# CVEs published 2026-07-22

199 CVEs were published on July 22, 2026: 19 critical, 100 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-16632](https://cve.now/CVE-2026-16632.md): boazsegev facil.io WebSocket Frame websocket\_parser.h websocket\_on\_protocol\_error input validation (CVSS 6.9, boazsegev facil.io)
- [CVE-2026-16631](https://cve.now/CVE-2026-16631.md): publint package-manager pack.js child\_process.exec os command injection (CVSS 4.8, publint)
- [CVE-2026-61246](https://cve.now/CVE-2026-61246.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 8.8, Oracle Platform Security for Java)
- [CVE-2026-60455](https://cve.now/CVE-2026-60455.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 8.8, Oracle Platform Security for Java)
- [CVE-2026-60439](https://cve.now/CVE-2026-60439.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 8.8, Oracle Platform Security for Java)
- [CVE-2026-60373](https://cve.now/CVE-2026-60373.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 8.8, Oracle Platform Security for Java)
- [CVE-2026-60372](https://cve.now/CVE-2026-60372.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 9.8, Oracle Platform Security for Java)
- [CVE-2026-60371](https://cve.now/CVE-2026-60371.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 8.0, Oracle Platform Security for Java)
- [CVE-2026-60370](https://cve.now/CVE-2026-60370.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 7.5, Oracle Platform Security for Java)
- [CVE-2026-60369](https://cve.now/CVE-2026-60369.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 9.9, Oracle Platform Security for Java)
- [CVE-2026-60368](https://cve.now/CVE-2026-60368.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 8.8, Oracle Platform Security for Java)
- [CVE-2026-60367](https://cve.now/CVE-2026-60367.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 9.8, Oracle Platform Security for Java)
- [CVE-2026-60366](https://cve.now/CVE-2026-60366.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 10.0, Oracle Platform Security for Java)
- [CVE-2026-16630](https://cve.now/CVE-2026-16630.md): syncfusion ej2-javascript-ui-controls package.json child\_process.exec os command injection (CVSS 4.8, syncfusion ej2-javascript-ui-controls)
- [CVE-2026-16629](https://cve.now/CVE-2026-16629.md): danger danger-js CLI localGetFileAtSHA.ts danger.git.diffForFile os command injection (CVSS 4.8, danger-js · danger)
- [CVE-2026-16628](https://cve.now/CVE-2026-16628.md): oclif JIT Plugin Entry child\_process.exec os command injection (CVSS 4.8, oclif)
- [CVE-2026-64793](https://cve.now/CVE-2026-64793.md): Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions (CVSS 9.1, regularlabs.com Articles Anywhere extension for Joomla · re…)
- [CVE-2026-64794](https://cve.now/CVE-2026-64794.md): Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions (CVSS 6.5, regularlabs.com Articles Anywhere extension for Joomla · re…)
- [CVE-2026-64797](https://cve.now/CVE-2026-64797.md): Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension (CVSS 7.5, regularlabs.com IP Login extension for Joomla)
- [CVE-2026-63265](https://cve.now/CVE-2026-63265.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints (CVSS 8.0, regularlabs.com Advanced Module Manager extension for J… +21)
- [CVE-2026-63685](https://cve.now/CVE-2026-63685.md): Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension (CVSS 8.8, regularlabs.com DB Replacer extension for Joomla)
- [CVE-2026-63280](https://cve.now/CVE-2026-63280.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager (CVSS 8.8, regularlabs.com Advanced Module Manager extension for Jo… +2)
- [CVE-2026-64796](https://cve.now/CVE-2026-64796.md): Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension (CVSS 9.8, regularlabs.com Sourcerer extension for Joomla)
- [CVE-2026-63683](https://cve.now/CVE-2026-63683.md): Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager (CVSS 7.5, regularlabs.com Advanced Module Manager extension for Jo… +2)
