CVEs published June 29, 2026
235 CVEs were published on June 29, 2026: 12 critical, 75 high. 1 is now in CISA KEV.
- Published
- 235
- Critical
- 12
- High
- 75
- Medium
- 138
- Low
- 9
- Unrated
- 1
- Now in CISA KEV
- 1
- Fix available
- 125
Most affected products
- Apple Safari · Apple iOS and iPadOS +4
- 26
- itsourcecode Hospital Management System
- 10
- Edimax EW-7478APC
- 9
- Snowflake CLI
- 7
- itsourcecode Online Hotel Management System
- 6
- coollabsio coolify
- 5
- SourceCodester Class and Exam Timetabling System
- 5
- Apache Software Foundation Apache Tomcat · org.apache.to… +2
- 4
- Apple iOS and iPadOS · Apple macOS +3
- 4
- FrontAccounting
- 4
Critical 12
- CVE-2026-55276Apache Tomcat: Logged effective web.xml is incompleteApache Software Foundation Apache Tomcat · org.apache.to… +2
- CVE-2026-53434Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM ConnectorApache Software Foundation Apache Tomcat · org.apache.tomca…
- CVE-2026-57498Coolify Cross-Team IDOR: Livewire Components Accept Unscoped server_id and destination_uuid — Deploy to Other Teams' Serverscoollabsio coolify
- CVE-2026-13763HTTP/2 Stream Parser Confusion Body-Inspection Bypass in AWS Application Load Balancer with AWS WAFAWS Application Load Balancer
- CVE-2026-13762HTTP/2 Stream Parser Confusion Body-Inspection Bypass in Amazon CloudFront with AWS WAFAWS Amazon CloudFront
- CVE-2026-39868This issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-11720Path Traversal in googleapis/mcp-toolbox HTTP Tool URL BuilderMCP Toolbox for Databases · github.com/googleapis/mcp-toolb…
- CVE-2026-56782Gorse - Unauthenticated Database Dump and Restore via /api/dump and /api/restore Endpointsgorse-io gorse
- CVE-2026-41052Rancher Privilege Escalation from Project Owner to HostSUSE Rancher · github.com/rancher/rancher
- CVE-2026-56290Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0JoomlaCK.fr Page Builder CK extension for Joomla
- CVE-2026-57331WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerabilityvideowhisper Paid Videochat Turnkey Site
- CVE-2026-37637An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php component
High 75
- CVE-2026-8023Path traversal in Zephyr HTTP server static-filesystem resource handler allows unauthenticated remote arbitrary file readzephyrproject zephyr
- CVE-2026-7656Broken IPv6 Neighbor Discovery input validation allows spoofed RA/NS/NA acceptance in Zephyr net stackzephyrproject zephyr
- CVE-2026-34592Coolify: Cross-Team IDOR via Unscoped Server and Project Lookups Exposes SSH Keys and Infrastructurecoollabsio coolify
- CVE-2026-55957Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bindApache Software Foundation Apache Tomcat · org.apache.to… +2
- CVE-2026-53404Apache Tomcat: Bad ornext processing in RewriteValveApache Software Foundation Apache Tomcat · org.apache.to… +2
- CVE-2026-34594Coolify: Authenticated Remote Code Execution via Command Injection in Destination Network Managementcoollabsio coolify
- CVE-2026-34597Coolify: Authenticated Host RCEcoollabsio coolify
- CVE-2026-41896Coolify: Unauthenticated Deployment Trigger via Webhook HMAC Bypass with Null Secretcoollabsio coolify
- CVE-2026-43701The issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43731A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43724The issue was addressed with improved input sanitization.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43705A type confusion issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43725The issue was addressed with improved input validation.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43735The issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43715A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-56018JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growthGTERMARS JavaScript::Minifier::XS
- CVE-2026-56017JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input…GTERMARS JavaScript::Minifier::XS
- CVE-2026-53426Atom-table exhaustion denial-of-service via JSON parse_document in MDExleandrocp mdex · mdex
- CVE-2026-58000luci-proto-openvpn - Command Injection via cl_meta Parameter in generateKeyopenwrt luci-proto-openvpn
- CVE-2026-57999luci-app-tailscale-community - Command Injection via tailscale.do_login RPCopenwrt luci-app-tailscale-community
- CVE-2026-57960Hi.Events 1.9.0 - Unauthenticated Attendee PII Exposure via Check-in List short_idHiEventsDev Hi.Events
- CVE-2026-57959Hi.Events 1.9.0 - Promo Code Max-Usage Bypass via Asynchronous Job Race ConditionHiEventsDev Hi.Events
