CVEs published June 10, 2026
251 CVEs were published on June 10, 2026: 23 critical, 96 high. 1 is now in CISA KEV.
- Published
- 251
- Critical
- 23
- High
- 96
- Medium
- 112
- Low
- 20
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 199
Most affected products
- fission · github.com/fission/fission
- 17
- ImageMagick · Magick.NET-Q16-AnyCPU +16
- 16
- nationalsecurityagency ghidra
- 14
- roxy-wi
- 14
- ImageMagick · Magick.NET-Q16-AnyCPU +17
- 12
- QNAP Systems QTS · QNAP Systems QuTS hero
- 9
- Jenkins Project Jenkins · org.jenkins-ci.main:jenkins-core
- 8
- Erlang OTP
- 7
- Splunk Enterprise · Splunk Cloud Platform
- 7
- espressif esp-idf
- 6
Critical 23
- CVE-2026-46695BoxLite: Permission Bypass in boxlite Allows Modification of Read-Only Filesboxlite-ai boxlite · boxlite +3
- CVE-2026-46703BoxLite: Path Traversal Vulnerability in boxlite Leads to Arbitrary File Write on the Hostboxlite-ai boxlite · boxlite +3
- CVE-2026-50638Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injectionsPEVANS Metrics::Any::Adapter::DogStatsd
- CVE-2026-50566Fission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creationfission · github.com/fission/fission
- CVE-2026-50564Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escapefission · github.com/fission/fission
- CVE-2026-50563Fission Container Executor Function PodSpec Injection Leading to Node Escapefission · github.com/fission/fission
- CVE-2026-50545Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeoverfission · github.com/fission/fission
- CVE-2026-46614Fission router exposes /fission-function/<ns>/<name> on its public listener, allowing invocation of any function without an HTTPTriggerfission · github.com/fission/fission
- CVE-2026-20253Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk EnterpriseSplunk Enterprise
- CVE-2026-45558Roxy-WI: Authenticated RCE on every managed HAProxy load balancer via `option` field config injection in section saveroxy-wi
- CVE-2026-45556Roxy-WI: Authenticated arbitrary file write on every managed load balancer (and downstream RCE) via WAF rule save `config_file_name`roxy-wi
- CVE-2026-45550Roxy-WI: IDOR on PUT /smon/check — any user can rewrite any tenant's monitoring URL/IP/bodyroxy-wi
- CVE-2026-45552Roxy-WI: Cross-tenant authorization bypass on /install/* — guest can run Ansible / SSH on every registered serverroxy-wi
- CVE-2026-53470Migration-planner: getsourcedownloadurl missing organization checkmigration-planner · github.com/kubev2v/migration-planner
- CVE-2026-53476Assisted-migration-agent: vddk tarball chained-symlink arbitrary file writeassisted-migration-agent · github.com/kubev2v/assisted-migr…
- CVE-2026-53475Assisted-migration-agent: tls verification disabled on all vcenter connectionsassisted-migration-agent · github.com/kubev2v/assisted-migr…
- CVE-2026-53471Migration-planner: agent api ignores jwt source_id claimmigration-planner · github.com/kubev2v/migration-planner
- CVE-2026-53474Migration-planner: second-order sql injection via rvtools uploadmigration-planner · github.com/kubev2v/migration-planner
- CVE-2026-53469Migration-planner: unprotected delete endpoint wipes all tenant datamigration-planner · github.com/kubev2v/migration-planner
- CVE-2025-6254Doctreat Core <= 1.6.8 - Unauthenticated Privilege EscalationAmentoTech Doctreat Core
- CVE-2026-9067Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media UploadSchema & Structured Data for WP & AMP
- CVE-2025-66276QTSQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2026-45328ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappersespressif esp-idf
High 96
- CVE-2026-47342Apache OFBiz: Privilege Escalation via updateOrRemove Authorization BypassApache Software Foundation Apache OFBiz
- CVE-2026-50223Apache OFBiz: DataResource Low-Privileged Authenticated FreeMarker Template Injection Leads to Remote Code ExecutionApache Software Foundation Apache OFBiz
- CVE-2026-52726Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payloadjelmer dulwich · dulwich
- CVE-2026-44693Pi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Bufferpi-hole FTL