- [CVE-2026-64798](https://cve.now/CVE-2026-64798.md): Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension (CVSS 9.1, regularlabs.com IP Login extension for Joomla)
- [CVE-2026-64795](https://cve.now/CVE-2026-64795.md): Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions (CVSS 5.4, regularlabs.com Modals extension for Joomla · regularlab… +3)
- [CVE-2026-64792](https://cve.now/CVE-2026-64792.md): Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions (CVSS 7.5, regularlabs.com Articles Anywhere extension for Joomla ·… +5)
- [CVE-2026-63281](https://cve.now/CVE-2026-63281.md): Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager (CVSS 4.8, regularlabs.com Advanced Module Manager extension for Jo… +2)
- [CVE-2026-64791](https://cve.now/CVE-2026-64791.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager (CVSS 8.8, regularlabs.com Regular Labs Extension Manager extension fo…)
- [CVE-2026-63684](https://cve.now/CVE-2026-63684.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple… (CVSS 8.8, regularlabs.com Content Templater extension for Joomla ·… +1)
- [CVE-2026-13089](https://cve.now/CVE-2026-13089.md): OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in… (CVSS 7.5, RITOU OIDC::Lite)
- [CVE-2026-64829](https://cve.now/CVE-2026-64829.md): Question2Answer 1.8.8 Session Fixation via Forgot-Password Flow (CVSS 9.1, q2a question2answer)
- [CVE-2026-14881](https://cve.now/CVE-2026-14881.md): Compass connection import allows to override OIDC browser open command (usually set through settings), allowing for arbitrary shell… (CVSS 8.4, MongoDB Compass)
- [CVE-2026-13055](https://cve.now/CVE-2026-13055.md): Server crash via aggregation pipeline expression with compound wildcard index specification (CVSS 7.1, MongoDB Server)
- [CVE-2026-13056](https://cve.now/CVE-2026-13056.md): A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM (CVSS 7.1, MongoDB Server)
- [CVE-2026-13057](https://cve.now/CVE-2026-13057.md): Authorization Bypass via Client-Supplied $search.mergingPipeline Leaks Unauthorized Collection Data Through $$SEARCH\_META (CVSS 6.0, MongoDB Server)
- [CVE-2026-13058](https://cve.now/CVE-2026-13058.md): Transaction Command Insufficient Input Validation Leading to Process Termination (CVSS 7.1, MongoDB Server)
- [CVE-2026-13059](https://cve.now/CVE-2026-13059.md): Improper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control Bypass (CVSS 8.6, MongoDB Server)
- [CVE-2026-9737](https://cve.now/CVE-2026-9737.md): Find command with $meta sort can lead to crash (CVSS 7.1, MongoDB Server)
- [CVE-2026-13060](https://cve.now/CVE-2026-13060.md): $graphLookup Aggregation Stage Authorization Check Inconsistency Allowing Unauthorized Collection Access (CVSS 7.1, MongoDB Server)
- [CVE-2026-14899](https://cve.now/CVE-2026-14899.md): Off-by-one out of bounds read in MIME header parser for forwarding (CVSS 7.5, Mozilla Thunderbird)
- [CVE-2026-13061](https://cve.now/CVE-2026-13061.md): Improper Access Control Allowing Cross-User Session Metadata Disclosure in $listSessions Aggregation Stage (CVSS 5.3, MongoDB Server)
- [CVE-2026-13062](https://cve.now/CVE-2026-13062.md): MongoDB mongos Improper Validation of Internal Flags in Queryable Encryption Write Commands on Sharded Clusters (CVSS 7.1, MongoDB Server)
- [CVE-2026-13063](https://cve.now/CVE-2026-13063.md): libmongocrypt Improper Input Validation Leading to Process Termination (CVSS 5.3, MongoDB Server)
- [CVE-2026-13064](https://cve.now/CVE-2026-13064.md): MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service (CVSS 7.1, MongoDB Server)
- [CVE-2026-13065](https://cve.now/CVE-2026-13065.md): MongoDB $linearFill Window Function Improper Input Validation Leading to Process Termination (CVSS 7.1, MongoDB Server)
- [CVE-2026-13066](https://cve.now/CVE-2026-13066.md): Server-Side JavaScript DBPointer BSON Serialization Memory Disclosure (CVSS 7.1, MongoDB Server)
