CVEs published June 19, 2026
194 CVEs were published on June 19, 2026: 22 critical, 111 high.
- Published
- 194
- Critical
- 22
- High
- 111
- Medium
- 52
- Low
- 9
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 58
Most affected products
- Apache Software Foundation Apache APISIX
- 12
- NI grpc-device · NI InstrumentStudio
- 7
- Cap-go capgo
- 4
- Microchip GridTime
- 4
- pontedilana php-weasyprint · pontedilana/php-weasyprint
- 4
- JetBrains Hub
- 3
- Linux
- 3
- Red Hat Enterprise Linux AI 3.3 for RHEL · Red Hat Enter… +6
- 3
- sentriz gonic · go.senan.xyz/gonic
- 3
- strukturag libde265
- 3
Critical 22
- CVE-2026-11551Branda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeoverwpmudev Branda – White Label & Branding, Free Login Page Cu…
- CVE-2026-56081Cap-go - Account Lockout via 2FA Misconfiguration on Unverified EmailCap-go capgo
- CVE-2026-56073Cap-go - OTP Bypass via Response Manipulation in Email VerificationCap-go capgo
- CVE-2026-48582Microsoft Exchange Online Elevation of Privilege VulnerabilityMicrosoft Exchange Online
- CVE-2026-48584Microsoft Azure Synapse Elevation of Privilege VulnerabilityMicrosoft Azure Synapse
- CVE-2026-45480Azure Active Directory Elevation of Privilege VulnerabilityMicrosoft Azure Active Directory
- CVE-2026-48772ProxySQL: PROXY-Protocol-v1 UNKNOWN parses spoofed source IP, bypassing mysql_query_rules.client_addr ACLsysown proxysql
- CVE-2026-48773ProxySQL pre-auth heap overflow in MySQL and PostgreSQL first-packet handlingsysown proxysql
- CVE-2026-9142Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not presentNI grpc-device · NI InstrumentStudio
- CVE-2026-48137Untrusted pointer dereference in NI grpc-device sideband streaming APINI grpc-device · NI InstrumentStudio
- CVE-2026-44939Command injection through unsanitized YAML parameter in RancherSUSE Rancher · github.com/rancher/rancher
- CVE-2026-50242In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via diJetBrains Hub
- CVE-2026-56142In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaJetBrains Hub
- CVE-2026-56141In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictJetBrains Hub
- CVE-2026-54414FileRise shared-folder upload path traversal allows arbitrary file write and admin takeovererror311 FileRise
- CVE-2026-7515BetterDocs Pro <= 3.8.0 - Unauthenticated Local File Inclusion via doc_styleBetterDocs Pro
- CVE-2026-8713Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry Valuethemefusion Avada (Fusion) Builder
- CVE-2025-62821Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving t
- CVE-2026-51843Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter.
- CVE-2026-51844Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the cloneType parameter.
- CVE-2026-51845Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter.
- CVE-2026-51846In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can le
High 111
- CVE-2026-56082Capgo - Unauthenticated Cross-Tenant Billing Log Tampering via public.record_build_time RPCCap-go capgo
- CVE-2026-56079Capgo - Cross-Tenant Authorization Bypass via PostgREST Webhook AccessCapgo
- CVE-2026-47645Microsoft 365 Copilot's Business Chat Elevation of Privilege VulnerabilityMicrosoft 365 Copilot
- CVE-2026-32208Microsoft Entra ID Spoofing VulnerabilityMicrosoft Edge
- CVE-2026-50559Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilitiesquarkusio quarkus · io.quarkus:quarkus-vertx-http
- CVE-2026-49346libde265 has a heap buffer overflow in de265_image_get_buffer via SPS dimension integer overflowstrukturag libde265
- CVE-2026-49295libde265 has an out-of-bounds write in process_reference_picture_set via predicted short-term RPSstrukturag libde265
- CVE-2026-48787gin-vue-admin vulnerable to RCEflipped-aurora gin-vue-admin
- CVE-2026-48089DevGuard has improper authorization on public assetsl3montree-dev devguard · github.com/l3montree-dev/devguard