- CVE-2026-53461ImageMagick: Out-of-bounds write in ICON decoder due to incorrect loopImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-53460ImageMagick: Policy Bypass can trigger out-of-Memory conditionImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-49218ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensionsImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-42305Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windowsjelmer dulwich · dulwich
- CVE-2026-42563Dulwich Vulnerable to Command Injection via Merge Driver Pathjelmer dulwich · dulwich
- CVE-2026-42558Xibo Vulnerable to Stored XSS and Iframe Sandbox Escape via Data Connector Script in DataSetxibosignage xibo-cms
- CVE-2026-46520ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensionsImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-46522ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustionImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-2049GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityGIMP
- CVE-2026-46625JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injectionjs-cookie
- CVE-2026-45783libp2p: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodesjs-libp2p · @libp2p/kad-dht
- CVE-2026-46679libp2p: Memory DoS via subscription flood of unique topicsjs-libp2p · @libp2p/gossipsub
- CVE-2026-0274Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integrationPalo Alto Networks Cortex XSIAM CommvaultSecurityIQ Marketp…
- CVE-2026-53738Copy & Delete Posts through 1.5.4 Privilege Escalation via cdp_action_handling HandlerInisev Copy & Delete Posts
- CVE-2026-42542TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS)taosdata TDengine
- CVE-2026-46689Kanidm: Unauthenticated process abort via SCIM filter stack exhaustionkanidm · scim_proto +1
- CVE-2026-50131Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 rangesfedify-dev fedify · fedify-dev vocab-runtime +2
- CVE-2026-48110Russh: SSH message fields were decoded through allocation-first parsers before field-specific boundsEugeny russh · russh
- CVE-2026-10143kafka-python prior to 2.3.2 DoS via SCRAM Iteration Count in scram.pyDana Powers kafka-python · kafka-python
- CVE-2026-42462Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuringfedify-dev fedify · @fedify/fedify
- CVE-2026-46702Russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packetsEugeny russh · russh
- CVE-2026-46673Russh: Unchecked CryptoVec allocation and growth handling is reachable from local agent inputs in current russh releases and from remote SSH traffic in historical pre-0.58.0 releasesEugeny russh · russh-cryptovec +1
- CVE-2026-10142kafka-python prior to 2.3.2 Denial of Service via Protocol Parser Frame LengthDana Powers kafka-python · kafka-python
- CVE-2026-46669`openvm-pairing` pairing check missing proper subfield check on scaling factoropenvm-org openvm
- CVE-2022-26758A malicious application may cause unexpected changes in memory shared between processes.Apple macOS Monterey
- CVE-2026-46654Plonky3 MultiField32Challenger: transcript malleability and challenge entropy lossPlonky3 · p3-challenger
- CVE-2026-44692Authenticated Sharp users can download unrelated Laravel Storage objects through the generic download endpointcode16 sharp · code16/sharp
- CVE-2026-46643Snappy: Binary path is never shell-escaped due to an inverted is_executable checkKnpLabs snappy · KnpLabs/knp-snappy
- CVE-2026-6893Dracut: dracut: root code execution via dhcp options command injectionRed Hat Enterprise Linux · Red Hat OpenShift Container P… +1
- CVE-2026-46529PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopenmate-desktop atril
- CVE-2026-1220Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially exploit type confusion via a crafted HTML page.Google Chrome
- CVE-2026-50637Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injectionsPEVANS Metrics::Any::Adapter::Statsd
- CVE-2026-11417OS Command Injection in NodejsFunction Bundling in aws-cdk-libAWS Cloud Development Kit library · aws-cdk-lib
- CVE-2026-45062FrankenPHP: Unsafe Unicode Handling in CGI Path Splitting Allows Execution of Non-PHP Filesfrankenphp · github.com/dunglas/frankenphp
- CVE-2026-50570Fission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAP_SYS_TIME and cross-tenant node wall-clock corruptionfission · github.com/fission/fission
- CVE-2026-50567Fission: Zip Slip in pkg/utils/zip.go:Unarchive allows fetcher to write outside the destination directoryfission · github.com/fission/fission