- [CVE-2026-13067](https://cve.now/CVE-2026-13067.md): tlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain Socket (CVSS 7.2, MongoDB Server)
- [CVE-2026-13068](https://cve.now/CVE-2026-13068.md): MongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cross-Database Privilege Misuse (CVSS 2.3, MongoDB Server)
- [CVE-2026-13069](https://cve.now/CVE-2026-13069.md): Queryable Encryption FLE2 Find Payload Missing Input Validation Leading to Resource Exhaustion (CVSS 7.1, MongoDB Server)
- [CVE-2026-13070](https://cve.now/CVE-2026-13070.md): Improper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Termination (CVSS 6.0, MongoDB Server)
- [CVE-2026-13071](https://cve.now/CVE-2026-13071.md): Server-Side JavaScript Aggregation Expression Memory Safety Issue Leading to Process Termination (CVSS 7.1, MongoDB Server)
- [CVE-2026-13072](https://cve.now/CVE-2026-13072.md): MongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption (CVSS 9.2, MongoDB Server)
- [CVE-2026-13073](https://cve.now/CVE-2026-13073.md): MongoDB Aggregation Command Invariant Assertion Failure Leading to Process Termination (CVSS 5.3, MongoDB Server)
- [CVE-2026-13074](https://cve.now/CVE-2026-13074.md): Awaitable Hello Command in Exhaust Mode Unthrottled Response Loop Leading to Denial of Service (CVSS 6.9, MongoDB Server)
- [CVE-2026-13075](https://cve.now/CVE-2026-13075.md): $rankFusion and $scoreFusion Unbounded Memory Allocation During Error Suggestion Generation (CVSS 7.1, MongoDB Server)
- [CVE-2026-13076](https://cve.now/CVE-2026-13076.md): Aggregation Framework Memory Exhaustion Leading to Process Termination (CVSS 7.1, MongoDB Server)
- [CVE-2026-13077](https://cve.now/CVE-2026-13077.md): Out-of-Bounds Heap Read in BSON CodeWScope Element Parsing via Malformed BSONColumn Data (CVSS 7.1, MongoDB Server)
- [CVE-2026-13078](https://cve.now/CVE-2026-13078.md): Local File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader (CVSS 6.3, MongoDB Server)
- [CVE-2026-22049](https://cve.now/CVE-2026-22049.md): ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to… (CVSS 8.7, NETAPP ONTAP)
- [CVE-2026-16624](https://cve.now/CVE-2026-16624.md): CVE-2026-16624 (CVSS 9.6, Cal.com Cal.diy)
- [CVE-2026-3482](https://cve.now/CVE-2026-3482.md): IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass (CVSS 5.3, IBM Sterling B2B Integrator · IBM Sterling File Gateway)
- [CVE-2026-16157](https://cve.now/CVE-2026-16157.md): Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability (CVSS 7.8, Duplicati)
- [CVE-2026-64835](https://cve.now/CVE-2026-64835.md): FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder (CVSS 8.7, FFmpeg)
- [CVE-2026-65650](https://cve.now/CVE-2026-65650.md): Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload. (CVSS 4.3, Elgg)
- [CVE-2026-64834](https://cve.now/CVE-2026-64834.md): FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer (CVSS 8.7, FFmpeg)
- [CVE-2026-64833](https://cve.now/CVE-2026-64833.md): FFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.c (CVSS 7.1, FFmpeg)
- [CVE-2026-64832](https://cve.now/CVE-2026-64832.md): FFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.c (CVSS 8.7, FFmpeg)
- [CVE-2026-64831](https://cve.now/CVE-2026-64831.md): FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoder (CVSS 8.7, FFmpeg)
- [CVE-2026-64830](https://cve.now/CVE-2026-64830.md): FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer (CVSS 8.7, FFmpeg)
- [CVE-2026-7328](https://cve.now/CVE-2026-7328.md): Unverified AXI Address in Subsystem Mode Commands Enables Denial of Service (CVSS 6.8, Caliptra Core Runtime Firmware)
- [CVE-2026-65013](https://cve.now/CVE-2026-65013.md): Onlook tRPC Insecure Direct Object Reference via multiple procedures (CVSS 8.7, onlook repo)
- [CVE-2026-65012](https://cve.now/CVE-2026-65012.md): InvokeAI \< 6.13.7 Unauthenticated Directory Enumeration via scan\_folder (CVSS 6.3, invoke-ai InvokeAI)
