026-07-13
CVE-2026-57800Overworld WordPress theme local file inclusion7.5CNA v3.10.5%2026-07-13
CVE-2026-57799Nuss WordPress theme local file inclusion7.5CNA v3.10.5%2026-07-13
CVE-2026-57798NewsPlus Shortcodes WordPress plugin local file inclusion7.5CNA v3.10.5%2026-07-13
CVE-2026-57797EduMall WordPress theme broken access control4.3CNA v3.10.3%2026-07-13Fix
CVE-2026-57796Leedo WordPress theme local file inclusion7.5CNA v3.10.5%2026-07-13
CVE-2026-57795Kitchor WordPress theme local file inclusion7.5CNA v3.10.5%2026-07-13
CVE-2026-57794Golo Framework WordPress plugin local file inclusion7.5CNA v3.10.5%2026-07-13
CVE-2026-57793Flow WordPress theme local file inclusion7.5CNA v3.10.5%2026-07-13
CVE-2026-57792Mikado-Themes Dør local file inclusion7.5CNA v3.10.5%2026-07-13
CVE-2026-57791Brook WordPress theme local file inclusion7.5CNA v3.10.5%2026-07-13
CVE-2026-57790Billey WordPress theme local file inclusion7.5CNA v3.10.5%2026-07-13
CVE-2026-57789Aqua WordPress theme local file inclusion7.5CNA v3.10.5%2026-07-13
CVE-2026-57788Aalto WordPress theme local file inclusion7.5CNA v3.10.5%2026-07-13
CVE-2026-57787CWS SVGicons WordPress plugin SQL injection8.5CNA v3.10.4%2026-07-13
CVE-2026-57786WorkScout-Core WordPress plugin cross-site request forgery (CSRF) to broken authentication8.8CNA v3.10.2%2026-07-13
CVE-2026-57783Speaker WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-13
CVE-2026-57782Universal Clocks WordPress plugin broken access control5.3CNA v3.10.3%2026-07-13
CVE-2026-57781MeetingHub WordPress plugin broken access control5.3CNA v3.10.3%2026-07-13Fix
CVE-2026-57780Envision Page Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-13
CVE-2026-57779Fascinate WordPress theme broken access control5.3CNA v3.10.3%2026-07-13
CVE-2026-57778Booking calendar, Appointment Booking System WordPress plugin broken access control5.3CNA v3.10.3%2026-07-13
CVE-2026-57776VW Wedding WordPress theme broken access control5.3CNA v3.10.4%2026-07-13
CVE-2026-57774VW Food Corner WordPress theme broken access control5.3CNA v3.10.4%2026-07-13Fix
CVE-2026-57773Advanced Shipment Tracking for WooCommerce WordPress plugin SQL injection7.6CNA v3.10.4%2026-07-13Fix
CVE-2026-57772WP Inventory Manager WordPress plugin SQL injection8.5CNA v3.10.4%2026-07-13Fix
CVE-2026-57771GD Rating System WordPress plugin SQL injection8.5CNA v3.10.4%2026-07-13Fix
CVE-2026-57770Grand Photography WordPress theme PHP object injection9.8CNA v3.10.6%2026-07-13
CVE-2026-57768Houzez Login Register WordPress plugin privilege escalation8.2CNA v3.10.3%2026-07-13
CVE-2026-57745RT-Theme 18 Extensions WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13
CVE-2026-57744RT-Theme 18 Extensions WordPress plugin PHP object injection9.8CNA v3.10.6%2026-07-13
CVE-2026-57743RT-Theme 18 Extensions WordPress plugin local file inclusion8.1CNA v3.10.6%2026-07-13
CVE-2026-57741AcyMailing SMTP Newsletter WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57740AcyMailing SMTP Newsletter WordPress plugin broken access control7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57739AcyMailing SMTP Newsletter WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-13Fix
CVE-2026-57738axiomthemes 777 deserialization of untrusted data9.8CNA v3.10.6%2026-07-13
CVE-2026-57734tagDiv Composer WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57733tagDiv Cloud Library WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57732tagDiv Opt-In Builder WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57729Flatsome WordPress theme broken access control7.5CNA v3.10.4%2026-07-13
CVE-2026-57728Flatsome WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13
CVE-2026-57727Kirki WordPress plugin broken access control7.5CNA v3.10.4%2026-07-13Reported exploitedFix
CVE-2026-57726Kirki WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-13Fix
CVE-2026-57725Kirki WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57724Kirki WordPress plugin PHP object injection9.8CNA v3.10.6%2026-07-13Fix
CVE-2026-57719Aimogen Pro WordPress plugin arbitrary file upload10.0CNA v3.10.5%2026-07-13Fix
CVE-2026-57718Unlimited Elements For Elementor WordPress plugin cross-site scripting7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57715Fluent CRM WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57714LatePoint WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-13Fix
CVE-2026-57713Events Manager WordPress plugin PHP object injection8.8CNA v3.10.5%2026-07-13Fix
CVE-2026-57712WPZOOM Portfolio WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57711SupportCandy WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-13Fix
CVE-2026-57710WoowBot Pro Max WordPress plugin arbitrary file upload9.9CNA v3.10.5%2026-07-13Fix
CVE-2026-57709Membership For WooCommerce WordPress plugin arbitrary file deletion8.6CNA v3.10.5%2026-07-13Fix
CVE-2026-57708Contact Form Entries WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57707Simple Business Directory Pro WordPress plugin SQL injection9.3CNA v3.10.4%2026-07-13Fix
CVE-2026-57706Dokan WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57705Event Tickets WordPress plugin broken access control7.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57702Amelia WordPress plugin SQL injection9.3CNA v3.10.5%2026-07-13Fix