- CVE-2026-57955SigNoz 0.130.1 - SQL Injection in Alert History Endpoints via Rule ID Parametersignoz
- CVE-2026-57951Mythic < 3.4.0.60 - Broken Permission Filter in payload_build_step Tableits-a-feature Mythic
- CVE-2026-57950ruoyi-vue-pro - Incorrect Permission Namespace in ErpSaleOrderControllerYunai ruoyi-vue-pro
Show all 75 entriesShow fewer entries
- CVE-2026-57949ruoyi-vue-pro - Missing Authorization in CRM Follow-up Record GET EndpointYunai ruoyi-vue-pro
- CVE-2026-57948Pinpoint - Insecure Session Cookie Attributes in pinpointJwtpinpoint-apm pinpoint
- CVE-2026-56783Parseable < 2.9.2 - Cleartext Credential Exposure in Notification Target APIparseablehq parseable
- CVE-2026-56780Modoboa < 2.9.0 - Insecure Direct Object Reference in Account Password Change APImodoboa
- CVE-2026-56285Nitter - Server-Side Request Forgery in /video Media Proxy Endpointzedeus nitter
- CVE-2026-12912Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff imageRed Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-13749Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template InjectionSnowflake CLI
- CVE-2026-13583Edimax EW-7478APC POST Request formUSBFolder buffer overflowEdimax EW-7478APC
- CVE-2026-13744Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled InputSnowflake CLI
- CVE-2026-13582Edimax EW-7478APC POST Request formUSBAccount buffer overflowEdimax EW-7478APC
- CVE-2026-13580Edimax EW-7478APC POST Request formQoS buffer overflowEdimax EW-7478APC
- CVE-2026-49049Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handlerjoomshaper.com Helix3 extension for Joomla
- CVE-2026-55844Home Assistant: iOS Companion App ignores internal SSID allowlist for connections – possible leak of access token and sensor datahome-assistant core
- CVE-2026-55607Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Executionanthropics claude-code · @anthropic-ai/claude-code
- CVE-2026-56124phpUploader < 2.0.2 Unauthenticated Database Exposure via index modelshimosyan phpUploader
- CVE-2026-57338WordPress ARForms plugin <= 7.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityRepute InfoSystems ARForms
- CVE-2026-57337WordPress Landing Page Builder plugin <= 1.5.3.5 - Cross Site Scripting (XSS) vulnerabilityPluginOps Landing Page Builder
- CVE-2026-57336WordPress Jobify theme <= 4.3.2 - Cross Site Scripting (XSS) vulnerabilityAstoundify Jobify
- CVE-2026-57333WordPress Link Whisper Free plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerabilitySpencer Haws Link Whisper Free
- CVE-2026-57332WordPress Wallet System for WooCommerce plugin <= 2.7.6 - Broken Access Control vulnerabilityWP Swings Wallet System for WooCommerce
- CVE-2026-57320WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerabilityRealMag777 BEAR
- CVE-2026-13676fast-uri vulnerable to host confusion via failed IDN canonicalizationfast-uri
- CVE-2026-54371attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattrattr project attr
- CVE-2026-54370acl < 2.4.0 TOCTOU Symlink Traversal via getfacl/setfacl/chaclacl project acl
- CVE-2026-54369acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functionsacl project acl
- CVE-2026-12856Vscode-java: vscode: command injection vulnerability in the javadoc hover provider of the vscode-java extensionRed Hat OpenShift Dev Spaces
- CVE-2026-40521FrontAccounting < 2.4.20 Path Traversal RCE via attachment uploadFrontAccounting
- CVE-2026-40522FrontAccounting < 2.4.20 SQL Injection via rep601.phpFrontAccounting
- CVE-2026-40523FrontAccounting < 2.4.20 SQL Injection via reporting/rep710.phpFrontAccounting
- CVE-2026-40524FrontAccounting < 2.4.20 SQL Injection via get_gl_transactions()FrontAccounting
- CVE-2026-13165Remote Code Execution in SzafirHostKrajowa Izba Rozliczeniowa SzafirHost
- CVE-2026-13564Edimax EW-7478APC POST Request formPPPoESetup stack-based overflowEdimax EW-7478APC
- CVE-2026-13563Edimax EW-7478APC POST Request formL2TPSetup stack-based overflowEdimax EW-7478APC
- CVE-2026-13562Edimax EW-7478APC POST Request formiNICSiteSurvey buffer overflowEdimax EW-7478APC
- CVE-2026-25707Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzyppSUSE libzypp
- CVE-2026-57346WordPress Embed Privacy plugin <= 1.12.3 - Arbitrary File Deletion vulnerabilityEpiphyt Embed Privacy
- CVE-2026-13601Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applicationsRed Hat Enterprise Linux 7 Extended Lifecycle Support · Red…
- CVE-2026-22078O+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability.OPPO O+ Connect