- [CVE-2026-65011](https://cve.now/CVE-2026-65011.md): Graylog2 Server Missing Permission Check on Event Definition Duplicate (CVSS 5.3, graylog2-server)
- [CVE-2026-16615](https://cve.now/CVE-2026-16615.md): Librest: weak random number generation in pkce implementation (CVSS 6.8, GNOME librest · Red Hat Enterprise Linux)
- [CVE-2026-46737](https://cve.now/CVE-2026-46737.md): Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. (CVSS 6.7, Dell PowerProtect Data Manager)
- [CVE-2026-49499](https://cve.now/CVE-2026-49499.md): Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. (CVSS 8.8, Dell PowerProtect Data Manager)
- [CVE-2026-64828](https://cve.now/CVE-2026-64828.md): Froiden TableTrack 1.3.10 Stored XSS via Order Notes Field (CVSS 5.3, Froiden TableTrack)
- [CVE-2026-46738](https://cve.now/CVE-2026-46738.md): Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. (CVSS 9.1, Dell PowerProtect Data Manager)
- [CVE-2026-40712](https://cve.now/CVE-2026-40712.md): Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. (CVSS 9.1, Dell PowerProtect Data Manager)
- [CVE-2026-40714](https://cve.now/CVE-2026-40714.md): Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability. (CVSS 7.2, Dell PowerProtect Data Manager)
- [CVE-2026-16606](https://cve.now/CVE-2026-16606.md): Unauthenticated remote code execution (pre-auth RCE) vulnerability in openFT for Linux and Oracle Solaris (CVSS 9.3, Fujitsu Linux openFT · Fujitsu Oracle Solaris openFT)
- [CVE-2026-44276](https://cve.now/CVE-2026-44276.md): Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to an Unauthorized Actor… (CVSS 6.0, Dell PowerProtect Data Manager)
- [CVE-2026-16607](https://cve.now/CVE-2026-16607.md): Authenticated local root privilege escalation vulnerability in openFT for Linux and Oracle Solaris (CVSS 8.5, Fujitsu Linux openFT · Fujitsu Oracle Solaris openFT)
- [CVE-2026-14985](https://cve.now/CVE-2026-14985.md): CVE-2026-14985 (CVSS 7.8, Analog Way Picturall Quad Compact Mark II)
- [CVE-2026-13321](https://cve.now/CVE-2026-13321.md): DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVSS 8.6, ISC BIND)
- [CVE-2026-13204](https://cve.now/CVE-2026-13204.md): Unexpected exit in certain situations with NSEC and NSEC3 both present (CVSS 7.5, ISC BIND)
- [CVE-2026-12617](https://cve.now/CVE-2026-12617.md): Record ordering based unexpected exit with CNAME or DNAME (CVSS 7.5, ISC BIND)
- [CVE-2026-48029](https://cve.now/CVE-2026-48029.md): libheif: heap OOB read in ImageItem\_Grid::decode\_grid\_tile via irot-induced tile-coordinate underflow (CVSS 7.1, strukturag libheif)
- [CVE-2026-11721](https://cve.now/CVE-2026-11721.md): Cache poisoning possible with label count discrepancy, RRSIG, and wildcards (CVSS 7.5, ISC BIND)
- [CVE-2026-11622](https://cve.now/CVE-2026-11622.md): Potential memory usage beyond configured limits (CVSS 7.5, ISC BIND)
- [CVE-2026-11605](https://cve.now/CVE-2026-11605.md): Unnecessary validation of DNSSEC signed records (CVSS 7.5, ISC BIND)
- [CVE-2026-11331](https://cve.now/CVE-2026-11331.md): Potential wildcard CNAME RPZ policy bypass (CVSS 7.5, ISC BIND)
- [CVE-2026-10822](https://cve.now/CVE-2026-10822.md): Key Record using PRIVATEDNS algorithm may lead to unexpected exit (CVSS 6.5, ISC BIND)
- [CVE-2026-10723](https://cve.now/CVE-2026-10723.md): Incorrect acceptance of NSEC3 records (CVSS 6.8, ISC BIND)
- [CVE-2026-2395](https://cve.now/CVE-2026-2395.md): SQLi in Xpoda Türkiye Informatics Technology's No Code Platform (CVSS 9.8, Xpoda Türkiye Informatics Technology No Code Platform)
- [CVE-2026-62145](https://cve.now/CVE-2026-62145.md): Local Privilege Escalation in Gaia Portal (CVSS 7.5, checkpoint Quantum Security Gateway · checkpoint Quantum Se…)
- [CVE-2026-62144](https://cve.now/CVE-2026-62144.md): Management Authentication Bypass and Privilege Escalation (CVSS 9.1, checkpoint Quantum Security Management · checkpoint Multi-D…)
- [CVE-2026-16232](https://cve.now/CVE-2026-16232.md): Authentication Bypass in the SmartConsole Login Process Using an Application Token (CVSS 9.3, KEV, checkpoint Quantum Security Management · checkpoint Multi-D…)
