# CVEs published 2026-06-11

194 CVEs were published on June 11, 2026: 19 critical, 95 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-49482](https://cve.now/CVE-2026-49482.md): ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle Overwrite (CVSS 4.3, MacWarrior clipbucket-v5)
- [CVE-2026-47238](https://cve.now/CVE-2026-47238.md): ClipBucket: IDOR in videos subtitle editor (CVSS 6.5, MacWarrior clipbucket-v5)
- [CVE-2026-45060](https://cve.now/CVE-2026-45060.md): ClipBucket: Blind SQL Injection in progress\_video.php (CVSS 9.8, MacWarrior clipbucket-v5)
- [CVE-2026-42846](https://cve.now/CVE-2026-42846.md): ClipBucket: Remote Play URL Command Injection (CVSS 9.8, MacWarrior clipbucket-v5)
- [CVE-2026-45418](https://cve.now/CVE-2026-45418.md): ClipBucket: Blind SQL Injection in subtitle\_edit.php (CVSS 8.8, MacWarrior clipbucket-v5)
- [CVE-2026-45171](https://cve.now/CVE-2026-45171.md): Idira Privileged Session Manager (PSM): Potential Code Execution due to an Incomplete Input Validation (CVSS 8.7, CyberArk Software, a Palo Alto Networks Company Privileged…)
- [CVE-2026-45172](https://cve.now/CVE-2026-45172.md): Idira Privileged Session Manager for SSH (PSMP): Arbitrary Command Execution via Improper Neutralization of Special Elements used in an OS Command (CVSS 8.7, CyberArk Software, a Palo Alto Networks Company PAM Self-Ho…)
- [CVE-2026-45173](https://cve.now/CVE-2026-45173.md): Idira Identity Browser Extension: Unauthorized Application Interaction via Origin Validation Failure (CVSS 8.4, CyberArk Software, a Palo Alto Networks Company Identity Br…)
- [CVE-2026-45174](https://cve.now/CVE-2026-45174.md): Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization (CVSS 8.5, CyberArk Software, a Palo Alto Networks Company Idira Endpo…)
- [CVE-2026-42653](https://cve.now/CVE-2026-42653.md): WordPress SliceWP plugin \<= 1.2.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, iova.mihai SliceWP)
- [CVE-2026-39494](https://cve.now/CVE-2026-39494.md): WordPress Product Filter by WBW plugin \<= 3.1.2 - SQL Injection vulnerability (CVSS 9.3, WBW Plugins Product Filter by WBW)
- [CVE-2026-42647](https://cve.now/CVE-2026-42647.md): WordPress JoomSport plugin \<= 5.7.7 - SQL Injection vulnerability (CVSS 9.3, Beardev JoomSport)
- [CVE-2026-49060](https://cve.now/CVE-2026-49060.md): WordPress Hippoo Mobile App for WooCommerce plugin \<= 1.9.4 - Privilege Escalation vulnerability (CVSS 9.8, Hippoo Mobile App for WooCommerce)
- [CVE-2026-44890](https://cve.now/CVE-2026-44890.md): Netty has Unbounded Direct Memory Consumption in its RedisDecoder (CVSS 7.5, netty · io.netty:netty-codec-redis)
- [CVE-2026-44250](https://cve.now/CVE-2026-44250.md): Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays (CVSS 7.5, netty · io.netty:netty-codec-redis)
- [CVE-2026-12035](https://cve.now/CVE-2026-12035.md): Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption (CVSS 8.8, Google Chrome)
- [CVE-2026-12034](https://cve.now/CVE-2026-12034.md): Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827.115 allowed a remote attac (CVSS 8.3, Google Chrome)
- [CVE-2026-12033](https://cve.now/CVE-2026-12033.md): Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to (CVSS 5.3, Google Chrome)
- [CVE-2026-12032](https://cve.now/CVE-2026-12032.md): Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised (CVSS 3.1, Google Chrome)
- [CVE-2026-12031](https://cve.now/CVE-2026-12031.md): Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the (CVSS 8.3, Google Chrome)
- [CVE-2026-12030](https://cve.now/CVE-2026-12030.md): Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer pr (CVSS 8.3, Google Chrome)
- [CVE-2026-12029](https://cve.now/CVE-2026-12029.md): Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer proce (CVSS 8.3, Google Chrome)
- [CVE-2026-12028](https://cve.now/CVE-2026-12028.md): Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process (CVSS 8.3, Google Chrome)
