# CVEs published 2026-06-29

235 CVEs were published on June 29, 2026: 12 critical, 75 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-10648](https://cve.now/CVE-2026-10648.md): NULL-pointer dereference in MCUmgr serial/console SMP transport on buffer-pool exhaustion (CVSS 6.2, zephyrproject zephyr)
- [CVE-2026-8023](https://cve.now/CVE-2026-8023.md): Path traversal in Zephyr HTTP server static-filesystem resource handler allows unauthenticated remote arbitrary file read (CVSS 7.5, zephyrproject zephyr)
- [CVE-2026-7656](https://cve.now/CVE-2026-7656.md): Broken IPv6 Neighbor Discovery input validation allows spoofed RA/NS/NA acceptance in Zephyr net stack (CVSS 8.1, zephyrproject zephyr)
- [CVE-2026-34592](https://cve.now/CVE-2026-34592.md): Coolify: Cross-Team IDOR via Unscoped Server and Project Lookups Exposes SSH Keys and Infrastructure (CVSS 7.7, coollabsio coolify)
- [CVE-2026-10647](https://cve.now/CVE-2026-10647.md): Deadlock denial of service in USB CDC-NCM device class on TX enqueue failure (CVSS 5.3, zephyrproject zephyr)
- [CVE-2026-57997](https://cve.now/CVE-2026-57997.md): Strapi users-permissions - JWT Algorithm Confusion via Missing Algorithm Configuration (CVSS 6.3, strapi)
- [CVE-2026-55957](https://cve.now/CVE-2026-55957.md): Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind (CVSS 7.3, Apache Software Foundation Apache Tomcat)
- [CVE-2026-55956](https://cve.now/CVE-2026-55956.md): Apache Tomcat: Security constraints for default servlet ignored method (CVSS 6.5, Apache Software Foundation Apache Tomcat)
- [CVE-2026-55955](https://cve.now/CVE-2026-55955.md): Apache Tomcat: EncryptInterceptor not protected against replay attacks (CVSS 6.5, Apache Software Foundation Apache Tomcat)
- [CVE-2026-55276](https://cve.now/CVE-2026-55276.md): Apache Tomcat: Logged effective web.xml is incomplete (CVSS 9.1, Apache Software Foundation Apache Tomcat)
- [CVE-2026-13758](https://cve.now/CVE-2026-13758.md): CryptX versions before 0.088\_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt\_done path (CVSS 3.7, MIK CryptX)
- [CVE-2026-53434](https://cve.now/CVE-2026-53434.md): Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector (CVSS 9.1, Apache Software Foundation Apache Tomcat · org.apache.tomca…)
- [CVE-2026-53404](https://cve.now/CVE-2026-53404.md): Apache Tomcat: Bad ornext processing in RewriteValve (CVSS 7.3, Apache Software Foundation Apache Tomcat)
- [CVE-2026-50229](https://cve.now/CVE-2026-50229.md): Apache Tomcat: XSS in number guess example (CVSS 6.1, Apache Software Foundation Apache Tomcat)
- [CVE-2026-34594](https://cve.now/CVE-2026-34594.md): Coolify: Authenticated Remote Code Execution via Command Injection in Destination Network Management (CVSS 8.8, coollabsio coolify)
- [CVE-2026-34597](https://cve.now/CVE-2026-34597.md): Coolify: Authenticated Host RCE (CVSS 8.8, coollabsio coolify)
- [CVE-2026-41896](https://cve.now/CVE-2026-41896.md): Coolify: Unauthenticated Deployment Trigger via Webhook HMAC Bypass with Null Secret (CVSS 7.5, coollabsio coolify)
- [CVE-2026-57498](https://cve.now/CVE-2026-57498.md): Coolify Cross-Team IDOR: Livewire Components Accept Unscoped server\_id and destination\_uuid — Deploy to Other Teams' Servers (CVSS 9.6, coollabsio coolify)
- [CVE-2026-13763](https://cve.now/CVE-2026-13763.md): HTTP/2 Stream Parser Confusion Body-Inspection Bypass in AWS Application Load Balancer with AWS WAF (CVSS 9.8, AWS Application Load Balancer)
- [CVE-2026-13762](https://cve.now/CVE-2026-13762.md): HTTP/2 Stream Parser Confusion Body-Inspection Bypass in Amazon CloudFront with AWS WAF (CVSS 9.8, AWS Amazon CloudFront)
- [CVE-2026-43700](https://cve.now/CVE-2026-43700.md): A cross-origin issue was addressed with improved tracking of security origins. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43716](https://cve.now/CVE-2026-43716.md): The issue was addressed with improved memory handling. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +1)
- [CVE-2026-43720](https://cve.now/CVE-2026-43720.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-39868](https://cve.now/CVE-2026-39868.md): This issue was addressed with improved input validation. (CVSS 9.1, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43721](https://cve.now/CVE-2026-43721.md): This issue was addressed through improved state management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-39872](https://cve.now/CVE-2026-39872.md): The issue was addressed with improved memory handling. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43717](https://cve.now/CVE-2026-43717.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2026-43740](https://cve.now/CVE-2026-43740.md): The issue was addressed with improved memory handling. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43701](https://cve.now/CVE-2026-43701.md): The issue was addressed with improved checks. (CVSS 7.1, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43663](https://cve.now/CVE-2026-43663.md): The issue was addressed with improved memory handling. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43726](https://cve.now/CVE-2026-43726.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43706](https://cve.now/CVE-2026-43706.md): A double free issue was addressed with improved memory management. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43746](https://cve.now/CVE-2026-43746.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +1)