- [CVE-2026-14932](https://cve.now/CVE-2026-14932.md): Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart (CVSS 6.5, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-14865](https://cve.now/CVE-2026-14865.md): XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX (CVSS 5.3, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13192](https://cve.now/CVE-2026-13192.md): RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 6.5, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13190](https://cve.now/CVE-2026-13190.md): PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 8.1, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-53910](https://cve.now/CVE-2026-53910.md): Heap-based Buffer Overflow in GNU diffutils (CVSS 2.1, GNU diffutils)
- [CVE-2026-13189](https://cve.now/CVE-2026-13189.md): SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 7.5, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13188](https://cve.now/CVE-2026-13188.md): DialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 5.9, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13187](https://cve.now/CVE-2026-13187.md): DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 8.1, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13186](https://cve.now/CVE-2026-13186.md): AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 8.1, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13185](https://cve.now/CVE-2026-13185.md): PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 8.1, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13184](https://cve.now/CVE-2026-13184.md): RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 7.5, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13183](https://cve.now/CVE-2026-13183.md): RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 7.5, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13182](https://cve.now/CVE-2026-13182.md): RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 7.5, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13181](https://cve.now/CVE-2026-13181.md): RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 8.1, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-56444](https://cve.now/CVE-2026-56444.md): Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-56416](https://cve.now/CVE-2026-56416.md): Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name (CVSS 4.8, NLnet Labs Unbound)
- [CVE-2026-55991](https://cve.now/CVE-2026-55991.md): Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-55990](https://cve.now/CVE-2026-55990.md): Packet of death for a DNSCrypt misconfigured Unbound (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-55973](https://cve.now/CVE-2026-55973.md): 'dns-error-reporting: yes' leads to stack buffer overflow (CVSS 7.5, NLnet Labs Unbound)
- [CVE-2026-55717](https://cve.now/CVE-2026-55717.md): 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-55708](https://cve.now/CVE-2026-55708.md): Privacy/configuration issue when adding local data in views through 'unbound-control' (CVSS 3.1, NLnet Labs Unbound)
- [CVE-2026-54478](https://cve.now/CVE-2026-54478.md): DNS Cookie bypass when combined with proxy-protocol use (CVSS 3.7, NLnet Labs Unbound)
- [CVE-2026-52863](https://cve.now/CVE-2026-52863.md): Memory corruption could lead to crash and denial of service (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-50252](https://cve.now/CVE-2026-50252.md): Possible cache poisoning attack by mapping source port population per thread (CVSS 5.7, NLnet Labs Unbound)
- [CVE-2026-50251](https://cve.now/CVE-2026-50251.md): Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush (CVSS 5.3, NLnet Labs Unbound)
- [CVE-2026-50248](https://cve.now/CVE-2026-50248.md): BOGUS configured primary hostname accepted for XFR in auth/rpz zones (CVSS 6.5, NLnet Labs Unbound)