- CVE-2026-13545D-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injectionD-Link DCS-935L
- CVE-2026-10083APCu Manager < 4.5.0 - Unauthenticated Stored XSS via Cache Key PollutionAPCu Manager
- CVE-2025-2902Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage PlatformHitachi Virtual Storage Platform E390, E590, E790, E990,… +1
- CVE-2026-13539Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_407504 stack-based overflowWavlink WL-NU516U1-A
- CVE-2026-13519Tenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflowTenda JD12L
- CVE-2026-13518Tenda JD12L addressNat fromAddressNat stack-based overflowTenda JD12L
- CVE-2026-13517Tenda JD12L WifiBasicSet formWifiBasicSet stack-based overflowTenda JD12L
- CVE-2026-36848Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.
- CVE-2026-51218A heap buffer overflow in the TS7Worker::PerformFunctionWrite() function (/core/s7_server.cpp) of snap7 v1.4.3 allows attackers to cause a…
- CVE-2026-51219A heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of lib60870 v2.3.3 to v2.3.6 allows attackers to…
- CVE-2026-51221A buffer overflow in the Get_Attribute_List function of EIPStackGroup OpENer commit 76b95c allows attackers to cause a Denial of Service…
- CVE-2026-57919PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\PBackupVSS) with a DACL that grants…
Medium, low and unrated 148
- CVE-2026-10648NULL-pointer dereference in MCUmgr serial/console SMP transport on buffer-pool exhaustionzephyrproject zephyr
- CVE-2026-10647Deadlock denial of service in USB CDC-NCM device class on TX enqueue failurezephyrproject zephyr
- CVE-2026-57997Strapi users-permissions - JWT Algorithm Confusion via Missing Algorithm Configurationstrapi
- CVE-2026-55956Apache Tomcat: Security constraints for default servlet ignored methodApache Software Foundation Apache Tomcat · org.apache.to… +2
- CVE-2026-55955Apache Tomcat: EncryptInterceptor not protected against replay attacksApache Software Foundation Apache Tomcat · org.apache.to… +1
- CVE-2026-13758CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done pathMIK CryptX
- CVE-2026-50229Apache Tomcat: XSS in number guess exampleApache Software Foundation Apache Tomcat · org.apache.tomca…
- CVE-2026-43700A cross-origin issue was addressed with improved tracking of security origins.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43716The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +1
- CVE-2026-43720A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43721This issue was addressed through improved state management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-39872The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43717A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +3
- CVE-2026-43740The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43663The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43726A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43706A double free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43746A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +1
- CVE-2026-43707A memory corruption issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43727A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +3
- CVE-2026-43732A path handling issue was addressed with improved validation.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43708The issue was addressed with improved input validation.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43712The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43745An out-of-bounds write issue was addressed with improved input validation.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43704A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
Show all 148 entriesShow fewer entries
- CVE-2026-43713A permissions issue was addressed with additional restrictions.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43709A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43699A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43676An out-of-bounds access issue was addressed with improved bounds checking.Apple Safari · Apple iOS and iPadOS +3
- CVE-2026-43743A race condition was addressed with improved state handling.Apple iOS and iPadOS · Apple macOS +2
- CVE-2026-43722The issue was addressed with improved input sanitization.Apple iOS and iPadOS · Apple macOS