- [CVE-2026-12027](https://cve.now/CVE-2026-12027.md): Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer (CVSS 9.6, Google Chrome)
- [CVE-2026-12026](https://cve.now/CVE-2026-12026.md): Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer (CVSS 5.3, Google Chrome)
- [CVE-2026-12025](https://cve.now/CVE-2026-12025.md): Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised (CVSS 5.3, Google Chrome)
- [CVE-2026-12024](https://cve.now/CVE-2026-12024.md): Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker to bypass same origin policy (CVSS 6.5, Google Chrome)
- [CVE-2026-12023](https://cve.now/CVE-2026-12023.md): Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to (CVSS 8.3, Google Chrome)
- [CVE-2026-12022](https://cve.now/CVE-2026-12022.md): Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to (CVSS 8.3, Google Chrome)
- [CVE-2026-12020](https://cve.now/CVE-2026-12020.md): Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption (CVSS 8.8, Google Chrome)
- [CVE-2026-12019](https://cve.now/CVE-2026-12019.md): Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised (CVSS 8.3, Google Chrome)
- [CVE-2026-12018](https://cve.now/CVE-2026-12018.md): Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149.0.7827.115 allowed a local attacker to perform OS-level privil (CVSS 8.8, Google Chrome)
- [CVE-2026-12017](https://cve.now/CVE-2026-12017.md): Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the render (CVSS 3.1, Google Chrome)
- [CVE-2026-12016](https://cve.now/CVE-2026-12016.md): Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer (CVSS 8.3, Google Chrome)
- [CVE-2026-12015](https://cve.now/CVE-2026-12015.md): Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to ob (CVSS 5.3, Google Chrome)
- [CVE-2026-12014](https://cve.now/CVE-2026-12014.md): Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local network segment to potentially perform a sa (CVSS 8.3, Google Chrome)
- [CVE-2026-12012](https://cve.now/CVE-2026-12012.md): Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileged network position to potentially explo (CVSS 8.1, Google Chrome)
- [CVE-2026-12011](https://cve.now/CVE-2026-12011.md): Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer pro (CVSS 8.3, Google Chrome)
- [CVE-2026-12010](https://cve.now/CVE-2026-12010.md): Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer p (CVSS 8.3, Google Chrome)
- [CVE-2026-12009](https://cve.now/CVE-2026-12009.md): Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who ha (CVSS 8.3, Google Chrome)
- [CVE-2026-12008](https://cve.now/CVE-2026-12008.md): Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer pro (CVSS 8.3, Google Chrome)
- [CVE-2026-12007](https://cve.now/CVE-2026-12007.md): Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to execute arbitrary code via a crafted (CVSS 8.8, Google Chrome)
- [CVE-2026-44249](https://cve.now/CVE-2026-44249.md): Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking (CVSS 8.1, netty · io.netty:netty-handler)
- [CVE-2026-6250](https://cve.now/CVE-2026-6250.md): Authenticated Format String Injection on TP-Link Tapo C110 (CVSS 7.0, TP-Link Systems Tapo C110)
- [CVE-2026-53819](https://cve.now/CVE-2026-53819.md): OpenClaw \< 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Override (CVSS 8.7, OpenClaw)
- [CVE-2026-53818](https://cve.now/CVE-2026-53818.md): OpenClaw \< 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback (CVSS 6.9, OpenClaw)
- [CVE-2026-53817](https://cve.now/CVE-2026-53817.md): OpenClaw \< 2026.5.22 - Control UI Locality Spoofing in Device Pairing (CVSS 8.7, OpenClaw)
- [CVE-2026-53816](https://cve.now/CVE-2026-53816.md): OpenClaw \< 2026.5.18 - Exec Lifecycle Event Forgery via Paired Node (CVSS 8.6, OpenClaw)
- [CVE-2026-53815](https://cve.now/CVE-2026-53815.md): OpenClaw \< 2026.5.19 - Channel Allowlist Bypass in Message Read Actions (CVSS 7.1, OpenClaw)
- [CVE-2026-53814](https://cve.now/CVE-2026-53814.md): OpenClaw \< 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authority (CVSS 8.7, OpenClaw)
