CVEs published July 5, 2026
87 CVEs were published on July 5, 2026: 1 critical, 6 high.
- Published
- 87
- Critical
- 1
- High
- 6
- Medium
- 76
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 18
Most affected products
- code-projects Real State Services
- 7
- code-projects Hotel and Tourism Reservation
- 6
- itsourcecode Hospital Management System
- 6
- SourceCodester Class and Exam Timetabling System
- 6
- SourceCodester Multi-Vendor Online Grocery Management System
- 6
- mjperpinosa stumasy
- 5
- radareorg radare2
- 5
- SourceCodester Onlne Examination & Learning Management Syst…
- 5
- TUBITAK BILGEM Software Technologies Research Institute Par…
- 4
- code-projects Internship Management System
- 2
Critical 1
High 6
- CVE-2026-59510Authenticated Path Traversal in AIL Framework PDF Object Handling Enables Potential Arbitrary File Readail-project ail-framework
- CVE-2026-6509Privilege Escalation in TUBITAK BILGEM's Pardus UpdateTUBITAK BILGEM Software Technologies Research Institute Par…
- CVE-2026-9085DNS Hijacking in TUBITAK BILGEM's Pardus-Parental-ControlTUBITAK BILGEM Software Technologies Research Institute Par…
- CVE-2026-12250Sensitive Data Exposure in TUBITAK BILGEM's Pardus Domain JoinerTUBITAK BILGEM Software Technologies Research Institute Par…
- CVE-2026-14721UTT HiPER 1250GW Web Endpoint ConfigWirelessBase_5g stack-based overflowUTT HiPER 1250GW
- CVE-2026-14570Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recoveryTIMLEGGE Crypt::DSA
Medium, low and unrated 80
- CVE-2026-14783NousResearch hermes-agent skills_tool.py skill_view path traversalNousResearch hermes-agent
- CVE-2026-14778SourceCodester Onlne Examination & Learning Management System Enrollment Management ajax_enroll.php improper authorizationSourceCodester Onlne Examination & Learning Management Syst…
- CVE-2026-14777SourceCodester Onlne Examination & Learning Management System announcements.php unrestricted uploadSourceCodester Onlne Examination & Learning Management Syst…
- CVE-2026-14776SourceCodester Onlne Examination & Learning Management System Filename Extension upload_files.php pathinfo unrestricted uploadSourceCodester Onlne Examination & Learning Management Syst…
- CVE-2026-14775SourceCodester Onlne Examination & Learning Management System process_lesson.php unrestricted uploadSourceCodester Onlne Examination & Learning Management Syst…
- CVE-2026-14774itsourcecode Hospital Management System paymentdischarge.php sql injectionitsourcecode Hospital Management System
- CVE-2026-10657Out-of-bounds read in Zephyr DNS resolver mDNS suffix check (memcmp past string NUL)zephyrproject zephyr
- CVE-2026-10656NULL-pointer dereference DoS in MAX32 USB device controller transfer-completion handlerszephyrproject zephyr
- CVE-2026-14773itsourcecode Hospital Management System payment.php sql injectionitsourcecode Hospital Management System
- CVE-2026-14772SourceCodester Class and Exam Timetabling System edit_course1.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-59520WordPress CrawlWP SEO plugin <= 3.0.16 - Cross Site Request Forgery (CSRF) vulnerabilityproperfraction CrawlWP SEO
- CVE-2026-59519WordPress FormLayer plugin <= 1.0.6 - Sensitive Data Exposure vulnerabilitySoftaculous FormLayer
- CVE-2026-59511WordPress Exclusive Addons Elementor plugin <= 2.7.9.9 - Sensitive Data Exposure vulnerabilityTim Strifler Exclusive Addons Elementor
- CVE-2026-14771SourceCodester Class and Exam Timetabling System edit_exam1.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-14770SourceCodester Class and Exam Timetabling System edit_room.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-14769code-projects Real State Services pay.php sql injectioncode-projects Real State Services
- CVE-2026-14768code-projects Real State Services builderHome.php sql injectioncode-projects Real State Services
- CVE-2026-14767CodeAstro Ecommerce Website POST Parameter confirm.php sql injectionCodeAstro Ecommerce Website