- [CVE-2026-50243](https://cve.now/CVE-2026-50243.md): 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL (CVSS 6.3, NLnet Labs Unbound)
- [CVE-2026-50046](https://cve.now/CVE-2026-50046.md): Possible heap use-after-free in an error path when a DoT forwarded query is jostled out (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-50045](https://cve.now/CVE-2026-50045.md): 'max-global-quota' reset by DNSSEC validation restarts (CVSS 5.3, NLnet Labs Unbound)
- [CVE-2026-46582](https://cve.now/CVE-2026-46582.md): A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path (CVSS 3.7, NLnet Labs Unbound)
- [CVE-2026-44690](https://cve.now/CVE-2026-44690.md): Cross-zone wildcard cache poisoning via RRSIG.labels manipulation (CVSS 7.5, NLnet Labs Unbound)
- [CVE-2026-44687](https://cve.now/CVE-2026-44687.md): Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN (CVSS 3.7, NLnet Labs Unbound)
- [CVE-2026-44621](https://cve.now/CVE-2026-44621.md): Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-42955](https://cve.now/CVE-2026-42955.md): Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue… (CVSS 3.7, NLnet Labs Unbound)
- [CVE-2026-41637](https://cve.now/CVE-2026-41637.md): Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries (CVSS 3.7, NLnet Labs Unbound)
- [CVE-2026-40691](https://cve.now/CVE-2026-40691.md): Packet of death for DNSCrypt over TCP (CVSS 7.5, NLnet Labs Unbound)
- [CVE-2026-32665](https://cve.now/CVE-2026-32665.md): Remote DNS-over-QUIC denial of service due to \`quic-size\` budget bypass (CVSS 7.5, NLnet Labs Unbound)
- [CVE-2026-14586](https://cve.now/CVE-2026-14586.md): Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-16560](https://cve.now/CVE-2026-16560.md): 389-ds-base: 389-ds-base: heap-buffer-overflow in rdn\_av\_swap on quoted multivalued rdn (CVSS 5.3, Red Hat Directory Server · Red Hat Enterprise Linux)
- [CVE-2026-16270](https://cve.now/CVE-2026-16270.md): ReDoS in Open Mercato (CVSS 6.9, Open Mercato)
- [CVE-2026-8152](https://cve.now/CVE-2026-8152.md): Unblu Spark Open Redirect leading to DOM-Based XSS (CVSS 9.3, Unblu Spark)
- [CVE-2026-44191](https://cve.now/CVE-2026-44191.md): Ansible-lightspeed: visual studio code ansible lightspeed extension: remote code execution via command injection in configuration settings (CVSS 7.8, Red Hat Ansible Automation Platform)
- [CVE-2026-4773](https://cve.now/CVE-2026-4773.md): OTP Bypass in Magarsus' IDM-MFA (CVSS 8.1, Magarsus Consulting Ltd. IDM-MFA)
- [CVE-2026-44187](https://cve.now/CVE-2026-44187.md): Ansible-lightspeed: ansible lightspeed extension for visual studio code: information disclosure of google gemini api key (CVSS 3.3, Red Hat Ansible Automation Platform)
- [CVE-2026-44192](https://cve.now/CVE-2026-44192.md): Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and data exfiltration via path traversal (CVSS 6.6, Red Hat Ansible Automation Platform)
- [CVE-2026-44190](https://cve.now/CVE-2026-44190.md): Ansible-lightspeed: ansible lightspeed visual studio code extension: arbitrary code execution via command injection in activation script… (CVSS 7.8, Red Hat Ansible Automation Platform)
- [CVE-2026-44189](https://cve.now/CVE-2026-44189.md): Ansible-lightspeed: visual studio code ansible lightspeed extension: arbitrary code execution via malicious playbook filename (CVSS 7.8, Red Hat Ansible Automation Platform)
- [CVE-2025-13146](https://cve.now/CVE-2025-13146.md): Contact Form 7 – Dynamic Text Extension \<= 5.0.7 - Unauthenticated Arbitrary Shortcode Execution (CVSS 6.5, sevenspark DTX – Dynamic Text Extension for Contact Form)
- [CVE-2026-16551](https://cve.now/CVE-2026-16551.md): Denial-of-Service in OpenCanary's MongoDB module (CVSS 6.9, Thinkst Applied Research OpenCanary)
- [CVE-2026-65603](https://cve.now/CVE-2026-65603.md): Grav Login Plugin 3.8.11 Privilege Escalation via Profile Update (CVSS 8.7, getgrav grav)
- [CVE-2026-65602](https://cve.now/CVE-2026-65602.md): Traefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypass (CVSS 5.3, traefik · github.com/traefik/traefik/v3 +2)