- [CVE-2026-53813](https://cve.now/CVE-2026-53813.md): OpenClaw \< 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolution (CVSS 7.3, OpenClaw)
- [CVE-2026-53812](https://cve.now/CVE-2026-53812.md): OpenClaw \< 2026.5.18 - Private-Network Navigation Bypass via Browser Act Interactions (CVSS 4.9, OpenClaw)
- [CVE-2026-53811](https://cve.now/CVE-2026-53811.md): OpenClaw \< 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFrom (CVSS 7.7, OpenClaw)
- [CVE-2026-53810](https://cve.now/CVE-2026-53810.md): OpenClaw \< 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata (CVSS 7.7, OpenClaw)
- [CVE-2026-53809](https://cve.now/CVE-2026-53809.md): OpenClaw \< 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy (CVSS 4.8, OpenClaw)
- [CVE-2026-53808](https://cve.now/CVE-2026-53808.md): OpenClaw \< 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow (CVSS 6.0, OpenClaw)
- [CVE-2026-53807](https://cve.now/CVE-2026-53807.md): OpenClaw \< 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom (CVSS 7.7, OpenClaw)
- [CVE-2026-53806](https://cve.now/CVE-2026-53806.md): OpenClaw \< 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation (CVSS 7.7, OpenClaw)
- [CVE-2026-41005](https://cve.now/CVE-2026-41005.md): UAA accepts SAML Encrypted Assertions authentication bypass (CVSS 9.0, Cloud Foundry UAA · Cloud Foundry CF Deployment)
- [CVE-2026-50005](https://cve.now/CVE-2026-50005.md): Brickcom Cameras Use of Default Credentials (CVSS 7.7, Brickcom Cube · Brickcom Dome +2)
- [CVE-2026-50245](https://cve.now/CVE-2026-50245.md): Brickcom Cameras Missing Authentication for Critical Function (CVSS 7.7, Brickcom Cube · Brickcom Dome +2)
- [CVE-2026-53782](https://cve.now/CVE-2026-53782.md): Summarize \< 0.17.0 SSRF via podcast:transcript URL fetch (CVSS 6.3, steipete summarize · @steipete/summarize)
- [CVE-2026-53781](https://cve.now/CVE-2026-53781.md): Summarize \< 0.17.0 Disk Exhaustion via Uncapped Media Download (CVSS 5.3, steipete summarize · @steipete/summarize-core)
- [CVE-2026-49973](https://cve.now/CVE-2026-49973.md): Hermes WebUI \< 0.51.358 Unauthenticated Password Takeover via /api/settings (CVSS 9.2, nesquena hermes-webui)
- [CVE-2026-45802](https://cve.now/CVE-2026-45802.md): FPDI: Memory Exhaustion and Endless Loop in FPDI leads to Denial of Service (CVSS 6.0, Setasign FPDI · setasign/fpdi)
- [CVE-2026-45175](https://cve.now/CVE-2026-45175.md): Idira Endpoint Privilege Manager Agent: Security Control and Cryptographic Validation Bypass in Internal Agent Validation Processes (CVSS 8.5, CyberArk Software, a Palo Alto Networks Company Idira Endpo…)
- [CVE-2026-46489](https://cve.now/CVE-2026-46489.md): SolidInvoice: Unrestricted file upload with no MIME validation allows stored XSS via malicious SVG logo (CVSS 8.1, SolidInvoice)
- [CVE-2026-49949](https://cve.now/CVE-2026-49949.md): CodexBar \< 0.33.0 Credential Leakage via HTTP Redirect (CVSS 6.0, steipete CodexBar)
- [CVE-2026-46622](https://cve.now/CVE-2026-46622.md): SolidInvoice: API tokens stored as plaintext in the database allowing full credential compromise on database breach (CVSS 8.1, SolidInvoice)
- [CVE-2026-47181](https://cve.now/CVE-2026-47181.md): PenguinMod-BackendApi: NoSQL Injection in Password Reset Endpoint Allows Account Takeover (CVSS 8.7, PenguinMod-BackendApi)
- [CVE-2026-45176](https://cve.now/CVE-2026-45176.md): Idira Endpoint Privilege Manager Agent: Local Privilege Escalation via Internal Communication or File Operation Manipulation (CVSS 8.9, CyberArk Software, a Palo Alto Networks Company Idira Endpo…)
- [CVE-2025-30431](https://cve.now/CVE-2025-30431.md): The issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2025-24268](https://cve.now/CVE-2025-24268.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (CVSS 5.5, Apple macOS)
- [CVE-2025-43339](https://cve.now/CVE-2025-43339.md): An access issue was addressed with additional sandbox restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-46293](https://cve.now/CVE-2025-46293.md): This issue was addressed with improved handling of symlinks. (CVSS 5.5, Apple macOS)