- CVE-2026-43734A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43718A stack overflow was addressed with improved input validation.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-28979An out-of-bounds access issue was addressed with improved bounds checking.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-43703The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-43742A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +4
- CVE-2026-13593CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified awayGTERMARS CSS::Minifier::XS
- CVE-2026-54889Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)leandrocp mdex · mdex
- CVE-2026-54888Uncontrolled recursion over deeply nested Markdown crashes the BEAM in mdexleandrocp mdex · leandrocp mdex_native +2
- CVE-2026-53429Unbounded native memory leak in mdex escaped-tag rendering enables unauthenticated denial of serviceleandrocp mdex · leandrocp mdex_native +2
- CVE-2026-53428Unbounded memory allocation in highlight_lines range expansion in mdexleandrocp mdex · leandrocp mdex_native +2
- CVE-2026-53427Cross-site scripting in MDEx via unescaped highlight_lines_class code-fence attributeleandrocp mdex · leandrocp mdex_native +2
- CVE-2026-13757P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsingRed Hat Enterprise Linux · Cert Manager support for Red… +7
- CVE-2026-57958Mixpost 2.6.0 - Reflected XSS via OAuth Callback Error Parameterinovector mixpost
- CVE-2026-57957Papermark 0.22.0 - CORS Misconfiguration in Viewer Upload Endpointpapermark
- CVE-2026-57956SigNoz < 0.133.0 - Cross-Organization Insecure Direct Object Reference in Alert Rulessignoz
- CVE-2026-57954Elide 7.1.17 - Permission Bypass in Sort Expression Validationyahoo elide
- CVE-2026-57953Mythic < 3.4.0.60 - Unauthorized Automation Workflow Modification via eventing_import_automatic_webhook Endpointits-a-feature Mythic
- CVE-2026-57952Mythic < 3.4.0.60 - Unauthorized C2 Profile Configuration Access via Unverified Payload UUIDits-a-feature Mythic
- CVE-2026-57947Pinpoint - Server-Side Request Forgery via Alarm Webhook Registrationpinpoint-apm pinpoint
- CVE-2026-57946Invidious - Private Playlist Disclosure via Unauthenticated RSS Feed Endpointiv-org Invidious
- CVE-2026-57945PhotoPrism - Unauthorized User Profile Modification via PUT /api/v1/users/{uid} Endpointphotoprism
- CVE-2026-57943LibrePhotos < 1.0.0 - Insecure Direct Object Reference in SetPhotosShared Endpointlibrephotos
- CVE-2026-57942LibreTranslate - IP Spoofing via X-Forwarded-For HeaderLibreTranslate
- CVE-2026-56781Teable - Unauthenticated Hidden Field Disclosure via Projection Parameter Overrideteableio teable
- CVE-2026-13592liftoff-sr CIPster EtherNet IP Message append out-of-bounds writeliftoff-sr CIPster
- CVE-2026-13591DeepMyst Mysti Contact Tracking ChannelBridge.ts _isTrackedConversation improper authorizationDeepMyst Mysti
- CVE-2026-13590seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflowseladb PcapPlusPlus
- CVE-2026-13589seladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflowseladb PcapPlusPlus
- CVE-2026-13752Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log CommandsSnowflake CLI
- CVE-2026-13588seladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflowseladb PcapPlusPlus
- CVE-2026-13751Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!loadSnowflake CLI
- CVE-2026-13750Snowflake CLI Sensitive Credential Exposure Through Debug LoggingSnowflake CLI
- CVE-2026-9105Authenticated Stack-Based Buffer Overflow in TP-Link TL-WR841N Web InterfaceTP-Link Systems TL-WR841N
- CVE-2026-13587seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflowseladb PcapPlusPlus
- CVE-2026-13748Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path RestrictionSnowflake CLI
- CVE-2026-13746Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI ParametersSnowflake CLI
- CVE-2026-13437Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an…Devolutions PowerShell Universal
- CVE-2026-13742Lack of signature verification before execution of downloaded contentHoneywell Technologies IQ MultiAccess
- CVE-2026-13581Edimax EW-7478APC POST Request formStaDrvSetup os command injectionEdimax EW-7478APC
- CVE-2026-13579itsourcecode Hospital Management System patientchangepassword.php sql injectionitsourcecode Hospital Management System
- CVE-2026-13578itsourcecode Hospital Management System patientdetail.php sql injectionitsourcecode Hospital Management System
- CVE-2026-13574llvm llvm-project Bitcode File IntrinsicInst.cpp getBasePtr heap-based overflowllvm-project
- CVE-2026-46406Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Writeanthropics claude-code · @anthropic-ai/claude-code