- CVE-2026-49824Fission: Cross-namespace Environment reference via unvalidated EnvironmentRef in Function admission webhookfission · github.com/fission/fission
- CVE-2026-49823Fission: Cross-namespace Package read via unvalidated PackageRef in Function admission webhookfission · github.com/fission/fission
- CVE-2026-49822Fission: Cross-namespace event leakage via KubernetesWatchTrigger allows persistent tenant surveillancefission · github.com/fission/fission
- CVE-2026-49821Fission: Cross-namespace Environment reference in Package allows build-time command execution and SA token exfiltrationfission · github.com/fission/fission
- CVE-2026-46617Fission runtime pods automount the fission-fetcher service-account token into the user function container, granting function code namespace-wide secret / configmap readfission · github.com/fission/fission
- CVE-2026-46612Fission StorageSvc /v1/archive endpoint exposes unauthenticated CRUD over all function archivesfission · github.com/fission/fission
- CVE-2026-20258Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2026-20252Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2026-20251Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure GatewaySplunk Enterprise · Splunk Cloud Platform +1
- CVE-2026-9151Command Injection Vulnerability in OpenVPN on Multiple TP-Link Archer RoutersTP-Link Systems Archer AX12 · TP-Link Systems Archer AX18 +2
- CVE-2026-46558Plane: Cross-workspace asset authorization bypass lets any authenticated user read, copy, delete, and overwrite assets in other Plane workspacesmakeplane plane
- CVE-2026-45569Roxy-WI: Path-traversal patch in commit d4d10006 is a no-op (tuple-membership bug)roxy-wi
- CVE-2026-45567Roxy-WI: Authentication bypass via 'api' substring in URL + unauthenticated /api/gptroxy-wi
- CVE-2026-45565Roxy-WI: EscapedString validator skips its '..' block when stripping (root cause for several path-traversal/RCE vectors)roxy-wi
- CVE-2026-53694Potential local privileges escalation through argument injection in the nxchmod.sh scriptNoMachine
- CVE-2026-25700Apache Answer: AdminToken not invalidated after admin deactivationApache Software Foundation Apache Answer · github.com/ap… +1
- CVE-2026-48856httpc leaks Authorization header to cross-origin redirect targetsErlang OTP
- CVE-2026-48860Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_distErlang OTP
- CVE-2026-49759Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crashErlang OTP
- CVE-2026-8335Missing authentication in Aix-DBAix-DB
- CVE-2025-10238During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products cLenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad)… +106
- CVE-2025-10237During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could alLenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) B… +93
- CVE-2026-6090A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arLenovo Smart Connect
- CVE-2026-8637A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authentLenovo LanSchool Classic
- CVE-2026-9045During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise foLenovo Accessories and Display Manager for Enterprise
- CVE-2026-45564Roxy-WI: Authenticated RCE via 'configver' URL parameter (os.system sink in /config/versions/.../save)roxy-wi
- CVE-2026-45549Roxy-WI: Authorization bypass on POST /smon/agent/action/<action> — guest can stop or restart smon-agent on any hostroxy-wi
- CVE-2026-53473Migration-planner-ui-app: stored xss via javascript: url in agent credential linkmigration-planner-ui-app
- CVE-2026-53689libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS sersahlberg libnfs
- CVE-2026-53435In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in JJenkins Project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2025-71329image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parserimage-size
- CVE-2025-71330image-size 2.0.2 Denial of Service via Malformed ICNS Image Parsingimage-size
- CVE-2026-52758Ghidra < 12.1 - SQL Injection via Unescaped Filter Values in BSim Searchnationalsecurityagency ghidra
- CVE-2026-52755Ghidra < 12.0.4 - Path Traversal via Zip Slip in Theme Importnationalsecurityagency ghidra