- [CVE-2025-46315](https://cve.now/CVE-2025-46315.md): A permissions issue was addressed with additional restrictions. (CVSS 7.5, Apple macOS)
- [CVE-2025-31272](https://cve.now/CVE-2025-31272.md): The issue was addressed with improved checks. (CVSS 7.8, Apple macOS)
- [CVE-2025-30459](https://cve.now/CVE-2025-30459.md): A privacy issue was addressed by removing the vulnerable code. (CVSS 5.5, Apple macOS)
- [CVE-2025-24284](https://cve.now/CVE-2025-24284.md): This issue was addressed with improved checks to prevent unauthorized actions. (CVSS 8.8, Apple macOS)
- [CVE-2025-24165](https://cve.now/CVE-2025-24165.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-46313](https://cve.now/CVE-2025-46313.md): A logging issue was addressed with improved data redaction. (CVSS 5.5, Apple macOS)
- [CVE-2025-43278](https://cve.now/CVE-2025-43278.md): This issue was addressed with improved handling of symlinks. (CVSS 5.5, Apple macOS)
- [CVE-2025-46308](https://cve.now/CVE-2025-46308.md): An authorization issue was addressed with improved state management. (CVSS 5.3, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-47174](https://cve.now/CVE-2026-47174.md): Duck Site: Untrusted pull request code can trigger privileged production deployment (CVSS 9.5, duck-organization duck-site)
- [CVE-2026-45177](https://cve.now/CVE-2026-45177.md): Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanism (CVSS 9.1, CyberArk Software, a Palo Alto Networks Company Conjur Cloud)
- [CVE-2026-47170](https://cve.now/CVE-2026-47170.md): Garlic-Hub: SSRF vulnerability in uploadFromUrl endpoint (CVSS 7.7, garlic-signage garlic-hub)
- [CVE-2026-47250](https://cve.now/CVE-2026-47250.md): mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration (CVSS 6.1, Flux159 mcp-server-kubernetes · mcp-server-kubernetes)
- [CVE-2026-46519](https://cve.now/CVE-2026-46519.md): mcp-server-kubernetes Affected By Tool Access Control Bypass: Presentation-Layer Filtering Without Execution-Layer Enforcement (CVSS 8.8, Flux159 mcp-server-kubernetes · mcp-server-kubernetes)
- [CVE-2026-52860](https://cve.now/CVE-2026-52860.md): Vim: Arbitrary Code Execution via Python Omni-Completion (CVSS 7.5, vim)
- [CVE-2026-48547](https://cve.now/CVE-2026-48547.md): KanaDojo \< 0.1.18 Command Injection via patchNotesData.json in release.yml (CVSS 8.5, lingdojo kana-dojo)
- [CVE-2026-52859](https://cve.now/CVE-2026-52859.md): Vim: Out-of-bounds Read in Terminal Screen Snapshot (CVSS 6.9, vim)
- [CVE-2026-52858](https://cve.now/CVE-2026-52858.md): Vim: Arbitrary Code Execution via Python Omni-Completion (CVSS 7.3, vim)
- [CVE-2026-47162](https://cve.now/CVE-2026-47162.md): Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name (CVSS 7.3, vim)
- [CVE-2026-47167](https://cve.now/CVE-2026-47167.md): Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex (CVSS 5.1, vim)
- [CVE-2026-47189](https://cve.now/CVE-2026-47189.md): Quest Bot: AutoMod removal can delete rules from another guild by global rule ID (CVSS 8.3, duck-organization quest-bot)
- [CVE-2026-47188](https://cve.now/CVE-2026-47188.md): Quest Bot: Unban and unwarn reason fields still allow bot-powered mass mentions. (CVSS 2.3, duck-organization quest-bot)
- [CVE-2026-47177](https://cve.now/CVE-2026-47177.md): Quest Bot: Ticket transcripts can disclose private ticket contents to a lower-visibility channel (CVSS 5.7, duck-organization quest-bot)
- [CVE-2026-47176](https://cve.now/CVE-2026-47176.md): Quest Bot: Logging module can disclose private-channel message contents to a lower-visibility log channel (CVSS 5.7, duck-organization quest-bot)
- [CVE-2026-47175](https://cve.now/CVE-2026-47175.md): Quest Bot: Moderation reason fields allow bot-powered \`@everyone\` / \`@here\` pings (CVSS 2.3, duck-organization quest-bot)
- [CVE-2026-47173](https://cve.now/CVE-2026-47173.md): Quest Bot: Ticket reason allows mass-mention injection (CVSS 6.3, duck-organization quest-bot)
