CVEs published June 7, 2026
23 CVEs were published on June 7, 2026: 0 critical, 1 high.
- Published
- 23
- Critical
- 0
- High
- 1
- Medium
- 19
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- GL.iNet GL-MT3000
- 6
- erzhongxmu JeeWMS
- 2
- jishenghua jshERP
- 2
- Boost Serialization
- 1
- Chanjet CRM
- 1
- Chengdu Everbrite Network Technology BeikeShop
- 1
- FoundationAgents MetaGPT
- 1
- JeecgBoot
- 1
- NousResearch hermes-agent
- 1
- SecureAge CatchPulse
- 1
High 1
Medium, low and unrated 22
- CVE-2026-11469jishenghua jshERP platformConfig Add Endpoint PlatformConfigService.java insertPlatformConfig server-side request forgeryjishenghua jshERP
- CVE-2026-11468SourceCodester Hospitals Patient Records Management System page room_types cross site scriptingSourceCodester Hospitals Patient Records Management System
- CVE-2026-11467jishenghua jshERP addAccountHeadAndDetail Endpoint AccountHeadService.java path traversaljishenghua jshERP
- CVE-2026-11466zilliztech deep-searcher collection_router.py CollectionRouter.invoke access controlzilliztech deep-searcher · deepsearcher
- CVE-2026-11465songquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic errorsongquanpeng one-api · github.com/songquanpeng/one-api
- CVE-2026-11464JeecgBoot User List Endpoint SysUserController.java queryPageList information disclosureJeecgBoot
- CVE-2026-11463USCiLab Cereal Shared Pointer type confusionUSCiLab Cereal
- CVE-2026-11462Chengdu Everbrite Network Technology BeikeShop Stripe Plugin StripeController.php callback improper authorizationChengdu Everbrite Network Technology BeikeShop
- CVE-2026-11461NousResearch hermes-agent resume Endpoint hermes_state.py resolve_session_by_title authorizationNousResearch hermes-agent
- CVE-2026-11460Boost Serialization improper validation of specified type of inputBoost Serialization
- CVE-2026-11459SecureAge CatchPulse IOCTL saappctl.sys information disclosureSecureAge CatchPulse
- CVE-2026-11458erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosureerzhongxmu JeeWMS
- CVE-2026-11457erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injectionerzhongxmu JeeWMS
- CVE-2026-11456Chanjet CRM HTTP GET Request jxf_dump_systable.php sql injectionChanjet CRM
- CVE-2026-11455FoundationAgents MetaGPT common.py check_cmd_exists command injectionFoundationAgents MetaGPT
- CVE-2026-11453Tiobon Employee Self-Service System Login Endpoint BlogSearch.aspx sql injectionTiobon Employee Self-Service System
- CVE-2026-11452GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injectionGL.iNet GL-MT3000
- CVE-2026-11451GL.iNet GL-MT3000 FTP Protocol glc snprintf command injectionGL.iNet GL-MT3000
- CVE-2026-11450GL.iNet GL-MT3000 Path Normalization dlopen command injectionGL.iNet GL-MT3000
- CVE-2026-11449GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injectionGL.iNet GL-MT3000
- CVE-2026-11448GL.iNet GL-MT3000 Minidlna Service rpc realpath command injectionGL.iNet GL-MT3000
- CVE-2026-11447GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injectionGL.iNet GL-MT3000