# CVEs published 2026-06-14

18 CVEs were published on June 14, 2026: 1 critical, 11 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-12197](https://cve.now/CVE-2026-12197.md): Ruijie EG105G-P JSON-RPC Diagnose Endpoint diagnose nslookup command injection (CVSS 8.6, Ruijie EG105G-P)
- [CVE-2026-12193](https://cve.now/CVE-2026-12193.md): VS Revo RevoUninstaller IOCTL RevoDetector.sys IOCtl\_Handler heap-based overflow (CVSS 8.5, VS Revo RevoUninstaller)
- [CVE-2026-12192](https://cve.now/CVE-2026-12192.md): GALAYOU Y4 Web Server buffer overflow (CVSS 8.7, GALAYOU Y4)
- [CVE-2026-12191](https://cve.now/CVE-2026-12191.md): Comma AI Openpilot Pickle modeld.py pickle.loads deserialization (CVSS 8.5, Comma AI Openpilot)
- [CVE-2026-12190](https://cve.now/CVE-2026-12190.md): Genspark AI Workspace App ai.mainfunc.genspark improper authorization in handler for custom url scheme (CVSS 4.8, Genspark AI Workspace App)
- [CVE-2026-12189](https://cve.now/CVE-2026-12189.md): Moovit Bus & Public Transit App com.tranzmate improper authorization in handler for custom url scheme (CVSS 4.8, Moovit Bus & Public Transit App)
- [CVE-2026-12188](https://cve.now/CVE-2026-12188.md): Grit42 Grit GritEntityController grit\_entity\_controller.rb sql injection (CVSS 5.3, Grit42 Grit)
- [CVE-2026-12187](https://cve.now/CVE-2026-12187.md): GL.iNet GL-MT3000 Online Firmware Upgrade one\_click\_upgrade command injection (CVSS 8.7, GL.iNet GL-MT3000)
- [CVE-2026-12186](https://cve.now/CVE-2026-12186.md): GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace\_country command injection (CVSS 8.7, GL.iNet GL-MT3000)
- [CVE-2026-54413](https://cve.now/CVE-2026-54413.md): iso14229 Integer Underflow and Out-of-Bounds Read in Handle\_0x27\_SecurityAccess() (CVSS 7.8, driftregion iso14229)
- [CVE-2026-54412](https://cve.now/CVE-2026-54412.md): MQTT-C Heap Out-of-Bounds Read and Integer Underflow in mqtt\_unpack\_publish\_response() (CVSS 7.8, LiamBindle MQTT-C)
- [CVE-2026-54411](https://cve.now/CVE-2026-54411.md): Linux-PAM pam\_userdb Observable Timing Discrepancy in Plaintext Password Comparison (CVSS 6.9, Linux-PAM)
- [CVE-2026-54410](https://cve.now/CVE-2026-54410.md): nanoMODBUS Off-by-One Buffer Overflow in recv\_msg\_header() via Crafted MBAP Length Field (CVSS 7.8, debevv nanoMODBUS)
- [CVE-2026-11527](https://cve.now/CVE-2026-11527.md): Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in \_make\_filehandle (CVSS 8.6, SHLOMIF Config::IniFiles)
- [CVE-2026-11526](https://cve.now/CVE-2026-11526.md): GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in \_make\_filehandle (CVSS 9.8, RURBAN GD)
- [CVE-2025-15546](https://cve.now/CVE-2025-15546.md): Iptanus File Upload \< 5.1.7 - File Overwrite via Race Condition (CVSS 5.4, Iptanus File Upload)
- [CVE-2026-54421](https://cve.now/CVE-2026-54421.md): In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return (CVSS 6.8, OpenStack Ironic · ironic)
- [CVE-2026-54420](https://cve.now/CVE-2026-54420.md): LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP (CVSS 8.5, KEV, LiteSpeed Technologies cPanel Plugin)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-06-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.