- [CVE-2026-47172](https://cve.now/CVE-2026-47172.md): Quest Bot: Untrusted pull request code can be built and deployed by privileged \`workflow\_run\` deployment. (CVSS 9.5, duck-organization quest-bot)
- [CVE-2026-47171](https://cve.now/CVE-2026-47171.md): Quest Bot: Reminder messages allow stored mass mentions through \`@everyone\` and \`@here\` (CVSS 8.8, duck-organization quest-bot)
- [CVE-2026-47163](https://cve.now/CVE-2026-47163.md): Quest Bot: Unprivileged users can create and remove AutoMod rules. (CVSS 7.2, duck-organization quest-bot)
- [CVE-2026-47169](https://cve.now/CVE-2026-47169.md): Quest Bot: Manage Server users can configure AutoRole to grant Administrator to controlled joining accounts (CVSS 7.5, duck-organization quest-bot)
- [CVE-2026-45178](https://cve.now/CVE-2026-45178.md): Idira Secrets Manager Self-Hosted: Improper Access Control in Internal Cluster Endpoints (CVSS 8.4, CyberArk Software, a Palo Alto Networks Company Conjur Ente…)
- [CVE-2026-53702](https://cve.now/CVE-2026-53702.md): Gstreamer1-plugins-bad-free: gstreamer: stack buffer overflow in h.265 buffering period sei parser (CVSS 6.5, Red Hat Enterprise Linux)
- [CVE-2026-53701](https://cve.now/CVE-2026-53701.md): Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds write in h.266/vvc pps picture partition parser (CVSS 6.5, Red Hat Enterprise Linux)
- [CVE-2026-11774](https://cve.now/CVE-2026-11774.md): 389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow (CVSS 7.6, Red Hat Directory Server 11.5 E4S for RHEL · Red Hat Dir… +5)
- [CVE-2026-48546](https://cve.now/CVE-2026-48546.md): KanaDojo \< 0.1.18 Sandbox Escape RCE via messages.cjs (CVSS 8.5, lingdojo kana-dojo)
- [CVE-2026-47157](https://cve.now/CVE-2026-47157.md): aiograpi: Unsafe signup challenge path handling (CVSS 6.5, subzeroid aiograpi · aiograpi)
- [CVE-2026-46697](https://cve.now/CVE-2026-46697.md): Fediverse Embeds: Unauthenticated SSRF / open proxy via REST media-proxy endpoint (CVSS 7.5, stefanbohacek fediverse-embeds-wordpress-plugin)
- [CVE-2026-46698](https://cve.now/CVE-2026-46698.md): Fediverse Embeds: Public-nonce SSRF via ftf\_get\_site\_info AJAX action (CVSS 5.3, stefanbohacek fediverse-embeds-wordpress-plugin)
- [CVE-2026-49261](https://cve.now/CVE-2026-49261.md): MariaDB server has unsafe parameter handling in \`wsrep\_notify\_cmd\` (CVSS 10.0, MariaDB server)
- [CVE-2026-3329](https://cve.now/CVE-2026-3329.md): Nexus Repository Manager - Improper Restriction of Excessive Authentication Attempts (CVSS 8.7, Sonatype Nexus Repository Manager)
- [CVE-2026-11986](https://cve.now/CVE-2026-11986.md): Keycloak-rest-admin-ui-ext: authorization bypass vulnerability in the admin-ui-ext bulk role-mapping-delete endpoints of keycloak (CVSS 4.9, Red Hat build of Keycloak · Red Hat JBoss Enterprise App… +1)
- [CVE-2026-11945](https://cve.now/CVE-2026-11945.md): PostgreSQL Anonymizer: SQL injection in the rules import functions (CVSS 6.4, DALIBO PostgreSQL Anonymizer)
- [CVE-2026-49982](https://cve.now/CVE-2026-49982.md): tmp: Type-confusion bypass of \_assertPath in tmp@0.2.6 allows path traversal via non-string prefix/postfix/template (CVSS 8.2, raszi node-tmp · tmp)
- [CVE-2026-44705](https://cve.now/CVE-2026-44705.md): tmp: Path Traversal via unsanitized prefix/postfix enables directory escape (CVSS 7.7, raszi node-tmp · tmp)
- [CVE-2026-44486](https://cve.now/CVE-2026-44486.md): Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection (CVSS 7.5, axios)
- [CVE-2026-44487](https://cve.now/CVE-2026-44487.md): Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter (CVSS 8.2, axios)
- [CVE-2026-44488](https://cve.now/CVE-2026-44488.md): Axios: Allocation of Resources Without Limits or Throttling in axios (CVSS 7.5, axios)
- [CVE-2026-44490](https://cve.now/CVE-2026-44490.md): Axios: DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions (CVSS 4.8, axios)
- [CVE-2026-44496](https://cve.now/CVE-2026-44496.md): Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection (CVSS 7.5, axios)