- [CVE-2026-43707](https://cve.now/CVE-2026-43707.md): A memory corruption issue was addressed with improved memory handling. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43727](https://cve.now/CVE-2026-43727.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2026-43731](https://cve.now/CVE-2026-43731.md): A use-after-free issue was addressed with improved memory management. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43724](https://cve.now/CVE-2026-43724.md): The issue was addressed with improved input sanitization. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43732](https://cve.now/CVE-2026-43732.md): A path handling issue was addressed with improved validation. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43708](https://cve.now/CVE-2026-43708.md): The issue was addressed with improved input validation. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43712](https://cve.now/CVE-2026-43712.md): The issue was addressed with improved memory handling. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43745](https://cve.now/CVE-2026-43745.md): An out-of-bounds write issue was addressed with improved input validation. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43704](https://cve.now/CVE-2026-43704.md): A use-after-free issue was addressed with improved memory management. (CVSS 5.3, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43705](https://cve.now/CVE-2026-43705.md): A type confusion issue was addressed with improved checks. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43713](https://cve.now/CVE-2026-43713.md): A permissions issue was addressed with additional restrictions. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43709](https://cve.now/CVE-2026-43709.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43699](https://cve.now/CVE-2026-43699.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43676](https://cve.now/CVE-2026-43676.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2026-43725](https://cve.now/CVE-2026-43725.md): The issue was addressed with improved input validation. (CVSS 7.1, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43743](https://cve.now/CVE-2026-43743.md): A race condition was addressed with improved state handling. (CVSS 4.7, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2026-43722](https://cve.now/CVE-2026-43722.md): The issue was addressed with improved input sanitization. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-43734](https://cve.now/CVE-2026-43734.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43718](https://cve.now/CVE-2026-43718.md): A stack overflow was addressed with improved input validation. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-28979](https://cve.now/CVE-2026-28979.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43735](https://cve.now/CVE-2026-43735.md): The issue was addressed with improved checks. (CVSS 8.1, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43703](https://cve.now/CVE-2026-43703.md): The issue was addressed with improved memory handling. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2026-43742](https://cve.now/CVE-2026-43742.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-43715](https://cve.now/CVE-2026-43715.md): A use-after-free issue was addressed with improved memory management. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2026-56018](https://cve.now/CVE-2026-56018.md): JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth (CVSS 7.5, GTERMARS JavaScript::Minifier::XS)
- [CVE-2026-56017](https://cve.now/CVE-2026-56017.md): JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash (CVSS 7.5, GTERMARS JavaScript::Minifier::XS)
- [CVE-2026-13593](https://cve.now/CVE-2026-13593.md): CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away (CVSS 6.5, GTERMARS CSS::Minifier::XS)
- [CVE-2026-53426](https://cve.now/CVE-2026-53426.md): Atom-table exhaustion denial-of-service via JSON parse\_document in MDEx (CVSS 8.2, leandrocp mdex)
- [CVE-2026-54889](https://cve.now/CVE-2026-54889.md): Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS) (CVSS 5.1, leandrocp mdex)