- CVE-2026-48774ProxySQL MCP run_sql_readonly executes side-effecting MySQL multi-statements despite read-only contractsysown proxysql
- CVE-2026-49344Mercator has a Personal Identifiable Information Leak from Query Executor featuresourcentis mercator
- CVE-2026-48715radvdump's Route Information Option Parser has a Stack Buffer Overflowradvd-project radvdump
- CVE-2026-49340gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the hostsentriz gonic · go.senan.xyz/gonic
- CVE-2026-49338Subsonic API: any authenticated user can delete or read any other user's playlist (IDOR)sentriz gonic · go.senan.xyz/gonic
- CVE-2026-49339Path traversal in getPlaylist/deletePlaylist bypasses ownership check: any authenticated user can read or delete any other user's playlistsentriz gonic · go.senan.xyz/gonic
- CVE-2026-49293CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literalssunnyadn js-toml · js-toml
- CVE-2026-49291mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/calldoobidoo mcp-memory-service · mcp-memory-service
- CVE-2023-54357Joomla com_booking 2.4.9 Information Disclosure via Account EnumerationArtio Joomla! com_booking component
- CVE-2019-25762Joomla! Component JoomProject 1.1.3.2 Information DisclosureJoomboost JoomProject
- CVE-2019-25761Joomla! Component JoomCRM 1.1.1 SQL Injection via deal_idJoomboost JoomCRM
- CVE-2019-25759Joomla! Component vBizz 1.0.7 SQL InjectionWdmtech vBizz
- CVE-2026-49287Statamic CMS vulnerable to unsafe method invocation via collection sorting allows data destructionstatamic cms · statamic/cms
- CVE-2019-25758Joomla! Component vBizz 1.0.7 Remote Code ExecutionWdmtech vBizz
- CVE-2019-25757Joomla vWishlist 1.0.1 SQL Injection via vproductid ParameterWdmtech vWishlist
- CVE-2026-49290Slopsmith has path traversal in archive extractors that allows arbitrary file write → potential RCEbyrongamatos slopsmith
- CVE-2019-25756Joomla! Component vAccount 2.0.2 SQL Injection via vaccount-dashboardWdmtech vAccount
- CVE-2019-25755Joomla vReview 1.9.11 SQL Injection via editReviewWdmtech vReview
- CVE-2019-25754Joomla vRestaurant 1.9.4 SQL Injection via menu-listing-layoutWdmtech vRestaurant
- CVE-2019-25753Joomla! Component VMap 1.9.6 SQL Injection via loadmarkerWdmtech VMap
- CVE-2019-25752Joomla! Component J-BusinessDirectory 4.9.7 SQL InjectionCmsjunkie J-BusinessDirectory
- CVE-2019-25751Joomla J-ClassifiedsManager 3.0.5 SQL InjectionCmsjunkie ClassifiedsManager
- CVE-2019-25750Joomla J-MultipleHotelReservation 6.0.7 SQL InjectionCmsjunkie MultipleHotelReservation
- CVE-2019-25749Joomla J-CruisePortal 6.0.4 SQL Injection via cruisesCmsjunkie J-CruisePortal
- CVE-2026-49286PhpWeasyPrint vulnerable to PHAR deserialization via output filename (CVE-2023-28115 case-insensitive bypass)pontedilana php-weasyprint · pontedilana/php-weasyprint
- CVE-2019-25748Joomla JHotelReservation 6.0.7 SQL Injection via search-hotelsCmsjunkie JHotelReservation
- CVE-2026-49260PhpWeasyPrint: shell command injection via configurable WeasyPrint binary path due to inverted is_executable() guard (mirror of KnpLabs/snappy GHSA-vpr4-p6fq-85jc)pontedilana php-weasyprint · pontedilana/php-weasyprint
- CVE-2017-20282Joomla! Component jCart for OpenCart 2.0 SQL InjectionSoft-Php jCart for OpenCart
- CVE-2017-20281Joomla! Component Extra Search 2.2.8 SQL InjectionJoomlaboat Extra Search
- CVE-2017-20280Joomla Component Myportfolio 3.0.2 SQL Injection via pid ParameterMyportfolio
- CVE-2017-20279Joomla Payage 2.05 SQL Injection via aid ParameterExtensions Joomla Payage
- CVE-2017-20278Joomla JoomRecipe 1.0.3 SQL Injection via category parameterJoomboost JoomRecipe
- CVE-2017-20277Joomla JoomRecipe 1.0.4 Component Blind SQL Injection via search_authorJoomboost Joomla JoomRecipe
- CVE-2017-20276Joomla! Component SIMGenealogy 2.1.5 SQL InjectionSimbunch SIMGenealogy