- [CVE-2026-44495](https://cve.now/CVE-2026-44495.md): Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge (CVSS 7.0, axios)
- [CVE-2026-44494](https://cve.now/CVE-2026-44494.md): Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in \`config.proxy\` (CVSS 8.7, axios)
- [CVE-2026-44489](https://cve.now/CVE-2026-44489.md): Axios: Proxy-Authorization Header Injection via Prototype Pollution — Incomplete Null-Prototype Fix (CVSS 3.7, axios)
- [CVE-2026-44492](https://cve.now/CVE-2026-44492.md): Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO\_PROXY bypass (incomplete fix for CVE-2025-62718) (CVSS 8.6, axios)
- [CVE-2024-45636](https://cve.now/CVE-2024-45636.md): IBM Security QRadar EDR Software has a vulnerability where user credentials may be stored in plain text, potentially exposing sensitive information. (CVSS 4.1, IBM Security QRadar EDR)
- [CVE-2026-3341](https://cve.now/CVE-2026-3341.md): IBM Langflow Desktop 1.0.0 - 1.9.2 DNS Rebinding Bypasses SSRF Protection Allowing Access to Internal Services (CVSS 5.4, IBM Langflow Desktop)
- [CVE-2026-53777](https://cve.now/CVE-2026-53777.md): Perry \< 0.5.1159 Path Traversal via ArtifactReady WebSocket (CVSS 8.6, PerryTS perry)
- [CVE-2026-4096](https://cve.now/CVE-2026-4096.md): A vulnerability has been identified in IBM DevOps Plan that allows a Host Header Injection attack due to improper handling of the Host header in HTTP requests. (CVSS 6.5, IBM DevOps Plan)
- [CVE-2026-7787](https://cve.now/CVE-2026-7787.md): Unauthenticated Session History Access via Public Flow Execution (CVSS 7.5, IBM Langflow OSS)
- [CVE-2026-7870](https://cve.now/CVE-2026-7870.md): IBM i is Affected by Privilege Escalation \[\] (CVSS 8.8, IBM i)
- [CVE-2026-11839](https://cve.now/CVE-2026-11839.md): Arbitrary File Upload in Basarsoft's Rotaban (CVSS 9.9, Başarsoft Information Technologies Rotaban)
- [CVE-2026-9648](https://cve.now/CVE-2026-9648.md): CVE-2026-9648 (CVSS 9.1, Haskell Programming Language crypton-certificate)
- [CVE-2026-10847](https://cve.now/CVE-2026-10847.md): Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS (CVSS 7.8, checkpoint Identity Agent)
- [CVE-2026-6338](https://cve.now/CVE-2026-6338.md): HTTP request smuggling in Kong Enteprise Gateway (CVSS 4.9, Kong Enterprise Gateway)
- [CVE-2026-8406](https://cve.now/CVE-2026-8406.md): openSIS Classic 9.3 - Insecure Direct Object Reference in Sent Mail (CVSS 7.1, OS4ED openSIS-Classic)
- [CVE-2026-11816](https://cve.now/CVE-2026-11816.md): Path Traversal in keras-team/keras (CVSS 8.1, keras-team/keras · keras)
- [CVE-2026-53661](https://cve.now/CVE-2026-53661.md): boruta-server sent sensitive session cookies without the Secure attribute (CVSS 8.8, malach-it boruta-server)
- [CVE-2026-53723](https://cve.now/CVE-2026-53723.md): guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator (CVSS 5.8, guzzle-services · guzzlehttp/guzzle-services)
- [CVE-2026-49214](https://cve.now/CVE-2026-49214.md): guzzlehttp/psr7 has CRLF Injection via URI Host Component (CVSS 5.3, guzzle psr7 · guzzlehttp/psr7)
- [CVE-2026-48998](https://cve.now/CVE-2026-48998.md): guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation (CVSS 5.3, guzzle psr7 · guzzlehttp/psr7)
- [CVE-2026-11561](https://cve.now/CVE-2026-11561.md): SSTI in Soagen Informatics' Apinizer (CVSS 9.8, Soagen Informatics Technologies Software and Consulting Api…)
- [CVE-2026-7852](https://cve.now/CVE-2026-7852.md): Unrestricted File Upload in Limatek's LimRAD NAC (CVSS 9.8, Limatek System LimRAD NAC)
- [CVE-2026-11956](https://cve.now/CVE-2026-11956.md): TwiN gatus OIDC Session Cookie oidc.go setSessionCookie missing secure attribute (CVSS 6.3, TwiN gatus)
- [CVE-2023-32959](https://cve.now/CVE-2023-32959.md): WordPress MetroStore theme \<= 1.3.2 - Broken Access Control (CVSS 4.3, Sparkle WP MetroStore)
- [CVE-2023-25969](https://cve.now/CVE-2023-25969.md): WordPress Contact Form & Lead Form Elementor Builder plugin \<= 1.8.4 - Broken Access Control vulnerability (CVSS 5.4, ThemeHunk Contact Form & Lead Form Elementor Builder)