- [CVE-2026-54888](https://cve.now/CVE-2026-54888.md): Uncontrolled recursion over deeply nested Markdown crashes the BEAM in mdex (CVSS 6.9, leandrocp mdex · leandrocp mdex\_native)
- [CVE-2026-53429](https://cve.now/CVE-2026-53429.md): Unbounded native memory leak in mdex escaped-tag rendering enables unauthenticated denial of service (CVSS 6.9, leandrocp mdex · leandrocp mdex\_native)
- [CVE-2026-53428](https://cve.now/CVE-2026-53428.md): Unbounded memory allocation in highlight\_lines range expansion in mdex (CVSS 6.9, leandrocp mdex · leandrocp mdex\_native)
- [CVE-2026-53427](https://cve.now/CVE-2026-53427.md): Cross-site scripting in MDEx via unescaped highlight\_lines\_class code-fence attribute (CVSS 2.3, leandrocp mdex · leandrocp mdex\_native)
- [CVE-2026-13757](https://cve.now/CVE-2026-13757.md): P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing (CVSS 6.2, Red Hat Enterprise Linux · Cert Manager support for Red… +6)
- [CVE-2026-58000](https://cve.now/CVE-2026-58000.md): luci-proto-openvpn - Command Injection via cl\_meta Parameter in generateKey (CVSS 8.7, openwrt luci-proto-openvpn)
- [CVE-2026-57999](https://cve.now/CVE-2026-57999.md): luci-app-tailscale-community - Command Injection via tailscale.do\_login RPC (CVSS 7.7, openwrt luci-app-tailscale-community)
- [CVE-2026-11720](https://cve.now/CVE-2026-11720.md): Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder (CVSS 9.3, MCP Toolbox for Databases · github.com/googleapis/mcp-toolb…)
- [CVE-2026-57960](https://cve.now/CVE-2026-57960.md): Hi.Events 1.9.0 - Unauthenticated Attendee PII Exposure via Check-in List short\_id (CVSS 8.3, HiEventsDev Hi.Events)
- [CVE-2026-57959](https://cve.now/CVE-2026-57959.md): Hi.Events 1.9.0 - Promo Code Max-Usage Bypass via Asynchronous Job Race Condition (CVSS 8.2, HiEventsDev Hi.Events)
- [CVE-2026-57958](https://cve.now/CVE-2026-57958.md): Mixpost 2.6.0 - Reflected XSS via OAuth Callback Error Parameter (CVSS 5.1, inovector mixpost)
- [CVE-2026-57957](https://cve.now/CVE-2026-57957.md): Papermark 0.22.0 - CORS Misconfiguration in Viewer Upload Endpoint (CVSS 2.3, papermark)
- [CVE-2026-57956](https://cve.now/CVE-2026-57956.md): SigNoz \< 0.133.0 - Cross-Organization Insecure Direct Object Reference in Alert Rules (CVSS 6.1, signoz)
- [CVE-2026-57955](https://cve.now/CVE-2026-57955.md): SigNoz 0.130.1 - SQL Injection in Alert History Endpoints via Rule ID Parameter (CVSS 8.3, signoz)
- [CVE-2026-57954](https://cve.now/CVE-2026-57954.md): Elide 7.1.17 - Permission Bypass in Sort Expression Validation (CVSS 5.3, yahoo elide)
- [CVE-2026-57953](https://cve.now/CVE-2026-57953.md): Mythic \< 3.4.0.60 - Unauthorized Automation Workflow Modification via eventing\_import\_automatic\_webhook Endpoint (CVSS 5.3, its-a-feature Mythic)
- [CVE-2026-57952](https://cve.now/CVE-2026-57952.md): Mythic \< 3.4.0.60 - Unauthorized C2 Profile Configuration Access via Unverified Payload UUID (CVSS 6.0, its-a-feature Mythic)
- [CVE-2026-57951](https://cve.now/CVE-2026-57951.md): Mythic \< 3.4.0.60 - Broken Permission Filter in payload\_build\_step Table (CVSS 7.1, its-a-feature Mythic)
- [CVE-2026-57950](https://cve.now/CVE-2026-57950.md): ruoyi-vue-pro - Incorrect Permission Namespace in ErpSaleOrderController (CVSS 8.6, Yunai ruoyi-vue-pro)
- [CVE-2026-57949](https://cve.now/CVE-2026-57949.md): ruoyi-vue-pro - Missing Authorization in CRM Follow-up Record GET Endpoint (CVSS 7.1, Yunai ruoyi-vue-pro)
- [CVE-2026-57948](https://cve.now/CVE-2026-57948.md): Pinpoint - Insecure Session Cookie Attributes in pinpointJwt (CVSS 7.6, pinpoint-apm pinpoint)
- [CVE-2026-57947](https://cve.now/CVE-2026-57947.md): Pinpoint - Server-Side Request Forgery via Alarm Webhook Registration (CVSS 6.3, pinpoint-apm pinpoint)
- [CVE-2026-57946](https://cve.now/CVE-2026-57946.md): Invidious - Private Playlist Disclosure via Unauthenticated RSS Feed Endpoint (CVSS 6.3, iv-org Invidious)
- [CVE-2026-57945](https://cve.now/CVE-2026-57945.md): PhotoPrism - Unauthorized User Profile Modification via PUT /api/v1/users/{uid} Endpoint (CVSS 5.3, photoprism)
- [CVE-2026-57943](https://cve.now/CVE-2026-57943.md): LibrePhotos \< 1.0.0 - Insecure Direct Object Reference in SetPhotosShared Endpoint (CVSS 6.0, librephotos)
- [CVE-2026-57942](https://cve.now/CVE-2026-57942.md): LibreTranslate - IP Spoofing via X-Forwarded-For Header (CVSS 6.9, LibreTranslate)
- [CVE-2026-56783](https://cve.now/CVE-2026-56783.md): Parseable \< 2.9.2 - Cleartext Credential Exposure in Notification Target API (CVSS 7.1, parseablehq parseable)
- [CVE-2026-56782](https://cve.now/CVE-2026-56782.md): Gorse - Unauthenticated Database Dump and Restore via /api/dump and /api/restore Endpoints (CVSS 9.3, gorse-io gorse)
- [CVE-2026-56781](https://cve.now/CVE-2026-56781.md): Teable - Unauthenticated Hidden Field Disclosure via Projection Parameter Override (CVSS 6.9, teableio teable)