- [CVE-2026-65601](https://cve.now/CVE-2026-65601.md): Traefik before 3.7.7 Namespace Confusion via HTTPRoute ExtensionRef (CVSS 5.3, traefik · github.com/traefik/traefik)
- [CVE-2026-65600](https://cve.now/CVE-2026-65600.md): Traefik before v2.11.52 Authentication Bypass via ReplacePathRegex (CVSS 7.8, traefik · github.com/traefik/traefik/v2 +2)
- [CVE-2026-65599](https://cve.now/CVE-2026-65599.md): n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header (CVSS 5.1, n8n-io n8n · n8n)
- [CVE-2026-65598](https://cve.now/CVE-2026-65598.md): n8n before 1.123.64 Remote Code Execution via Git Clone (CVSS 8.9, n8n-io n8n · n8n)
- [CVE-2026-65597](https://cve.now/CVE-2026-65597.md): n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe (CVSS 8.2, n8n-io n8n · n8n)
- [CVE-2026-65596](https://cve.now/CVE-2026-65596.md): n8n before 1.123.64 Credential Exfiltration via GraphQL Node (CVSS 5.1, n8n-io n8n · n8n)
- [CVE-2026-65595](https://cve.now/CVE-2026-65595.md): n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange (CVSS 8.9, n8n-io n8n · n8n)
- [CVE-2026-65594](https://cve.now/CVE-2026-65594.md): n8n before 2.30.1 Missing OAuth Authorization Check (CVSS 5.1, n8n-io n8n · n8n)
- [CVE-2026-65593](https://cve.now/CVE-2026-65593.md): n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters (CVSS 6.3, n8n-io n8n · n8n)
- [CVE-2026-65592](https://cve.now/CVE-2026-65592.md): n8n before 1.123.64 Stored DOM XSS via cachedResultUrl (CVSS 8.4, n8n-io n8n · n8n)
- [CVE-2026-65591](https://cve.now/CVE-2026-65591.md): n8n before 1.123.64 Sanitizer Bypass Remote Code Execution (CVSS 8.9, n8n-io n8n · n8n)
- [CVE-2026-65590](https://cve.now/CVE-2026-65590.md): n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows (CVSS 5.5, n8n-io n8n · n8n)
- [CVE-2026-65589](https://cve.now/CVE-2026-65589.md): n8n before 1.123.64 Credential Exposure via LLM Node Execution Data (CVSS 5.1, n8n-io n8n · n8n)
- [CVE-2026-65016](https://cve.now/CVE-2026-65016.md): n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role (CVSS 7.7, n8n-io n8n · n8n)
- [CVE-2026-65015](https://cve.now/CVE-2026-65015.md): n8n before 2.30.1 Privilege Escalation via run\_node\_tool (CVSS 7.2, n8n-io n8n · n8n)
- [CVE-2026-65014](https://cve.now/CVE-2026-65014.md): n8n before 2.28.0 Authentication Bypass via test-webhook (CVSS 6.3, n8n-io n8n · n8n)
- [CVE-2026-16544](https://cve.now/CVE-2026-16544.md): Awx: websocket eventconsumer missing authorization for inventory\_update\_events, project\_update\_events, and system\_job\_events allows… (CVSS 6.5, Red Hat Ansible Automation Platform)
- [CVE-2026-61392](https://cve.now/CVE-2026-61392.md): There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial… (CVSS 5.3, Hikvision DS-2CD Series · Hikvision DS-2DE Series)
- [CVE-2026-61391](https://cve.now/CVE-2026-61391.md): There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device… (CVSS 7.2, Hikvision DS-2CD Series · Hikvision DS-2DE Series)
- [CVE-2026-61390](https://cve.now/CVE-2026-61390.md): There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device… (CVSS 7.7, Hikvision DS-2CD Series · Hikvision DS-2DE Series)
- [CVE-2026-57600](https://cve.now/CVE-2026-57600.md): Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial… (CVSS 7.5, Hikvision DS-2CD Series · Hikvision DS-2DE Series +2)
- [CVE-2026-57599](https://cve.now/CVE-2026-57599.md): There is a privilege escalation vulnerability in some Hikvision cameras. (CVSS 6.6, Hikvision DS-2CD Series)
- [CVE-2026-16473](https://cve.now/CVE-2026-16473.md): Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame (CVSS 4.3, Red Hat Enterprise Linux)
- [CVE-2026-14551](https://cve.now/CVE-2026-14551.md): Local Privilege Escalation in servereye client (sensorhub) (CVSS 8.8, servereye Windows Agent)
- [CVE-2026-2406](https://cve.now/CVE-2026-2406.md): IDOR in Universe Software's Online Registration and Workflow Management System (CVSS 6.5, Universe Software Computer Marketing Trade and Industry Onl…)