- [CVE-2026-53423](https://cve.now/CVE-2026-53423.md): Unauthenticated denial-of-service via BEAM atom table exhaustion in membrane\_mp4\_plugin (CVSS 5.9, membraneframework membrane\_mp4\_plugin)
- [CVE-2022-47150](https://cve.now/CVE-2022-47150.md): WordPress WooCommerce Conversion Tracking plugin \<= 2.0.10 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 4.3, weDevs WooCommerce Conversion Tracking)
- [CVE-2022-45813](https://cve.now/CVE-2022-45813.md): WordPress Advanced AJAX Product Filters plugin \<= 1.6.3.3 - Broken Access Control + CSRF (CVSS 5.4, BeRocket Advanced AJAX Product Filters)
- [CVE-2026-8464](https://cve.now/CVE-2026-8464.md): Path traversal in Neuron Soft Golem OEE MES (CVSS 8.3, Neuron Soft Golem OEE MES)
- [CVE-2026-1500](https://cve.now/CVE-2026-1500.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5, GitLab)
- [CVE-2026-3553](https://cve.now/CVE-2026-3553.md): Incorrect Authorization in GitLab (CVSS 3.1, GitLab)
- [CVE-2026-6269](https://cve.now/CVE-2026-6269.md): Incorrect Authorization in GitLab (CVSS 5.4, GitLab)
- [CVE-2026-6277](https://cve.now/CVE-2026-6277.md): Incorrect Authorization in GitLab (CVSS 4.3, GitLab)
- [CVE-2026-6976](https://cve.now/CVE-2026-6976.md): Authorization Bypass Through User-Controlled Key in GitLab (CVSS 3.7, GitLab)
- [CVE-2026-7250](https://cve.now/CVE-2026-7250.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5, GitLab)
- [CVE-2026-8589](https://cve.now/CVE-2026-8589.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 7.3, GitLab)
- [CVE-2026-9204](https://cve.now/CVE-2026-9204.md): Server-Side Request Forgery (SSRF) in GitLab (CVSS 5.3, GitLab)
- [CVE-2026-9694](https://cve.now/CVE-2026-9694.md): Improper Neutralization of Substitution Characters in GitLab (CVSS 2.6, GitLab)
- [CVE-2026-10087](https://cve.now/CVE-2026-10087.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7, GitLab)
- [CVE-2026-10733](https://cve.now/CVE-2026-10733.md): Improper Restriction of Rendered UI Layers or Frames in GitLab (CVSS 4.3, GitLab)
- [CVE-2026-4764](https://cve.now/CVE-2026-4764.md): Privilege Escalation in Dialogflow CX via Playbook Import (CVSS 9.4, Google Cloud Dialogflow CX)
- [CVE-2026-53912](https://cve.now/CVE-2026-53912.md): Cerebrate self-registration password hash exposure via inbox and audit log views (CVSS 5.1, cerebrate)
- [CVE-2022-44630](https://cve.now/CVE-2022-44630.md): WordPress YITH WooCommerce Product Slider Carousel plugin \<= 1.16.0 - Cross-Site Request Forgery (CSRF) (CVSS 4.6, YITH WooCommerce Product Slider Carousel)
- [CVE-2026-11850](https://cve.now/CVE-2026-11850.md): Krb5: krb5: integer underflow in berval2tl\_data() leads to heap out-of-bounds read (CVSS 5.0, Red Hat Hardened Images · Red Hat Enterprise Linux +1)
- [CVE-2022-42479](https://cve.now/CVE-2022-42479.md): WordPress Soledad premium theme \<= 8.2.5 - Broken Access Control vulnerability (CVSS 5.4, TemplateHouse Soledad)
- [CVE-2026-53911](https://cve.now/CVE-2026-53911.md): Cerebrate primary key mass assignment in CRUD edit operations allows authenticated users to overwrite unrelated records (CVSS 6.3, cerebrate)
- [CVE-2025-7064](https://cve.now/CVE-2025-7064.md): Freelance Security Lock – Access to Windows OS (CVSS 6.6, ABB Freelance)
- [CVE-2026-5497](https://cve.now/CVE-2026-5497.md): Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllm (CVSS 7.5, vllm-project/vllm · vllm)
- [CVE-2026-53901](https://cve.now/CVE-2026-53901.md): Cerebrate before v1.37 allows mass assignment of record identifiers during object creation (CVSS 8.7, cerebrate)
- [CVE-2023-40200](https://cve.now/CVE-2023-40200.md): WordPress WP Logo Showcase Responsive Slider and Carousel plugin \<= 3.6 - Broken Access Control vulnerability (CVSS 5.3, Essential Plugin WP Logo Showcase Responsive Slider and Car…)