- CVE-2026-52754Ghidra < 12.1 - Authentication Bypass via Null Signature in PKIAuthenticationModulenationalsecurityagency ghidra
- CVE-2026-52752Ghidra < 12.0.2 - Path Traversal in Extension Installer via ZIP Entry Namesnationalsecurityagency ghidra
- CVE-2026-49069WordPress WPZOOM Portfolio plugin <= 1.4.21 - Cross Site Scripting (XSS) vulnerabilityWPZOOM Portfolio
- CVE-2026-52751Ghidra < 12.1 - Remote Code Execution via Unfiltered RMI Deserialization in Shared Project Connectionnationalsecurityagency ghidra
- CVE-2026-52750Ghidra < 12.1- Command Injection via URL Annotation Clicknationalsecurityagency ghidra
- CVE-2026-49498Ghidra 11.0 < 12.1 - SQL Injection in PostgreSQL Password Change via Unescaped Usernamenationalsecurityagency ghidra
- CVE-2026-9758Improper Certificate Validation in S2OPCSysterel S2OPC
- CVE-2026-24067Slate Digital Connect macOS XPC PID validation privilege escalationSlate Digital Connect
- CVE-2026-24066Slate Digital Connect macOS XPC certificate validation privilege escalationSlate Digital Connect
- CVE-2026-3018Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id Parametercontrid Newsletters
- CVE-2026-10721Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the in Permission, Cache, and Search componentsConcrete CMS · concrete5/concrete5
- CVE-2026-10846Insufficient verification that responses belong to a queryNLnet Labs ldns
- CVE-2026-29116A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, triDahua IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC
- CVE-2026-8071Spam protection, Honeypot, Anti-Spam by CleanTalk < 6.79 - Unauthenticated Stored XSS via Comment Shortcode BypassAnti-Spam by CleanTalk. Spam protection
- CVE-2026-3326XStore < 9.7.3 - Unauthenticated SQLiXstore
- CVE-2026-11837Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chownRed Hat Enterprise Linux · Red Hat OpenStack Platform
- CVE-2026-22893QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-66279QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-66273QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2026-45542ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetoothespressif esp-idf
- CVE-2026-45329ESF-IDF: Out-of-Bounds Read in ESP-TEE Secure Service Wrappersespressif esp-idf
- CVE-2026-45541ESF-IDF: Remote Null Pointer Dereference in WebSocket Serverespressif esp-idf
Medium, low and unrated 132
- CVE-2026-46645SQLAdmin: Authorization Bypass on `ajax_lookup`smithyhq sqladmin · sqladmin
- CVE-2026-47213BoxLite: Timeout Bypass Vulnerabilityboxlite-ai boxlite · boxlite
- CVE-2026-42568Yamcs Vulnerable to LDAP Injection in LdapAuthModuleyamcs · org.yamcs:yamcs-core
- CVE-2026-47734Dulwich has unbounded memory allocation in receive-pack from crafted thin packsjelmer dulwich · dulwich
- CVE-2026-53465ImageMagick: Heap Buffer Over-Write in SF3 encoder when writing multi-frame imageImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-53464ImageMagick: Memory Leak in wand option parser when providing invalid argumentsImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-53463ImageMagick: Null Pointer Dereference in distort operation when passing incorrect argumentsImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-53462ImageMagick: Use-After-Free when allocation in CheckPrimitiveExtent failsImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-47712Dulwich doesn't sanitize commit subjects in `porcelain.format_patch`jelmer dulwich · dulwich
- CVE-2026-49219ImageMagick: Policy Bypass can read disallowed filesImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-48994ImageMagick: Heap Buffer Over-Write in MAT decoder on 32-bit systemsImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-48734ImageMagick: Stack Overflow in MVG decoderImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2024-21944Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sysAMD EPYC™ 7003 Series Processors · AMD EPYC™ 9004 Series Pr…
- CVE-2026-48733ImageMagick: Infinite Loop in subimage-search with crafted imageImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-48724ImageMagick: Heap Buffer Underwrite in Floyd-Steinberg depth ditheringImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-47166ImageMagick: Heap Buffer Over-Read in distributed pixel cache serverImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-47165ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication modelImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-46693ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijackingImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-46692ImageMagick: Heap Buffer Over-Write in distributed pixel cache serverImageMagick · Magick.NET-Q16-AnyCPU +16