- [CVE-2026-15787](https://cve.now/CVE-2026-15787.md): Ultimate Addons for Elementor \<= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Widget… (CVSS 6.4, brainstormforce Ultimate Addons for Elementor)
- [CVE-2026-63264](https://cve.now/CVE-2026-63264.md): Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping \< 5.9.3 (CVSS 5.3, joomshopping.com JoomShopping extension for Joomla)
- [CVE-2026-63048](https://cve.now/CVE-2026-63048.md): Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 (CVSS 9.4, joomlack.fr Page Builder CK extension for Joomla)
- [CVE-2026-63047](https://cve.now/CVE-2026-63047.md): Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 (CVSS 7.5, joomdonation.com Events Booking extension for Joomla)
- [CVE-2026-45820](https://cve.now/CVE-2026-45820.md): fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). (CVSS 6.6, 101arrowz fflate · fflate)
- [CVE-2026-3821](https://cve.now/CVE-2026-3821.md): Supermicro SMASH service contain an Arbitrary code execution issue (CVSS 8.8, SMCI X14DBG-DAP,X14DBI)
- [CVE-2026-14322](https://cve.now/CVE-2026-14322.md): Timetics \< 1.0.57 - Unauthenticated Booking Auto-Approval via Arbitrary payment\_method (CVSS 5.3, Timetics)
- [CVE-2026-12987](https://cve.now/CVE-2026-12987.md): Events Manager \< 7.3.7 - Unauthenticated SQL Injection via PHP Object Injection in Booking Registration (CVSS 7.5, Events Manager)
- [CVE-2026-12968](https://cve.now/CVE-2026-12968.md): Product Addons – WowAddons \< 1.6.15 - Unauthenticated Stored XSS via Arbitrary SVG Upload (CVSS 8.8, Product Addons and Product Options With Custom Fields)
- [CVE-2026-15802](https://cve.now/CVE-2026-15802.md): WP Foodbakery \<= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete\_locations\_backup\_file AJAX Action (CVSS 8.1, Chimpstudio WP Foodbakery)
- [CVE-2026-16492](https://cve.now/CVE-2026-16492.md): umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection (CVSS 5.1, umijs umi)
- [CVE-2026-56844](https://cve.now/CVE-2026-56844.md): A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges… (CVSS 8.4, Veeam Backup and Replication)
- [CVE-2026-16490](https://cve.now/CVE-2026-16490.md): itsourcecode Hospital Management System prescription.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2025-44089](https://cve.now/CVE-2025-44089.md): An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a crafted archive file. (CVSS 8.8)
- [CVE-2025-44090](https://cve.now/CVE-2025-44090.md): An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading and executing a crafted archive file. (CVSS 8.8)
- [CVE-2025-50324](https://cve.now/CVE-2025-50324.md): An issue in Milos Paripovic OneCommander v.3.96.0.0 allows a remote attacker to execute arbitrary code via the OneCommander.exe component. (CVSS 8.8)
- [CVE-2025-50325](https://cve.now/CVE-2025-50325.md): BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. (CVSS 5.4)
- [CVE-2025-50327](https://cve.now/CVE-2025-50327.md): An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbitrary code via a… (CVSS 8.8)
- [CVE-2025-50329](https://cve.now/CVE-2025-50329.md): An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code… (CVSS 9.8)
- [CVE-2025-50330](https://cve.now/CVE-2025-50330.md): An issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote attacker to escalate privileges and execute arbitrary code… (CVSS 8.8)
- [CVE-2025-60835](https://cve.now/CVE-2025-60835.md): An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal. (CVSS 7.8)
- [CVE-2026-38763](https://cve.now/CVE-2026-38763.md): An issue in Unistal Systems Pvt. (CVSS 5.5)
- [CVE-2026-38765](https://cve.now/CVE-2026-38765.md): An issue in Unistal Systems Pvt. (CVSS 7.8)
- [CVE-2026-38766](https://cve.now/CVE-2026-38766.md): An issue in Unistal Systems Pvt. (CVSS 7.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2026-07-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.