- CVE-2026-14766CodeAstro Apartment Visitor Management System POST Parameter search-result.php sql injectionCodeAstro Apartment Visitor Management System
- CVE-2026-14764code-projects Hotel and Tourism Reservation Event Management add_event.php sql injectioncode-projects Hotel and Tourism Reservation
- CVE-2026-14763code-projects Hotel and Tourism Reservation Tour Reservations tour_reserves.php sql injectioncode-projects Hotel and Tourism Reservation
- CVE-2026-14762code-projects Hotel and Tourism Reservation Room Management rooms.php sql injectioncode-projects Hotel and Tourism Reservation
- CVE-2026-14761radareorg radare2 str.c r_str_append integer overflowradareorg radare2
- CVE-2026-14760radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after freeradareorg radare2
- CVE-2026-14759radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflowradareorg radare2
- CVE-2026-14758radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflowradareorg radare2
- CVE-2026-14757radareorg radare2 cmd_anal.inc core_anal_bytes integer overflowradareorg radare2
- CVE-2026-12386Buffer Overflow in TUBITAK BILGEM's Pardus PenTUBITAK BILGEM Software Technologies Research Institute Par…
- CVE-2026-14756code-projects Hotel and Tourism Reservation Tour Management add_tour.php sql injectioncode-projects Hotel and Tourism Reservation
- CVE-2026-14755code-projects Hotel and Tourism Reservation Reservations Management reservations.php sql injectioncode-projects Hotel and Tourism Reservation
- CVE-2026-14754code-projects Hotel and Tourism Reservation add_room.php sql injectioncode-projects Hotel and Tourism Reservation
- CVE-2026-14753mjperpinosa stumasy Note Handler/Assignment notes authorizationmjperpinosa stumasy
- CVE-2026-14752mjperpinosa stumasy add_into_dictionary.php add_definition cross site scriptingmjperpinosa stumasy
- CVE-2026-14751mjperpinosa stumasy search_scratch_data.php search_scratch_data sql injectionmjperpinosa stumasy
- CVE-2026-14750mjperpinosa stumasy accessing_dictionary_authorization.php accessing_dictionary_authorization sql injectionmjperpinosa stumasy
- CVE-2026-14749mjperpinosa stumasy calculate.php eval code injectionmjperpinosa stumasy
- CVE-2026-14748AIAnytime Awesome-MCP-Server mcp-wiki/wiki-summary server.py server-side request forgeryAIAnytime Awesome-MCP-Server
- CVE-2026-14747code-projects Real State Services addprojectsale.php sql injectioncode-projects Real State Services
- CVE-2026-14746code-projects Real State Services addprojectrent.php sql injectioncode-projects Real State Services
- CVE-2026-14745code-projects Real State Services single-list_rent.php sql injectioncode-projects Real State Services
- CVE-2026-14744code-projects Real State Services normalHomeRent.php sql injectioncode-projects Real State Services
- CVE-2026-14743code-projects Real State Services normalHomeSale.php sql injectioncode-projects Real State Services
- CVE-2026-14742langchain-ai langgraph Task Result Cache _cache.py _freeze weak hashlangchain-ai langgraph
- CVE-2026-14738exo-explore exo Vision Feature Cache vision.py _image_cache_key weak hashexo-explore exo
- CVE-2026-14737Hanwang e-Face General Management Platform querySysAuthStr.do sql injectionHanwang e-Face General Management Platform
- CVE-2026-14736Ruijie RG-UAC user_auth_commit.php unrestricted uploadRuijie RG-UAC
- CVE-2026-14735code-projects Smart Parking System parkings.php sql injectioncode-projects Smart Parking System
- CVE-2026-14734SourceCodester Class and Exam Timetabling System edit_product.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-14733SourceCodester Class and Exam Timetabling System edit_coursea.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-14732SourceCodester Class and Exam Timetabling System edit_exam.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-14731itsourcecode Hospital Management System patientreport.php sql injectionitsourcecode Hospital Management System
- CVE-2026-14730itsourcecode Hospital Management System patientprofile.php sql injectionitsourcecode Hospital Management System