- CVE-2017-20275Joomla! Component PHP-Bridge 1.2.3 SQL Injection via id ParameterHenryschorradt Bridge
- CVE-2017-20274Joomla LMS King Professional 3.2.4.0 SQL Injection via learningpathKing-products LMS King Professional
- CVE-2026-56211Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesRed Hat Enterprise Linux AI 3.3 for RHEL · Red Hat Enter… +6
- CVE-2026-56210Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idRed Hat Enterprise Linux AI 3.3 for RHEL · Red Hat Enter… +6
- CVE-2026-56208Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modeRed Hat Enterprise Linux 10.0 Extended Update Support ·… +4
- CVE-2026-56209Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackRed Hat Enterprise Linux AI 3.3 for RHEL · Red Hat Enter… +6
- CVE-2017-20273Joomla Event Registration Pro Calendar 4.1.3 SQL InjectionJoomlashowroom Event Registration Pro Calendar
- CVE-2017-20272Joomla Ultimate Property Listing 1.0.2 SQL Injection via sf_selectuser_idFaboba Ultimate Property Listing
- CVE-2026-3195Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)qemu · Red Hat Enterprise Linux +1
- CVE-2017-20271Joomla StreetGuessr Game 1.1.8 SQL Injection via catidNordmograph StreetGuessr Game
- CVE-2017-20270Joomla! Component Twitch Tv 1.1 SQL InjectionRaindropsinfotech Twitch Tv
- CVE-2017-20269Joomla! Component KissGallery 1.0.0 SQL InjectionTerrywcarter KissGallery
- CVE-2017-20268Joomla! Component Zap Calendar Lite 4.3.4 SQL InjectionZcontent Zap Calendar Lite
- CVE-2017-20267Joomla! Component Calendar Planner 1.0.1 SQL InjectionJoomlathat Calendar Planner
- CVE-2017-20266Joomla SP Movie Database 1.3 SQL Injection via searchwordJoomshaper SP Movie Database
- CVE-2017-20265Joomla! Component Flip Wall 8.0 SQL InjectionPulseextensions Flip Wall
- CVE-2017-20264Joomla! Component Sponsor Wall 8.0 SQL InjectionPulseextensions Sponsor Wall
- CVE-2017-20263Joomla! FocalPoint Pro Free 1.2.3 SQL Injection via locationFocalpointx FocalPoint Pro / Free
- CVE-2017-20262Joomla! Component Ajax Quiz 1.8 SQL InjectionWebkul Ajax Quiz
- CVE-2017-20261Joomla! Component Bargain Product VM3 1.0 SQL InjectionWeborange Bargain Product VM3
- CVE-2017-20260Joomla! Component Price Alert 3.0.2 SQL InjectionWeborange Price Alert
- CVE-2017-20259Joomla OSDownloads 1.7.4 SQL Injection via item viewJoomlashack OSDownloads
- CVE-2017-20258Joomla! Component RPC Responsive Portfolio 1.6.1 SQL InjectionExtro RPC
- CVE-2017-20257Joomla! Component Quiz Deluxe 3.7.4 SQL InjectionJoomplace Quiz Deluxe
- CVE-2017-20256Joomla Survey Force Deluxe 3.2.4 SQL Injection via invite ParameterJoomplace Survey Force Deluxe
- CVE-2017-20255Joomla! Component JB Visa 1.0 SQL Injection via visatypeJoombooking JB Visa
- CVE-2017-20254Joomla! Component User Bench 1.0 SQL Injection via useridGegabyte User Bench
- CVE-2017-20253Joomla! Component My Projects 2.0 SQL InjectionGegabyte My Projects
- CVE-2017-20252Joomla NextGen Editor 2.1.0 SQL Injection via plname Parameternextgeneditor NextGen Editor
- CVE-2026-52910bpf: Free reuseport cBPF prog after RCU grace period.Linux
- CVE-2026-52909ip6_vti: set netns_immutable on the fallback device.Linux
- CVE-2025-71326AVAST Antivirus 25.11 Unquoted Service Path Privilege EscalationAVAST Antivirus
- CVE-2023-54353Chromacam 4.0.3.0 Unquoted Service Path Privilege EscalationPersonifyinc Chromacam
- CVE-2022-50971Malwarebytes 4.5 Unquoted Service Path Privilege EscalationMalwarebytes
- CVE-2021-47985Brother SAPSprint 7.60 Unquoted Service Path Privilege EscalationBrother SAPSprint
- CVE-2020-37254Wondershare PDFelement 5.2.9 Privilege Escalation via Unquoted Service PathWondershare PDFelement
- CVE-2020-37253Winstep 18.06.0096 Unquoted Service Path Privilege EscalationWinstep
- CVE-2020-37252Realtek Audio Service 1.0.0.55 Unquoted Service Path Privilege EscalationRealtek Audio Service