CVE-2026-57698Abandoned Cart Recovery for WooCommerce WordPress plugin broken authentication6.5CNA v3.10.4%2026-07-13Fix
CVE-2026-57697ProfileGrid WordPress plugin broken authentication7.5CNA v3.10.5%2026-07-13Fix
CVE-2026-57695Document Gallery WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57694Tutor LMS WordPress plugin insecure direct object references (IDOR)6.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57693Ad Inserter WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-13Fix
CVE-2026-57691Anti-Malware Security and Brute-Force Firewall WordPress plugin cross-site scripting (XSS)5.8CNA v3.10.2%2026-07-13Fix
CVE-2026-57668NEX-Forms WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57433Storable SX_HOOK deserialization integer overflow9.8CISA ADP v3.10.4%2026-07-13Fix
CVE-2026-57432Perl pack and unpack functions integer overflow8.4NVD v3.10.2%2026-07-13Fix
CVE-2026-57424Razorpay Payment Links for WooCommerce WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57423Message Filter for Contact Form 7 WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57422Bopo WooCommerce Product Bundle Builder WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57421CRM Perks Forms WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57420Author Box WP Lens WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-13Fix
CVE-2026-57419Stock Locations for WooCommerce WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57418Client Invoicing by Sprout Invoices WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57417Cart Lift WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57416SiteGround Email Marketing WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57415Gift Vouchers WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57414ChatBot for eCommerce WoowBot WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-13Fix
CVE-2026-57413Instant Image Generator WordPress plugin server side request forgery (SSRF)6.4CNA v3.10.2%2026-07-13Fix
CVE-2026-57412Gift Vouchers WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57411CF7 Views Complete Entry Management for Contact Form 7 WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57410MailerPress WordPress plugin privilege escalation8.8CNA v3.10.4%2026-07-13Fix
CVE-2026-57409Active Products Tables for WooCommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57408Peach Payments Gateway WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57407PDF Generator for WordPress plugin server side request forgery (SSRF)7.2CNA v3.10.3%2026-07-13Fix
CVE-2026-57406FundEngine WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57405Open Shop WordPress theme broken access control7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57404Booking and Rental Manager WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57403GD Security Headers WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57402Flexible Refund and Return Order for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-13Fix
CVE-2026-57401SureDash WordPress plugin arbitrary file deletion9.9CNA v3.10.5%2026-07-13Fix
CVE-2026-57400Event Tickets Manager for WooCommerce WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57399Proxy and VPN Blocker WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57398Real Estate Manager Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57396Flintop Free Gifts for WooCommerce stored cross-site scripting7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57395Tourfic WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57394Newsletters WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57393WooCommerce PDF Invoice Builder WordPress plugin sensitive data exposure6.5CNA v3.10.4%2026-07-13Fix
CVE-2026-57392Tourfic WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57391Loops and Logic WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-07-13Fix
CVE-2026-57390Extra Product Options Builder for WooCommerce WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57389Groundhogg WordPress plugin arbitrary file deletion8.6CNA v3.10.5%2026-07-13Fix
CVE-2026-57388Hydra Booking WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57387picu WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57386aBlocks WordPress plugin privilege escalation8.8CNA v3.10.4%2026-07-13Fix
CVE-2026-57385Vitepos WordPress plugin SQL injection8.5CNA v3.10.4%2026-07-13Fix
CVE-2026-57383JobSearch WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57382Simple File List WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57381PropertyHive WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57380Extensions for Leaflet Map WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57379FormyChat WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57378Advanced Forms WordPress plugin broken access control7.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57377WowAddons WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Fix
CVE-2026-57376ElementInvader Addons for Elementor WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-07-13Fix
CVE-2026-57375MStore API WordPress plugin broken access control6.5CNA v3.10.3%2026-07-13Fix