- CVE-2026-46559ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoderImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-46557ImageMagick: Stack overflow in fx operationImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-46521ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compressionImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-45664ImageMagick: Policy Bypass in MNG coder couldImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-45624ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.ImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-45359ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top defineImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-45358ImageMagick: Out-of-Bounds Read of a single byte in meta encoderImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-42326ImageMagick: Heap Buffer Over-Read in IPTC encoderImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-45031ImageMagick: Policy Bypass in PSD decoderImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-46523ImageMagick: Use-After-Free in MSL decoder.ImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2026-11604An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authentiOpenVPN ovpn-dco-win
- CVE-2026-0273PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UIPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0272PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-0271Prisma Access Agent: Local Privilege Escalation by Authorized UsersPalo Alto Networks Prisma Access Agent
- CVE-2026-0270Cortex XSOAR: Path Traversal VulnerabilityPalo Alto Networks Cortex XSOAR
- CVE-2026-0269PAN-OS: Denial of Service (DoS) in Tunnel Traffic ProcessingPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +2
- CVE-2026-0268Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on LinuxPalo Alto Networks Prisma Access Agent
- CVE-2026-53742Simple Link Directory through 9.0.4 Stored XSS via Embed Shortcode Attributesquantumcloud Simple Link Directory
- CVE-2026-53741Simple Link Directory through 9.0.4 Stored XSS via sld_no_results_found Optionquantumcloud Simple Link Directory
- CVE-2026-53740Yoast Duplicate Post through 4.6 Stored Cross-Site Scripting via Scheduled Republish NoticeYoast Duplicate Post
- CVE-2026-53739Yoast Duplicate Post through 4.6 Cross-Site Request Forgery via duplicate_post_dismiss_noticeYoast Duplicate Post
- CVE-2026-53737Juicer through 1.12.18 Stored Cross-Site Scripting via Unescaped API Responsesaas.group Juicer
- CVE-2026-53736Easy Twitter Feeds before 1.2.13 Cross-Site Request Forgery via duplicate_post Actionbplugins Easy Twitter Feeds
- CVE-2026-0267GlobalProtect App: Information Exposure Vulnerability on macOSPalo Alto Networks GlobalProtect App · Palo Alto Networks G…
- CVE-2026-0266PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-48108Russh: SSH identification parsing accepted non-canonical client banners and did not bound pre-banner inputEugeny russh · russh
- CVE-2026-48107Russh: Unchecked keyboard-interactive prompt count in client auth pathEugeny russh · russh
- CVE-2026-46705russh server userauth state is not reset when authentication principal changesEugeny russh · russh
- CVE-2026-46668SpiceDB: Caveat structures with nested lists can result in improper cache reuseauthzed spicedb · github.com/authzed/spicedb
- CVE-2022-48575A person with access to a Mac may be able to bypass Login Window.Apple macOS Monterey
- CVE-2026-48011Shopware: Timing-attack on admin panel allowing enumeration of administrator usernamesshopware · shopware/platform +1
- CVE-2026-53634Sharp: Missing Authorization Check in Quick Creation Command Endpointscode16 sharp · code16/sharp
- CVE-2026-45380bit7z: Path Traversal via Null Byte Injection from `gcount()` Off-by-One in `restoreSymlink()`rikyoz bit7z
- CVE-2026-45384bit7z: Arbitrary File Overwrite via Symlink Attack on Predictable Temp File During Archive Updaterikyoz bit7z