- CVE-2020-37251RealTimes Desktop Service 18.1.4 Unquoted Service Path Privilege EscalationRealTimes Desktop Service
- CVE-2020-37250TFTP Broadband 4.3.0.1465 Unquoted Service Path Privilege EscalationWeird-Solutions TFTP Broadband
- CVE-2019-25747Network Inventory Advisor 5.0.26.0 Unquoted Service Path Privilege EscalationNetwork-Inventory-Advisor Network Inventory Advisor
- CVE-2016-20095Matrix42 Remote Control Host 3.20.0031 Unquoted Path Privilege EscalationMatrix42 Remote Control Host
- CVE-2016-20094AnyDesk 2.5.0 Unquoted Service Path Elevation of PrivilegeAnyDesk
- CVE-2016-20093Wise Care 365 4.27 and Wise Disk Cleaner 9.29 Unquoted Service Path Privilege EscalationWisecleaner Wise Care · Wisecleaner Wise Disk Cleaner
- CVE-2016-20092NetDrive 2.6.12 Unquoted Service Path Elevation of PrivilegeNetDrive
- CVE-2016-20091Windows Firewall Control 4.8.6.0 Unquoted Service Path Privilege EscalationBinisoft Windows Firewall Control
- CVE-2016-20090Comodo Dragon Browser 52.15.25.663 Privilege Escalation via Unquoted Service PathComodo Dragon Browser
- CVE-2016-20089Iperius Remote 1.7.0 Unquoted Service Path Elevation of PrivilegeIperiusremote Iperius Remote
- CVE-2016-20088Comodo Chromodo Browser 52.15.25.664 Unquoted Service Path Privilege EscalationComodo Chromodo Browser
- CVE-2016-20087Fortitude HTTP 1.0.4.0 Unquoted Service Path Elevation of PrivilegeNetworkdls Fortitude HTTP
- CVE-2016-20086Vembu StoreGrid 4.0 Unquoted Service Path Privilege EscalationVembu StoreGrid
- CVE-2016-20085Realtek High Definition Audio Driver 6.0.1.6730 Privilege EscalationRealtek High Definition Audio Driver
- CVE-2026-52908RDMA: During rereg_mr ensure that REREG_ACCESS is compatibleLinux
- CVE-2026-12104Authenticated OS Command Injection in BondixSIMA Bondix Server
- CVE-2026-48139NULL pointer dereference vulnerability in NI grpc-device data moniker serviceNI grpc-device · NI InstrumentStudio
- CVE-2026-48138Out-of-bounds read vulnerability in the NI grpc-device streaming APINI grpc-device · NI InstrumentStudio
- CVE-2026-4027FlexNet Manager Suite Attachment File DisclosureFlexera FlexNet Manager Suite
- CVE-2026-49357Streamable HTTP mode exposes LINE Desktop read/send tools without MCP authenticationdtwang line-desktop-mcp · line-desktop-mcp
- CVE-2026-39999Apache APISIX: JWT Algorithm Confusion allows authentication bypassApache Software Foundation Apache APISIX
- CVE-2026-4026FlexNet Manager Suite Privilege Escalation VulnerabilityFlexera FlexNet Manager Suite
- CVE-2026-53915In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configurationJetBrains GoLand
- CVE-2026-41156GPU DDK - kernel<->fw CCB contains SYNC_PRIMITIVE_BLOCK firmware address without holding referenceImagination Technologies Graphics DDK
- CVE-2026-34192GPU DDK - _MMU_AllocLevel error recovery paths leave dangling page table entriesImagination Technologies Graphics DDK
- CVE-2026-11576The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanEclipse Foundation Eclipse ThreadX - NetX Duo
- CVE-2026-46461Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerability.Dell Server Hardware Manager
- CVE-2025-7737DoS Vulnerability in 10G iSCSI Interface of Hitachi Virtual Storage PlatformHitachi Virtual Storage Platform E990, E1090, E1090H · H… +4
- CVE-2026-8806Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series FX5-ENET/IP Ethernet moduleMitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet…
- CVE-2026-8805Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series EtherNet/IP moduleMitsubishi Electric MELSEC iQ-F Series FX5-EIP EtherNet/IP…
Medium, low and unrated 61
- CVE-2026-56080Cap-go - Authentication Logic Flaw in Enforce Password PolicyCap-go capgo
- CVE-2026-50519Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass VulnerabilityMicrosoft GitHub Copilot Chat
- CVE-2026-42895Microsoft Copilot Tampering VulnerabilityMicrosoft 365 Copilot