- [CVE-2026-13592](https://cve.now/CVE-2026-13592.md): liftoff-sr CIPster EtherNet IP Message append out-of-bounds write (CVSS 6.9, liftoff-sr CIPster)
- [CVE-2026-56780](https://cve.now/CVE-2026-56780.md): Modoboa \< 2.9.0 - Insecure Direct Object Reference in Account Password Change API (CVSS 7.7, modoboa)
- [CVE-2026-56285](https://cve.now/CVE-2026-56285.md): Nitter - Server-Side Request Forgery in /video Media Proxy Endpoint (CVSS 7.7, zedeus nitter)
- [CVE-2026-13591](https://cve.now/CVE-2026-13591.md): DeepMyst Mysti Contact Tracking ChannelBridge.ts \_isTrackedConversation improper authorization (CVSS 2.3, DeepMyst Mysti)
- [CVE-2026-13590](https://cve.now/CVE-2026-13590.md): seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow (CVSS 6.3, seladb PcapPlusPlus)
- [CVE-2026-12912](https://cve.now/CVE-2026-12912.md): Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image (CVSS 7.3, Red Hat Enterprise Linux · Red Hat Hardened Images +1)
- [CVE-2026-13589](https://cve.now/CVE-2026-13589.md): seladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow (CVSS 6.3, seladb PcapPlusPlus)
- [CVE-2026-13752](https://cve.now/CVE-2026-13752.md): Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log Commands (CVSS 6.0, Snowflake CLI)
- [CVE-2026-13588](https://cve.now/CVE-2026-13588.md): seladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflow (CVSS 6.3, seladb PcapPlusPlus)
- [CVE-2026-13751](https://cve.now/CVE-2026-13751.md): Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load (CVSS 4.1, Snowflake CLI)
- [CVE-2026-13750](https://cve.now/CVE-2026-13750.md): Snowflake CLI Sensitive Credential Exposure Through Debug Logging (CVSS 5.5, Snowflake CLI)
- [CVE-2026-9105](https://cve.now/CVE-2026-9105.md): Authenticated Stack-Based Buffer Overflow in TP-Link TL-WR841N Web Interface (CVSS 6.8, TP-Link Systems TL-WR841N)
- [CVE-2026-13749](https://cve.now/CVE-2026-13749.md): Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection (CVSS 8.8, Snowflake CLI)
- [CVE-2026-13587](https://cve.now/CVE-2026-13587.md): seladb PcapPlusPlus LightPcapNg light\_pcapng.c parse\_by\_block\_type heap-based overflow (CVSS 6.3, seladb PcapPlusPlus)
- [CVE-2026-13748](https://cve.now/CVE-2026-13748.md): Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path Restriction (CVSS 6.3, Snowflake CLI)
- [CVE-2026-13746](https://cve.now/CVE-2026-13746.md): Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI Parameters (CVSS 3.6, Snowflake CLI)
- [CVE-2026-13583](https://cve.now/CVE-2026-13583.md): Edimax EW-7478APC POST Request formUSBFolder buffer overflow (CVSS 8.7, Edimax EW-7478APC)
- [CVE-2026-41052](https://cve.now/CVE-2026-41052.md): Rancher Privilege Escalation from Project Owner to Host (CVSS 9.4, SUSE Rancher · github.com/rancher/rancher)
- [CVE-2026-13744](https://cve.now/CVE-2026-13744.md): Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input (CVSS 8.3, Snowflake CLI)
- [CVE-2026-13582](https://cve.now/CVE-2026-13582.md): Edimax EW-7478APC POST Request formUSBAccount buffer overflow (CVSS 8.7, Edimax EW-7478APC)
- [CVE-2026-13437](https://cve.now/CVE-2026-13437.md): Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticat (CVSS 6.5, Devolutions PowerShell Universal)
- [CVE-2026-13742](https://cve.now/CVE-2026-13742.md): Lack of signature verification before execution of downloaded content (CVSS 5.9, Honeywell Technologies IQ MultiAccess)
- [CVE-2026-13581](https://cve.now/CVE-2026-13581.md): Edimax EW-7478APC POST Request formStaDrvSetup os command injection (CVSS 5.3, Edimax EW-7478APC)
- [CVE-2026-13580](https://cve.now/CVE-2026-13580.md): Edimax EW-7478APC POST Request formQoS buffer overflow (CVSS 8.7, Edimax EW-7478APC)
- [CVE-2026-13579](https://cve.now/CVE-2026-13579.md): itsourcecode Hospital Management System patientchangepassword.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-49049](https://cve.now/CVE-2026-49049.md): Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler (CVSS 7.5, joomshaper.com Helix3 extension for Joomla)
- [CVE-2026-56290](https://cve.now/CVE-2026-56290.md): Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension \< 3.6.0 (CVSS 10.0, KEV, JoomlaCK.fr Page Builder CK extension for Joomla)
- [CVE-2026-13578](https://cve.now/CVE-2026-13578.md): itsourcecode Hospital Management System patientdetail.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-55844](https://cve.now/CVE-2026-55844.md): Home Assistant: iOS Companion App ignores internal SSID allowlist for connections – possible leak of access token and sensor data (CVSS 7.5, home-assistant core)
- [CVE-2026-13574](https://cve.now/CVE-2026-13574.md): llvm llvm-project Bitcode File IntrinsicInst.cpp getBasePtr heap-based overflow (CVSS 4.8, llvm-project)