- CVE-2026-14725SourceCodester Online Boat Reservation System session expirationSourceCodester Online Boat Reservation System
- CVE-2026-14723AD-Security AD_Miner Cache analyse_cache.py request_a deserializationAD-Security AD_Miner
- CVE-2026-14722tiddly-gittly TidGi-Desktop Git Repository Import loadWikiTiddlersWithSubWikis.ts code injectiontiddly-gittly TidGi-Desktop · tidgi
- CVE-2026-14719SourceCodester Onlne Examination & Learning Management System Registration Endpoint register.php privileges managementSourceCodester Onlne Examination & Learning Management Syst…
- CVE-2026-14781Keycloak-services: keycloak-services: oidc email_verified claim incorrectly applied to userinfo emailRed Hat Build of Keycloak · Red Hat Data Grid +2
- CVE-2026-14717itsourcecode Hospital Management System patientlogin.php sql injectionitsourcecode Hospital Management System
- CVE-2026-14716nextlevelbuilder GoClaw WebSocket RPC router.go MethodRouter.Handle authorizationnextlevelbuilder GoClaw
- CVE-2026-14714zhayujie chatgpt-on-wechat CowAgent wx Endpoint common.py verify_server missing authenticationzhayujie chatgpt-on-wechat CowAgent
- CVE-2026-14713SourceCodester Pizzafy E-Commerce System ajax.php confirm_order sql injectionSourceCodester Pizzafy E-Commerce System
- CVE-2026-14706code-projects Online Examination Quiz Creation Feature update.php sql injectioncode-projects Online Examination
- CVE-2026-14705code-projects Online Examination head.php sql injectioncode-projects Online Examination
- CVE-2026-14704stephen-kruger bluebox cross site scriptingstephen-kruger bluebox
- CVE-2026-14703itsourcecode Hospital Management System patientorder.php sql injectionitsourcecode Hospital Management System
- CVE-2026-14702zcaceres markdownify-mcp webpage-to-markdown Markdownify.ts saveToTempFile random valueszcaceres markdownify-mcp
- CVE-2026-14701code-projects Internship Management System Password Change Endpoint change_password.php sql injectioncode-projects Internship Management System
- CVE-2026-14700code-projects Internship Management System Employer Login Endpoint login.php sql injectioncode-projects Internship Management System
- CVE-2026-14699zcaceres markdownify-mcp Markdownify.ts assertPathAllowed symlinkzcaceres markdownify-mcp
- CVE-2026-14698SourceCodester Syllabus-Aligned Learning Management and Examination System upload_files.php unrestricted uploadSourceCodester Syllabus-Aligned Learning Management and Exa…
- CVE-2026-14695SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injectionSourceCodester Multi-Vendor Online Grocery Management System
- CVE-2026-14694SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php cancel_order sql injectionSourceCodester Multi-Vendor Online Grocery Management System
- CVE-2026-14693SourceCodester Multi-Vendor Online Grocery Management System Master.php cancel_order improper authorizationSourceCodester Multi-Vendor Online Grocery Management System
- CVE-2026-14692SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php save_shop_type sql injectionSourceCodester Multi-Vendor Online Grocery Management System
- CVE-2026-14691SourceCodester Multi-Vendor Online Grocery Management System Setting SystemSettings.php update_settings_info code injectionSourceCodester Multi-Vendor Online Grocery Management System
- CVE-2026-14690SourceCodester Multi-Vendor Online Grocery Management System Users.php save_users improper authorizationSourceCodester Multi-Vendor Online Grocery Management System
- CVE-2026-14689CodeAstro Apartment Visitor Management System add-apartment.php sql injectionCodeAstro Apartment Visitor Management System
- CVE-2026-14688itsourcecode Online Hotel Management System login.php sql injectionitsourcecode Online Hotel Management System
- CVE-2026-14687666ghj BettaFish InsightEngine search-result Deduplication agent.py _deduplicate_results partial string comparison666ghj BettaFish
- CVE-2026-14686HdrHistogram Range Check DoubleHistogram.java org.HdrHistogram.DoubleHistogram.recordValue comparisonHdrHistogram