- CVE-2026-48794Authelia has an Edge Case Access Control Rule Mismatchauthelia · github.com/authelia/authelia +1
- CVE-2026-47203Authelia Missing Username Canonicalization in Basic Auth (LDAP)authelia · github.com/authelia/authelia/v4 +1
- CVE-2026-48129Kestra task inputFiles accepts traversal filenames for worker file writeskestra-io kestra
- CVE-2026-49337libde265 has an unbounded memory leak via orphaned slice headers in `read_slice_NAL`strukturag libde265
- CVE-2026-49345Mercator CVE Configuration Vulnerable to Server-Side Request Forgery (SSRF)sourcentis mercator
- CVE-2026-49342YARD static cache reads raw traversal paths before router sanitizationlsegal yard · yard
- CVE-2026-27878Tempo TraceQL query with exemplar hint could result in unbounded memory usageGrafana Enterprise Traces · Grafana Tempo +1
- CVE-2026-12726Awx: automation-controller: awx: github webhook second-order ssrf via unvalidated statuses_url exfiltrates pat credentialRed Hat Ansible Automation Platform
- CVE-2026-12238WP Go Maps <= 10.1.01 - Unauthenticated Arbitrary Record Creationwpgmaps WP Go Maps – Google Map, OpenStreetMap, Leaflet Map
- CVE-2026-49336@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdaptermicrosoft kiota-typescript · @microsoft/kiota-http-fetchlib…
- CVE-2026-49288Statamic CMS missing authorization on Control Panel fieldtype endpoints allows disclosure of restricted resourcesstatamic cms · statamic/cms
- CVE-2019-25760Joomla! Component Easy Shop 1.2.3 Local File InclusionJoomtech Easy Shop
- CVE-2026-49271libheif: Wrapped icef compressed-unit range check causes out-of-bounds read in uncompressed HEIF decoderstrukturag libheif
- CVE-2026-49359PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment optionpontedilana php-weasyprint · pontedilana/php-weasyprint
- CVE-2026-3196Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocationqemu · Red Hat Enterprise Linux +1
- CVE-2026-12620Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time ServerMicrochip GridTime
- CVE-2026-12621Cross-Site Scripting (XSS) Vulnerability in Password Reset Redirect in GridTime™ 3000 GNSS Time ServerMicrochip GridTime
- CVE-2026-12622Open Redirect Vulnerability in Password Reset Submission in GridTime™ 3000 GNSS Time ServerMicrochip GridTime
- CVE-2026-12619GridTime™ 3000 GNSS Time Server CSRF to XSSMicrochip GridTime
- CVE-2026-49358PhpWeasyPrint vulnerable to arbitrary file deletion at shutdown via public $temporaryFilespontedilana php-weasyprint · pontedilana/php-weasyprint
- CVE-2026-21768HCL Verse for Android is susceptible to an injection vulnerabilityHCLSoftware Verse for Android
- CVE-2026-9143Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGenNI grpc-device · NI InstrumentStudio
- CVE-2026-48141Memory leak in NI grpc-device BeginSidebandStreamNI grpc-device · NI InstrumentStudio
- CVE-2026-48140Unchecked enum cast vulnerability in NI grpc-device in BeginSidebandStreamNI grpc-device · NI InstrumentStudio
- CVE-2026-49872Apache APISIX: Improper authentication in cas-auth pluginApache Software Foundation Apache APISIX
- CVE-2026-49871Apache APISIX: cas-auth login CSRF / session injection issueApache Software Foundation Apache APISIX
- CVE-2026-47341Apache APISIX: Session replay issue in hmac-authApache Software Foundation Apache APISIX
- CVE-2026-48895Apache APISIX: Cas-auth Host header influence on CAS service URLApache Software Foundation Apache APISIX
- CVE-2026-49231Apache APISIX: Identity spoofing issue in APISIX opa pluginApache Software Foundation Apache APISIX
- CVE-2026-49230Apache APISIX: Authentication bypass in jwe-decryptApache Software Foundation Apache APISIX
- CVE-2026-44915Apache APISIX: Cas-auth plugin open redirect via unsanitized cookie valueApache Software Foundation Apache APISIX
- CVE-2026-44087Apache APISIX: Openid-connect plugin Identity Header SpoofingApache Software Foundation Apache APISIX