- [CVE-2026-55607](https://cve.now/CVE-2026-55607.md): Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution (CVSS 7.7, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2026-46406](https://cve.now/CVE-2026-46406.md): Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write (CVSS 4.4, anthropics claude-code · @anthropic-ai/claude-code)
- [CVE-2026-13573](https://cve.now/CVE-2026-13573.md): llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow (CVSS 4.8, llvm-project)
- [CVE-2026-56124](https://cve.now/CVE-2026-56124.md): phpUploader \< 2.0.2 Unauthenticated Database Exposure via index model (CVSS 8.7, shimosyan phpUploader)
- [CVE-2026-13572](https://cve.now/CVE-2026-13572.md): itsourcecode Hospital Management System insertbillingrecord.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-57341](https://cve.now/CVE-2026-57341.md): WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin \<= 2.9.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, Colissimo Officiel : Méthodes de livraison pour WooCommerce)
- [CVE-2026-57340](https://cve.now/CVE-2026-57340.md): WordPress Japanized For WooCommerce plugin \<= 2.9.12 - Broken Access Control vulnerability (CVSS 6.5, shohei.tanaka Japanized For WooCommerce)
- [CVE-2026-57339](https://cve.now/CVE-2026-57339.md): WordPress Business Directory plugin \<= 6.4.23 - Broken Access Control vulnerability (CVSS 6.6, Strategy11 Team Business Directory)
- [CVE-2026-57338](https://cve.now/CVE-2026-57338.md): WordPress ARForms plugin \<= 7.1.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Repute InfoSystems ARForms)
- [CVE-2026-57337](https://cve.now/CVE-2026-57337.md): WordPress Landing Page Builder plugin \<= 1.5.3.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, PluginOps Landing Page Builder)
- [CVE-2026-57336](https://cve.now/CVE-2026-57336.md): WordPress Jobify theme \<= 4.3.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Astoundify Jobify)
- [CVE-2026-57335](https://cve.now/CVE-2026-57335.md): WordPress Ads by WPQuads plugin \<= 3.0.3 - Broken Access Control vulnerability (CVSS 6.5, Ads WPQuads Ads by WPQuads)
- [CVE-2026-57334](https://cve.now/CVE-2026-57334.md): WordPress WP User Frontend plugin \<= 4.3.7 - Broken Access Control vulnerability (CVSS 6.5, weDevs WP User Frontend)
- [CVE-2026-57333](https://cve.now/CVE-2026-57333.md): WordPress Link Whisper Free plugin \<= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Spencer Haws Link Whisper Free)
- [CVE-2026-57332](https://cve.now/CVE-2026-57332.md): WordPress Wallet System for WooCommerce plugin \<= 2.7.6 - Broken Access Control vulnerability (CVSS 7.1, WP Swings Wallet System for WooCommerce)
- [CVE-2026-57331](https://cve.now/CVE-2026-57331.md): WordPress Paid Videochat Turnkey Site plugin \<= 7.4.8 - Arbitrary File Deletion vulnerability (CVSS 9.9, videowhisper Paid Videochat Turnkey Site)
- [CVE-2026-57330](https://cve.now/CVE-2026-57330.md): WordPress MasterStudy LMS plugin \<= 3.7.27 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Stylemix MasterStudy LMS)
- [CVE-2026-57329](https://cve.now/CVE-2026-57329.md): WordPress WooCommerce Designer Pro plugin \<= 1.9.34 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WooCommerce Designer Pro)
- [CVE-2026-57328](https://cve.now/CVE-2026-57328.md): WordPress Business Directory plugin \<= 6.4.22 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Strategy11 Team Business Directory)
- [CVE-2026-57327](https://cve.now/CVE-2026-57327.md): WordPress MainWP plugin \<= 6.1.1 - Broken Access Control vulnerability (CVSS 6.3, MainWP)
- [CVE-2026-57326](https://cve.now/CVE-2026-57326.md): WordPress Business Directory plugin \<= 6.4.22 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Strategy11 Team Business Directory)
- [CVE-2026-57320](https://cve.now/CVE-2026-57320.md): WordPress BEAR plugin \<= 1.1.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, RealMag777 BEAR)
- [CVE-2026-13571](https://cve.now/CVE-2026-13571.md): SourceCodester Simple Food Ordering System cart.php logic error (CVSS 6.9, SourceCodester Simple Food Ordering System)
- [CVE-2026-12616](https://cve.now/CVE-2026-12616.md): The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature verification disabled, then interpolates t (CVSS 6.9, Eclipse Foundation Eclipse CSI - PIA)
- [CVE-2026-13676](https://cve.now/CVE-2026-13676.md): fast-uri vulnerable to host confusion via failed IDN canonicalization (CVSS 7.5, fast-uri)
- [CVE-2026-11979](https://cve.now/CVE-2026-11979.md): Stack-Based Buffer Overflow in libxml2 (CVSS 1.8, xmlsoft libxml2)
- [CVE-2026-56457](https://cve.now/CVE-2026-56457.md): HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information (CVSS 4.3, HCLSoftware HCL DevOps Deploy / HCL Launch)