- [CVE-2024-32110](https://cve.now/CVE-2024-32110.md): WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin \<= 4.1.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Magepeople WpEvently)
- [CVE-2023-33999](https://cve.now/CVE-2023-33999.md): WordPress WP Mail Log plugin \<= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPVibes WP Mail Log)
- [CVE-2026-10795](https://cve.now/CVE-2026-10795.md): UpdraftPlus: WP Backup & Migration Plugin \<= 1.26.4 - Unauthenticated Authentication Bypass via UpdraftCentral udrpc (CVSS 8.1, davidanderson UpdraftPlus: WP Backup & Migration Plugin)
- [CVE-2026-41856](https://cve.now/CVE-2026-41856.md): Spring GraphQL Annotation Detection Vulnerability (CVSS 7.5, Spring for GraphQL · org.springframework.graphql:spring-gra…)
- [CVE-2026-41700](https://cve.now/CVE-2026-41700.md): Cross-Site WebSocket Hijacking in Spring for GraphQL (CVSS 8.1, Spring for GraphQL · org.springframework.graphql:spring-gra…)
- [CVE-2026-41699](https://cve.now/CVE-2026-41699.md): Unsafe Deserialization in Spring GraphQL (CVSS 8.1, Spring for GraphQL · org.springframework.graphql:spring-gra…)
- [CVE-2026-41001](https://cve.now/CVE-2026-41001.md): Predictable Temp Directory in Artemis Auto-configuration (CVSS 5.3, Spring Boot · org.springframework.boot:spring-boot-autoconf…)
- [CVE-2026-41000](https://cve.now/CVE-2026-41000.md): WSS4J validation does not use configured replay cache (CVSS 3.7, Spring Web Services · org.springframework.ws:spring-ws-secu…)
- [CVE-2026-40999](https://cve.now/CVE-2026-40999.md): Spring WS SSRF via unvalidated WS-Addressing reply destinations (CVSS 8.6, Spring Web Services · org.springframework.ws:spring-ws-core)
- [CVE-2026-40998](https://cve.now/CVE-2026-40998.md): Jaxp13 XPath XXE via StreamSource and SAXSource (CVSS 8.2, Spring Web Services · org.springframework.ws:spring-xml)
- [CVE-2026-40997](https://cve.now/CVE-2026-40997.md): SOAP security faults leak Spring Security account state (CVSS 5.3, Spring Web Services · org.springframework.ws:spring-ws-secu…)
- [CVE-2026-40996](https://cve.now/CVE-2026-40996.md): Inbound WS-Security allows RSA PKCS#1 v1.5 key transport by default (CVSS 4.8, Spring Web Services · org.springframework.ws:spring-ws-secu…)
- [CVE-2026-40995](https://cve.now/CVE-2026-40995.md): X.509 authentication bypasses Spring Security account checks (CVSS 5.4, Spring Web Services · org.springframework.ws:spring-ws-secu…)
- [CVE-2026-40994](https://cve.now/CVE-2026-40994.md): Wss4jSecurityInterceptor disables WS-I BSP validation by default (CVSS 8.2, Spring Web Services · org.springframework.ws:spring-ws-secu…)
- [CVE-2026-40992](https://cve.now/CVE-2026-40992.md): Mail Auto-Configuration Does Not Enable SSL Hostname Verification (CVSS 5.0, Spring Boot · org.springframework.boot:spring-boot-starter-…)
- [CVE-2026-40987](https://cve.now/CVE-2026-40987.md): Remote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalization (CVSS 7.1, Spring Integration · org.springframework.integration:spring…)
- [CVE-2026-40986](https://cve.now/CVE-2026-40986.md): Spring Web Flow JS RemotingHandler renders non-HTML Response as HTML (CVSS 4.8, Spring Web Flow · org.springframework.webflow:spring-webflow)
- [CVE-2026-40985](https://cve.now/CVE-2026-40985.md): Data Binding Vulnerability in Spring Web Flow with Unified EL Parser (CVSS 6.4, Spring Web Flow · org.springframework.webflow:spring-webflow)
- [CVE-2026-35273](https://cve.now/CVE-2026-35273.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). (CVSS 9.8, KEV, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-2827](https://cve.now/CVE-2026-2827.md): Open User Map PRO \<= 1.4.31 - Unauthenticated Stored Cross-Site Scripting via 'oum\_location\_notification' (CVSS 4.7, 100plugins Open User Map PRO)
- [CVE-2026-38581](https://cve.now/CVE-2026-38581.md): SQL Injection vulnerability in damasac thaipalliative\_lte through version 3.0 allows remote attackers to execute arbitrary SQL commands via (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-06-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.