- CVE-2026-47339Apache APISIX: authz-casdoor incorrect session sharingApache Software Foundation Apache APISIX
- CVE-2026-44046Apache APISIX: wolf-rbac plugin Identity SpoofingApache Software Foundation Apache APISIX
- CVE-2026-39998Apache APISIX: Identity Injection via forward-auth Plugin Missing Header CleanupApache Software Foundation Apache APISIX
- CVE-2026-12706Ffmpeg: ffmpeg: heap use-after-free read in rasc decoder decode_move()Red Hat Enterprise Linux AI (RHEL AI) · Red Hat OpenShift AI
- CVE-2026-11941Use-after-free in connection ID iterator and FFI functionsCloudflare Quiche · quiche
- CVE-2026-8296In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting Payload via artifacts.Octopus Deploy Octopus Server
- CVE-2026-56138Authenticated Path Traversal in AIL framework /objects/item/diff Allows Reading Gzip-Compressed Filesail-project ail-framework
- CVE-2026-67982Download Connector for 2DL Hosted Checkout <= 0.1.5 - Missing Authorization to Unauthenticated Sensitive Customer Subscription Data Exposure via 'ToDownload_email' Parameter2Download Connector for 2DL Hosted Checkout
- CVE-2026-3640STRABL <= 4.5 - Unauthenticated Arbitrary Webhook Creation via REST API Endpointstrablengineering STRABL – A checkout solution
- CVE-2026-9822WP Hotel Booking < 2.3.1 - Subscriber+ Missing Authorization in Multiple AJAX HandlersWP Hotel Booking
- CVE-2026-12644Versions of the package ts-deepmerge before 8.0.0 are vulnerable to Uncaught Exception due to the improper handling of built-in Object.protots-deepmerge
- CVE-2026-10720MicroCeph path traversal issue in the remote-import APICanonical Microceph · github.com/canonical/microceph/microc…
- CVE-2026-12430Blocksy Companion <= 2.1.45 - Authenticated (Editor+) Stored Cross-Site Scripting via 'product_description' Parametercreativethemeshq Blocksy Companion
- CVE-2026-10034WP DSGVO Tools (GDPR) <= 3.1.39 - Missing Authorization to Unauthenticated Sensitive Personal Data Disclosure via subject-access-request AJAX Endpoint (process_now/is_ajax Parameters)legalweb WP DSGVO Tools
- CVE-2026-8118Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Sourcewproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2026-11989Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mappingbitpressadmin Bit integrations – Form Integration, Webhook,…
- CVE-2026-4328Advanced Import: One-Click Demo Import for WordPress <= 1.4.6 - Authenticated (Author+) Server-Side Request Forgery via 'demo_file' Parameteraddonspress Advanced Import
- CVE-2026-9013Bogo <= 3.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via REST APIrocklobsterinc Bogo
- CVE-2026-12157BetterDocs <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'blockId' Block Attributewpdevteam BetterDocs – AI Documentation, Knowledge Base, D…
- CVE-2026-7547Woosa <= 2.0.5 - Authenticated (Administrator+) Arbitrary File Read via 'log_file' Parameterteamwsa Woosa – Marktplaats for WooCommerce
- CVE-2026-1856Appointment Booking Calendar <= 1.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Booking Field LabelCreavi Appointment Booking Calendar
- CVE-2026-11752A vulnerability has been identified in armeria-xds versions 1.38.0 through 1.39.0, where DataSourceStream in the xDS module can resolve contLY Armeria · com.linecorp.armeria:armeria-xds
- CVE-2026-10779Classified Listing <= 5.4.2 - Missing Authorization to Authenticated (Subscriber+) Feature Modification via Multiple AJAX Handlers ('listingId'/'id' Parameters)techlabpro1 Classified Listing – AI-Powered Classified ads…
- CVE-2026-56132In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mislibexpat project libexpat
- CVE-2026-56131libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation.libexpat project libexpat
- CVE-2026-11775User Admin Simplifier <= 3.0.0 - Cross-Site Request Forgeryadamsilverstein User Admin Simplifier