- [CVE-2026-13570](https://cve.now/CVE-2026-13570.md): SourceCodester Inventory Management System User Registration Endpoint users\_handler.php cross site scripting (CVSS 5.1, SourceCodester Inventory Management System)
- [CVE-2026-13569](https://cve.now/CVE-2026-13569.md): weng-xianhu EyouCMS API index.php sql injection (CVSS 5.1, weng-xianhu EyouCMS)
- [CVE-2026-13568](https://cve.now/CVE-2026-13568.md): SourceCodester Inventory Management System User Registration Endpoint users\_handler.php access control (CVSS 6.9, SourceCodester Inventory Management System)
- [CVE-2026-54371](https://cve.now/CVE-2026-54371.md): attr \< 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr (CVSS 8.4, attr project attr)
- [CVE-2026-54370](https://cve.now/CVE-2026-54370.md): acl \< 2.4.0 TOCTOU Symlink Traversal via getfacl/setfacl/chacl (CVSS 7.2, acl project acl)
- [CVE-2026-54369](https://cve.now/CVE-2026-54369.md): acl \< 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions (CVSS 8.4, acl project acl)
- [CVE-2026-12856](https://cve.now/CVE-2026-12856.md): Vscode-java: vscode: command injection vulnerability in the javadoc hover provider of the vscode-java extension (CVSS 8.8, Red Hat OpenShift Dev Spaces)
- [CVE-2026-40521](https://cve.now/CVE-2026-40521.md): FrontAccounting \< 2.4.20 Path Traversal RCE via attachment upload (CVSS 8.7, FrontAccounting)
- [CVE-2026-13567](https://cve.now/CVE-2026-13567.md): code-projects Online Music Site POST Request Feedback.php cross site scripting (CVSS 5.3, code-projects Online Music Site)
- [CVE-2026-40522](https://cve.now/CVE-2026-40522.md): FrontAccounting \< 2.4.20 SQL Injection via rep601.php (CVSS 7.1, FrontAccounting)
- [CVE-2026-40523](https://cve.now/CVE-2026-40523.md): FrontAccounting \< 2.4.20 SQL Injection via reporting/rep710.php (CVSS 7.2, FrontAccounting)
- [CVE-2026-40524](https://cve.now/CVE-2026-40524.md): FrontAccounting \< 2.4.20 SQL Injection via get\_gl\_transactions() (CVSS 7.2, FrontAccounting)
- [CVE-2026-13165](https://cve.now/CVE-2026-13165.md): Remote Code Execution in SzafirHost (CVSS 8.6, Krajowa Izba Rozliczeniowa SzafirHost)
- [CVE-2026-13566](https://cve.now/CVE-2026-13566.md): SourceCodester Class and Exam Timetabling System preview3.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-13565](https://cve.now/CVE-2026-13565.md): SourceCodester Class and Exam Timetabling System edit\_class1.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-13564](https://cve.now/CVE-2026-13564.md): Edimax EW-7478APC POST Request formPPPoESetup stack-based overflow (CVSS 8.7, Edimax EW-7478APC)
- [CVE-2026-13563](https://cve.now/CVE-2026-13563.md): Edimax EW-7478APC POST Request formL2TPSetup stack-based overflow (CVSS 8.7, Edimax EW-7478APC)
- [CVE-2026-13562](https://cve.now/CVE-2026-13562.md): Edimax EW-7478APC POST Request formiNICSiteSurvey buffer overflow (CVSS 8.7, Edimax EW-7478APC)
- [CVE-2026-13561](https://cve.now/CVE-2026-13561.md): Edimax EW-7478APC POST Request formiNICbasic os command injection (CVSS 5.3, Edimax EW-7478APC)
- [CVE-2026-13560](https://cve.now/CVE-2026-13560.md): Edimax EW-7478APC POST Request formAccept os command injection (CVSS 5.3, Edimax EW-7478APC)
- [CVE-2026-13559](https://cve.now/CVE-2026-13559.md): code-projects Real State Services single-list\_sale.php add sql injection (CVSS 6.9, code-projects Real State Services)
- [CVE-2026-41992](https://cve.now/CVE-2026-41992.md): Global Buffer Overflow in GNU gzip (CVSS 6.9, GNU gzip)
- [CVE-2026-41991](https://cve.now/CVE-2026-41991.md): Predictable Temporary File in GNU gzip (CVSS 2.0, GNU gzip)
- [CVE-2026-13558](https://cve.now/CVE-2026-13558.md): CodeAstro Complaint Management System Report addreport cross site scripting (CVSS 5.1, CodeAstro Complaint Management System)
- [CVE-2026-25707](https://cve.now/CVE-2026-25707.md): Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp (CVSS 8.8, SUSE libzypp)
- [CVE-2026-13557](https://cve.now/CVE-2026-13557.md): itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting (CVSS 5.3, itsourcecode Online Hotel Management System)
- [CVE-2026-57346](https://cve.now/CVE-2026-57346.md): WordPress Embed Privacy plugin \<= 1.12.3 - Arbitrary File Deletion vulnerability (CVSS 7.1, Epiphyt Embed Privacy)
- [CVE-2026-13556](https://cve.now/CVE-2026-13556.md): itsourcecode Online Hotel Management System POST Request controller.php edit cross site scripting (CVSS 5.3, itsourcecode Online Hotel Management System)
- [CVE-2026-13555](https://cve.now/CVE-2026-13555.md): itsourcecode Online Hotel Management System controller.php add sql injection (CVSS 6.9, itsourcecode Online Hotel Management System)
- [CVE-2026-13601](https://cve.now/CVE-2026-13601.md): Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications (CVSS 7.1, Red Hat Enterprise Linux 7 Extended Lifecycle Support · Red…)