- CVE-2026-13573llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflowllvm-project
- CVE-2026-13572itsourcecode Hospital Management System insertbillingrecord.php sql injectionitsourcecode Hospital Management System
- CVE-2026-57341WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.9.0 - Insecure Direct Object References (IDOR)…Colissimo Officiel : Méthodes de livraison pour WooCommerce
- CVE-2026-57340WordPress Japanized For WooCommerce plugin <= 2.9.12 - Broken Access Control vulnerabilityshohei.tanaka Japanized For WooCommerce
- CVE-2026-57339WordPress Business Directory plugin <= 6.4.23 - Broken Access Control vulnerabilityStrategy11 Team Business Directory
- CVE-2026-57335WordPress Ads by WPQuads plugin <= 3.0.3 - Broken Access Control vulnerabilityAds WPQuads Ads by WPQuads
- CVE-2026-57334WordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerabilityweDevs WP User Frontend
- CVE-2026-57330WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerabilityStylemix MasterStudy LMS
- CVE-2026-57329WordPress WooCommerce Designer Pro plugin <= 1.9.34 - Cross Site Scripting (XSS) vulnerabilityWooCommerce Designer Pro
- CVE-2026-57328WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerabilityStrategy11 Team Business Directory
- CVE-2026-57327WordPress MainWP plugin <= 6.1.1 - Broken Access Control vulnerabilityMainWP
- CVE-2026-57326WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerabilityStrategy11 Team Business Directory
- CVE-2026-13571SourceCodester Simple Food Ordering System cart.php logic errorSourceCodester Simple Food Ordering System
- CVE-2026-12616The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature verification disabled, then interpolates…Eclipse Foundation Eclipse CSI - PIA
- CVE-2026-11979Stack-Based Buffer Overflow in libxml2xmlsoft libxml2
- CVE-2026-56457HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive informationHCLSoftware HCL DevOps Deploy / HCL Launch
- CVE-2026-13570SourceCodester Inventory Management System User Registration Endpoint users_handler.php cross site scriptingSourceCodester Inventory Management System
- CVE-2026-13569weng-xianhu EyouCMS API index.php sql injectionweng-xianhu EyouCMS
- CVE-2026-13568SourceCodester Inventory Management System User Registration Endpoint users_handler.php access controlSourceCodester Inventory Management System
- CVE-2026-13567code-projects Online Music Site POST Request Feedback.php cross site scriptingcode-projects Online Music Site
- CVE-2026-13566SourceCodester Class and Exam Timetabling System preview3.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-13565SourceCodester Class and Exam Timetabling System edit_class1.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-13561Edimax EW-7478APC POST Request formiNICbasic os command injectionEdimax EW-7478APC
- CVE-2026-13560Edimax EW-7478APC POST Request formAccept os command injectionEdimax EW-7478APC
- CVE-2026-13559code-projects Real State Services single-list_sale.php add sql injectioncode-projects Real State Services
- CVE-2026-41992Global Buffer Overflow in GNU gzipGNU gzip
- CVE-2026-41991Predictable Temporary File in GNU gzipGNU gzip
- CVE-2026-13558CodeAstro Complaint Management System Report addreport cross site scriptingCodeAstro Complaint Management System
- CVE-2026-13557itsourcecode Online Hotel Management System POST Request controller.php add cross site scriptingitsourcecode Online Hotel Management System
- CVE-2026-13556itsourcecode Online Hotel Management System POST Request controller.php edit cross site scriptingitsourcecode Online Hotel Management System
- CVE-2026-13555itsourcecode Online Hotel Management System controller.php add sql injectionitsourcecode Online Hotel Management System
- CVE-2026-13554itsourcecode Online Hotel Management System POST Request controller.php add cross site scriptingitsourcecode Online Hotel Management System
- CVE-2026-13553itsourcecode Online Hotel Management System controller.php add unrestricted uploaditsourcecode Online Hotel Management System
- CVE-2026-13552itsourcecode Online Hotel Management System controller.php edit sql injectionitsourcecode Online Hotel Management System
- CVE-2026-13551itsourcecode Baptism Information Management System editBaptism.php sql injectionitsourcecode Baptism Information Management System
- CVE-2026-57676WordPress Simple User Avatar plugin <= 4.9 - Insecure Direct Object References (IDOR) vulnerabilityMatteo Manna Simple User Avatar