- CVE-2026-45106Weblate: Stored HTML injection in editor search previewWeblateOrg weblate · weblate
- CVE-2026-50127Weblate SSRF: outbound URL guard misses the NAT64 well-known prefix (64:ff9b::/96)WeblateOrg weblate · weblate
- CVE-2026-46683Snappy: SSRF and local file read via the xsl-style-sheet optionKnpLabs snappy · knplabs/knp-snappy
- CVE-2026-11626Local Privilege Escalation in Symantec Endpoint Protection macOS CleanWipe Removal ToolBroadcom Symantec Endpoint Protection CleanWipe Removal Tool
- CVE-2026-50639Metrics::Any::Adapter::SignalFx versions before 0.04 for Perl does not protect against metric injectionsPEVANS Metrics::Any::Adapter::SignalFx
- CVE-2026-10740Excessive memory allocation in s2n-quicAWS s2n-quic · s2n-quic
- CVE-2026-46642draw.io: XSS via crafted cell label when opening a .drawio filejgraph drawio
- CVE-2026-50569Fission: HTTPTrigger admission omits RelativeURL / Prefix validation; kubectl apply bypasses CLI checksfission · github.com/fission/fission
- CVE-2026-50568Fission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escapefission · github.com/fission/fission
- CVE-2026-50565Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder containerfission · github.com/fission/fission
- CVE-2026-46618Fission builder accepts arbitrary buildcmd strings from Environment.spec.builder.command, allowing the builder pod to invoke arbitrary executablesfission · github.com/fission/fission
- CVE-2026-20260Log Injection through HTTP Request Paths in Splunk SOARSplunk SOAR
- CVE-2026-20257Improper Input Validation through Classic Dashboard CSS in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2026-20259Improper Access Control in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2026-20255Improper Input Validation through Classic Dashboards in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2026-20254Information Disclosure through External Content Restriction Bypass in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2026-20256Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2026-11596In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user witConnectWise ScreenConnect
- CVE-2026-46609Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialogUmbraco-CMS · Umbraco.Cms
- CVE-2026-46616Umbraco.Cms: Open Redirect Vulnerability in Surface ControllersUmbraco-CMS · Umbraco.Cms
- CVE-2026-46497SSRF via sitemap-derived URLs in Crawlee for Pythonapify crawlee-python · crawlee
- CVE-2026-45566Roxy-WI: Open redirect on /login?next= via basic-auth userinfo syntax bypassroxy-wi
- CVE-2026-48096OpenFGA: Cache-key delimiter injection in openfga/openfga shared-iterator and v2 iterator caches enables intra-store authorization-decision poisoningopenfga · github.com/openfga/openfga
- CVE-2026-48855SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is ConfiguredErlang OTP
- CVE-2026-48858ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacksErlang OTP
- CVE-2026-48859SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumerationErlang OTP
- CVE-2026-49760Stack Buffer Overflow in ei_s_print_term at Very Large IntegerErlang OTP
- CVE-2026-53693MISP BSimVis stored cross-site scripting in tag and cluster rendering paths via unescaped tag metadata and UI labelsmisp bsimvis
- CVE-2026-7516A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allowLenovo Application
- CVE-2026-11884389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculationRed Hat Directory Server · Red Hat Enterprise Linux
- CVE-2026-45563Roxy-WI: IDOR — any authenticated user can read another user's full action historyroxy-wi
- CVE-2026-45561Roxy-WI: SSRF in /smon/agent/<endpoint>/<server_ip> reachable to cloud metadata IPsroxy-wi
- CVE-2026-45560Roxy-WI: Stored XSS in log viewer (wrap_line/highlight_word produce unescaped HTML)roxy-wi
- CVE-2026-45559Roxy-WI: LDAP injection in /user/ldap/<username> (admin-only)roxy-wi