- [CVE-2026-13554](https://cve.now/CVE-2026-13554.md): itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting (CVSS 5.3, itsourcecode Online Hotel Management System)
- [CVE-2026-13553](https://cve.now/CVE-2026-13553.md): itsourcecode Online Hotel Management System controller.php add unrestricted upload (CVSS 6.9, itsourcecode Online Hotel Management System)
- [CVE-2026-13552](https://cve.now/CVE-2026-13552.md): itsourcecode Online Hotel Management System controller.php edit sql injection (CVSS 6.9, itsourcecode Online Hotel Management System)
- [CVE-2026-13551](https://cve.now/CVE-2026-13551.md): itsourcecode Baptism Information Management System editBaptism.php sql injection (CVSS 6.9, itsourcecode Baptism Information Management System)
- [CVE-2026-57676](https://cve.now/CVE-2026-57676.md): WordPress Simple User Avatar plugin \<= 4.9 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3, Matteo Manna Simple User Avatar)
- [CVE-2026-13550](https://cve.now/CVE-2026-13550.md): itsourcecode Baptism Information Management System delbaptism.php sql injection (CVSS 6.9, itsourcecode Baptism Information Management System)
- [CVE-2026-9267](https://cve.now/CVE-2026-9267.md): Eclipse tinydtls before commit b3efd41ad111a4920f599f51ffa4f5e9f1e72221 contains an out-of-bounds read vulnerability in the check\_server\_cer (CVSS 6.9, Eclipse Foundation Eclipse tinydtls)
- [CVE-2026-13595](https://cve.now/CVE-2026-13595.md): Util-linux: util-linux: heap use-after-free in libblkid nested partition probing (CVSS 6.8, Red Hat Hardened Images · Red Hat Enterprise Linux +1)
- [CVE-2026-22078](https://cve.now/CVE-2026-22078.md): O+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability. (CVSS 7.3, OPPO O+ Connect)
- [CVE-2026-13549](https://cve.now/CVE-2026-13549.md): CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization (CVSS 5.3, CodeAstro Complaint Management System)
- [CVE-2026-57966](https://cve.now/CVE-2026-57966.md): Spice-vdagent: path traversal in file transfer via unsanitized filename (CVSS 4.4, Red Hat Enterprise Linux)
- [CVE-2026-57965](https://cve.now/CVE-2026-57965.md): Spice-vdagent: integer overflow in udscs\_write() leading to heap buffer overflow (CVSS 5.1, Red Hat Enterprise Linux)
- [CVE-2026-13548](https://cve.now/CVE-2026-13548.md): itsourcecode Hospital Management System doctortimings.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-13547](https://cve.now/CVE-2026-13547.md): Hanwang e-Face General Management Platform upload.do unrestricted upload (CVSS 6.9, Hanwang e-Face General Management Platform)
- [CVE-2026-13546](https://cve.now/CVE-2026-13546.md): Feehi CMS REST API Endpoint articles missing authentication (CVSS 6.9, Feehi CMS)
- [CVE-2026-13545](https://cve.now/CVE-2026-13545.md): D-Link DCS-935L POST Parameter setconf.cgi sub\_400E40 os command injection (CVSS 8.7, D-Link DCS-935L)
- [CVE-2026-13544](https://cve.now/CVE-2026-13544.md): Feehi CMS API users access control (CVSS 5.3, Feehi CMS)
- [CVE-2026-13543](https://cve.now/CVE-2026-13543.md): Documenso Google OAuth Login handle-oauth-callback-url.ts improper authentication (CVSS 6.3, Documenso)
- [CVE-2026-13542](https://cve.now/CVE-2026-13542.md): itsourcecode Hospital Management System doctorprofile.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-13541](https://cve.now/CVE-2026-13541.md): itsourcecode Hospital Management System doctorchangepassword.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-9676](https://cve.now/CVE-2026-9676.md): f4 Post Tree \< 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification (CVSS 4.3, F4 Post Tree)
- [CVE-2026-10083](https://cve.now/CVE-2026-10083.md): APCu Manager \< 4.5.0 - Unauthenticated Stored XSS via Cache Key Pollution (CVSS 7.5, APCu Manager)
- [CVE-2025-2902](https://cve.now/CVE-2025-2902.md): Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform (CVSS 8.3, Hitachi Virtual Storage Platform E390, E590, E790, E990,… +1)
- [CVE-2026-13540](https://cve.now/CVE-2026-13540.md): GitBucket RepositoryCreationService.scala Git.cloneRepository.setURI server-side request forgery (CVSS 5.3, GitBucket)
- [CVE-2025-0824](https://cve.now/CVE-2025-0824.md): lack of validation for firmware update in Hitachi Virtual Storage (CVSS 3.7, Hitachi Virtual Storage Platform One Block 23, 24, 26,)
- [CVE-2026-13539](https://cve.now/CVE-2026-13539.md): Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub\_407504 stack-based overflow (CVSS 8.7, Wavlink WL-NU516U1-A)
- [CVE-2025-7386](https://cve.now/CVE-2025-7386.md): Information exposure vulnerability in Hitachi Storage Navigator (CVSS 6.8, Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 51…)
- [CVE-2026-13538](https://cve.now/CVE-2026-13538.md): Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub\_401D68 command injection (CVSS 5.3, Wavlink WL-NU516U1-A)