- CVE-2026-13550itsourcecode Baptism Information Management System delbaptism.php sql injectionitsourcecode Baptism Information Management System
- CVE-2026-9267Eclipse tinydtls before commit b3efd41ad111a4920f599f51ffa4f5e9f1e72221 contains an out-of-bounds read vulnerability in the…Eclipse Foundation Eclipse tinydtls
- CVE-2026-13595Util-linux: util-linux: heap use-after-free in libblkid nested partition probingRed Hat Enterprise Linux · Red Hat Cost Management On-Pr… +3
- CVE-2026-13549CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorizationCodeAstro Complaint Management System
- CVE-2026-57966Spice-vdagent: path traversal in file transfer via unsanitized filenameRed Hat Enterprise Linux
- CVE-2026-57965Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflowRed Hat Enterprise Linux
- CVE-2026-13548itsourcecode Hospital Management System doctortimings.php sql injectionitsourcecode Hospital Management System
- CVE-2026-13547Hanwang e-Face General Management Platform upload.do unrestricted uploadHanwang e-Face General Management Platform
- CVE-2026-13546Feehi CMS REST API Endpoint articles missing authenticationFeehi CMS
- CVE-2026-13544Feehi CMS API users access controlFeehi CMS
- CVE-2026-13543Documenso Google OAuth Login handle-oauth-callback-url.ts improper authenticationDocumenso
- CVE-2026-13542itsourcecode Hospital Management System doctorprofile.php sql injectionitsourcecode Hospital Management System
- CVE-2026-13541itsourcecode Hospital Management System doctorchangepassword.php sql injectionitsourcecode Hospital Management System
- CVE-2026-9676f4 Post Tree < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order ModificationF4 Post Tree
- CVE-2026-13540GitBucket RepositoryCreationService.scala Git.cloneRepository.setURI server-side request forgeryGitBucket
- CVE-2025-0824lack of validation for firmware update in Hitachi Virtual StorageHitachi Virtual Storage Platform One Block 23, 24, 26,
- CVE-2025-7386Information exposure vulnerability in Hitachi Storage NavigatorHitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 51…
- CVE-2026-13538Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injectionWavlink WL-NU516U1-A
- CVE-2026-13537CodeAstro Human Resource Management System cross-site request forgeryCodeAstro Human Resource Management System
- CVE-2026-53325agp/amd64: Fix broken error propagation in agp_amd64_probe()Linux
- CVE-2026-13536GotoHTTP reg.12x cross site scriptingGotoHTTP
- CVE-2026-13535CodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injectionCodeAstro Human Resource Management System
- CVE-2026-13534CherryHQ cherry-studio CherryIN Preload API MemoryService.ts sha256 authorizationCherryHQ cherry-studio
- CVE-2026-13533agentejo Cockpit CMS htaccess config.yaml YAMLLoad file accessagentejo Cockpit CMS
- CVE-2026-13532itsourcecode Hospital Management System departmentDoctor.php sql injectionitsourcecode Hospital Management System
- CVE-2026-13531itsourcecode Hospital Management System department.php sql injectionitsourcecode Hospital Management System
- CVE-2026-13530itsourcecode Hospital Management System Appointment appointmentdetail.php sql injectionitsourcecode Hospital Management System
- CVE-2026-13529YzmCMS index.php sql injectionYzmCMS
- CVE-2026-13528YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversalYunaiV ruoyi-vue-pro · zhijiantianya ruoyi-vue-pro
- CVE-2026-13527SourceCodester Class and Exam Timetabling System preview4.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-13526SourceCodester Class and Exam Timetabling System edit_class.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-13525CodeAstro Human Resource Management System Update_Earn_Leave Endpoint Employee_model.php emselectByCode sql injectionCodeAstro Human Resource Management System
- CVE-2026-13524CherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorizationCherryHQ cherry-studio
- CVE-2026-13523GPAC ISOBMFF base_encoding.c data amplificationGPAC
- CVE-2026-13522Investintech SlimPDFReader PDF File SlimPDFReader.exe TeighaDo+0x25cde0 out-of-boundsInvestintech SlimPDFReader
- CVE-2026-13521SourceCodester Class and Exam Timetabling System preview5.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-13520itsourcecode Hospital Management System Appointment appointmentapproval.php sql injectionitsourcecode Hospital Management System
- CVE-2026-31016Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a remote attacker to escalate privileges via…