- CVE-2026-53442Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job confJenkins Project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2026-53441Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided description of Jenkins Project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2026-53440Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate to servlet container" securityJenkins Project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2026-53439Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine otJenkins Project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2026-53438A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking IJenkins Project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2026-53437Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to JenkinsJenkins Project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2026-53436Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to JenkinsJenkins Project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2026-52759Ghidra < 12.1.1 - Denial of Service via Uncontrolled Memory Allocation in Mach-O ParserGhidra
- CVE-2026-52757Ghidra < 12.1 - Heap-use-after-free in HighVariable::merge() during decompilationnationalsecurityagency ghidra
- CVE-2026-52756Ghidra < 12.2 - Unauthenticated Path Traversal in Debugger ISF Servernationalsecurityagency ghidra
- CVE-2026-52753Ghidra < 12.0.3 - Out-of-Memory in Rust Symbol Demangler via Malformed Symbolnationalsecurityagency ghidra
- CVE-2026-49497Ghidra < 12.1 - Path Traversal via .gnu_debuglink in DWARF External Debug File Resolutionnationalsecurityagency ghidra
- CVE-2026-49496Ghidra < 12.1 - Heap-Use-After-Free in SleighBuilder::generatePointerAdd via Vector Reallocationnationalsecurityagency ghidra
- CVE-2026-49495Ghidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie Parsernationalsecurityagency ghidra
- CVE-2024-58350Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Ordernationalsecurityagency ghidra
- CVE-2026-11859HTML injection in the Canarytoken links emailThinkst Applied Research Canarytokens
- CVE-2026-11853Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution.Debian debusine
- CVE-2026-11852Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution.Debian debusine
- CVE-2026-8613aThemes Addons for Elementor <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Widget Settingsmub aThemes Addons for Elementor
- CVE-2026-8853MW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' Parameterwebsoudan MW WP Form
- CVE-2026-9019Easy Image Collage <= 1.13.6 - Authenticated (Author+) Stored Cross-Site Scripting via 'grid[properties][borderColor]' and 'grid[images][N][attachment_url]' Parametersbrechtvds Easy Image Collage
- CVE-2026-11815Insecure Deserialization via MITM in Layer 7 Policy ManagerBroadcom Layer 7 API Gateway
- CVE-2026-29115A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially crafted packet, triggDahua IPC/SD
- CVE-2026-9060Agile Store Locator < 1.6.6 - Admin+ Stored XSS via map_styleStore Locator WordPress
- CVE-2026-29114A vulnerability has been found in some Dahua products.Dahua IPC
- CVE-2026-26240File Station 5QNAP Systems File Station
- CVE-2026-26241File Station 5QNAP Systems File Station
- CVE-2025-8444Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates <= 4.2.6 - Authenticated (Contributor+) DOM-Based…wealcoder Animation Addons – Elementor Addons, GSAP Animati…
- CVE-2026-24724File Station 5QNAP Systems File Station
- CVE-2026-26239File Station 5QNAP Systems File Station
- CVE-2026-26237QuMagieQNAP Systems QuMagie
- CVE-2026-24719QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2026-24717QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2026-24716QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2026-24720File Station 5QNAP Systems File Station
- CVE-2026-22899File Station 5QNAP Systems File Station
- CVE-2025-66281QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-66280QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-62851License CenterQNAP Systems License Center
- CVE-2025-62850NULL Pointer Dereference in networkRequest.cgiQNAP Systems QTS · QNAP Systems QVP +2
- CVE-2025-58468Notification CenterQNAP Systems Notification Center
- CVE-2025-59382QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)QNAP Systems QTS · QNAP Systems QuTS hero +1
- CVE-2026-46532ESF-IDF: Heap Out-of-Bounds Read in Bluedroid AVRCP Target Parserespressif esp-idf
- CVE-2026-45160ESF-IDF: Out-of-bounds Read in lwIP DHCP Server Option Parserespressif esp-idf
- CVE-2026-53698Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set.Silverpeas · org.silverpeas.core:silverpeas-core-war +1