- [CVE-2026-13537](https://cve.now/CVE-2026-13537.md): CodeAstro Human Resource Management System cross-site request forgery (CVSS 5.3, CodeAstro Human Resource Management System)
- [CVE-2026-53325](https://cve.now/CVE-2026-53325.md): agp/amd64: Fix broken error propagation in agp\_amd64\_probe() (no CVSS, Linux)
- [CVE-2026-13536](https://cve.now/CVE-2026-13536.md): GotoHTTP reg.12x cross site scripting (CVSS 5.3, GotoHTTP)
- [CVE-2026-13535](https://cve.now/CVE-2026-13535.md): CodeAstro Human Resource Management System View Endpoint Employee\_model.php GetFileInfo sql injection (CVSS 5.3, CodeAstro Human Resource Management System)
- [CVE-2026-13534](https://cve.now/CVE-2026-13534.md): CherryHQ cherry-studio CherryIN Preload API MemoryService.ts sha256 authorization (CVSS 2.3, CherryHQ cherry-studio)
- [CVE-2026-13533](https://cve.now/CVE-2026-13533.md): agentejo Cockpit CMS htaccess config.yaml YAMLLoad file access (CVSS 6.9, agentejo Cockpit CMS)
- [CVE-2026-13532](https://cve.now/CVE-2026-13532.md): itsourcecode Hospital Management System departmentDoctor.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-13531](https://cve.now/CVE-2026-13531.md): itsourcecode Hospital Management System department.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-13530](https://cve.now/CVE-2026-13530.md): itsourcecode Hospital Management System Appointment appointmentdetail.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-13529](https://cve.now/CVE-2026-13529.md): YzmCMS index.php sql injection (CVSS 6.3, YzmCMS)
- [CVE-2026-13528](https://cve.now/CVE-2026-13528.md): YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal (CVSS 6.9, YunaiV ruoyi-vue-pro · zhijiantianya ruoyi-vue-pro)
- [CVE-2026-13527](https://cve.now/CVE-2026-13527.md): SourceCodester Class and Exam Timetabling System preview4.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-13526](https://cve.now/CVE-2026-13526.md): SourceCodester Class and Exam Timetabling System edit\_class.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-13525](https://cve.now/CVE-2026-13525.md): CodeAstro Human Resource Management System Update\_Earn\_Leave Endpoint Employee\_model.php emselectByCode sql injection (CVSS 5.3, CodeAstro Human Resource Management System)
- [CVE-2026-13524](https://cve.now/CVE-2026-13524.md): CherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorization (CVSS 6.3, CherryHQ cherry-studio)
- [CVE-2026-13523](https://cve.now/CVE-2026-13523.md): GPAC ISOBMFF base\_encoding.c data amplification (CVSS 4.8, GPAC)
- [CVE-2026-13522](https://cve.now/CVE-2026-13522.md): Investintech SlimPDFReader PDF File SlimPDFReader.exe TeighaDo+0x25cde0 out-of-bounds (CVSS 5.3, Investintech SlimPDFReader)
- [CVE-2026-13521](https://cve.now/CVE-2026-13521.md): SourceCodester Class and Exam Timetabling System preview5.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-13520](https://cve.now/CVE-2026-13520.md): itsourcecode Hospital Management System Appointment appointmentapproval.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-13519](https://cve.now/CVE-2026-13519.md): Tenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflow (CVSS 8.7, Tenda JD12L)
- [CVE-2026-13518](https://cve.now/CVE-2026-13518.md): Tenda JD12L addressNat fromAddressNat stack-based overflow (CVSS 8.7, Tenda JD12L)
- [CVE-2026-13517](https://cve.now/CVE-2026-13517.md): Tenda JD12L WifiBasicSet formWifiBasicSet stack-based overflow (CVSS 8.7, Tenda JD12L)
- [CVE-2026-31016](https://cve.now/CVE-2026-31016.md): Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a remote attacker to escalate privileges via t (CVSS 6.5)
- [CVE-2026-36848](https://cve.now/CVE-2026-36848.md): Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem. (CVSS 7.5)
- [CVE-2026-37637](https://cve.now/CVE-2026-37637.md): An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php component (CVSS 9.1)
- [CVE-2026-51218](https://cve.now/CVE-2026-51218.md): A heap buffer overflow in the TS7Worker::PerformFunctionWrite() function (/core/s7\_server.cpp) of snap7 v1.4.3 allows attackers to cause a D (CVSS 7.5)
- [CVE-2026-51219](https://cve.now/CVE-2026-51219.md): A heap buffer overflow in the HighPriorityASDUQueue\_hasUnconfirmedIMessages function of lib60870 v2.3.3 to v2.3.6 allows attackers to cause (CVSS 7.5)
- [CVE-2026-51221](https://cve.now/CVE-2026-51221.md): A buffer overflow in the Get\_Attribute\_List function of EIPStackGroup OpENer commit 76b95c allows attackers to cause a Denial of Service (Do (CVSS 7.5)
- [CVE-2026-57919](https://cve.now/CVE-2026-57919.md): PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\\\.\\pipe\\PBackupVSS) with a DACL that grants GENER (CVSS 7.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-06-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.