# CVEs published 2026-07-08

362 CVEs were published on July 8, 2026: 23 critical, 166 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-15135](https://cve.now/CVE-2026-15135.md): code-projects Online Food Order System edit\_food\_items.php sql injection (CVSS 6.9, code-projects Online Food Order System)
- [CVE-2026-47646](https://cve.now/CVE-2026-47646.md): Dynamics 365 Customer Voice Spoofing Vulnerability (CVSS 9.3, Microsoft Dynamics 365 Customer Voice)
- [CVE-2026-15134](https://cve.now/CVE-2026-15134.md): CodeAstro Simple Online Leave Management System index.php sql injection (CVSS 6.9, CodeAstro Simple Online Leave Management System)
- [CVE-2026-15131](https://cve.now/CVE-2026-15131.md): Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a (CVSS 4.3, Google Chrome)
- [CVE-2026-15107](https://cve.now/CVE-2026-15107.md): Use after free in IndexedDB in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox vi (CVSS 8.8, Google Chrome)
- [CVE-2026-15130](https://cve.now/CVE-2026-15130.md): Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation vi (CVSS 4.3, Google Chrome)
- [CVE-2026-15128](https://cve.now/CVE-2026-15128.md): Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (CVSS 6.1, Google Chrome)
- [CVE-2026-15127](https://cve.now/CVE-2026-15127.md): Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (CVSS 6.1, Google Chrome)
- [CVE-2026-15126](https://cve.now/CVE-2026-15126.md): Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-15125](https://cve.now/CVE-2026-15125.md): Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a (CVSS 8.8, Google Chrome)
- [CVE-2026-15124](https://cve.now/CVE-2026-15124.md): Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass same origin policy (CVSS 4.3, Google Chrome)
- [CVE-2026-15123](https://cve.now/CVE-2026-15123.md): Inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruptio (CVSS 8.8, Google Chrome)
- [CVE-2026-15122](https://cve.now/CVE-2026-15122.md): Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had c (CVSS 8.3, Google Chrome)
- [CVE-2026-15121](https://cve.now/CVE-2026-15121.md): Use after free in WebRTC in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-15120](https://cve.now/CVE-2026-15120.md): Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer proces (CVSS 8.3, Google Chrome)
- [CVE-2026-15119](https://cve.now/CVE-2026-15119.md): Race in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentia (CVSS 8.3, Google Chrome)
- [CVE-2026-15118](https://cve.now/CVE-2026-15118.md): Use after free in Input in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-15117](https://cve.now/CVE-2026-15117.md): Use after free in Payments in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to engage in specific UI (CVSS 7.5, Google Chrome)
- [CVE-2026-15116](https://cve.now/CVE-2026-15116.md): Use after free in Actor in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-15115](https://cve.now/CVE-2026-15115.md): Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to (CVSS 3.3, Google Chrome)
- [CVE-2026-15114](https://cve.now/CVE-2026-15114.md): Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corrup (CVSS 8.8, Google Chrome)
- [CVE-2026-15113](https://cve.now/CVE-2026-15113.md): Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker to potentially perform a sandbox es (CVSS 9.6, Google Chrome)
- [CVE-2026-15111](https://cve.now/CVE-2026-15111.md): Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to engage in specific UI ges (CVSS 7.5, Google Chrome)
- [CVE-2026-15110](https://cve.now/CVE-2026-15110.md): Use after free in Extensions in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extens (CVSS 8.8, Google Chrome)
- [CVE-2026-15109](https://cve.now/CVE-2026-15109.md): Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to obtain potentially sensitive information fr (CVSS 6.5, Google Chrome)
- [CVE-2026-15108](https://cve.now/CVE-2026-15108.md): Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious (CVSS 4.3, Google Chrome)
- [CVE-2026-15133](https://cve.now/CVE-2026-15133.md): Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandb (CVSS 8.8, Google Chrome)
- [CVE-2026-15132](https://cve.now/CVE-2026-15132.md): Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-15129](https://cve.now/CVE-2026-15129.md): Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a craf (CVSS 8.8, Google Chrome)
- [CVE-2026-15112](https://cve.now/CVE-2026-15112.md): Use after free in Ozone in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a craf (CVSS 8.8, Google Chrome)
- [CVE-2026-59723](https://cve.now/CVE-2026-59723.md): Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (\`/browser\` endpoint) (CVSS 8.8, cline)
- [CVE-2026-54499](https://cve.now/CVE-2026-54499.md): Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders (CVSS 7.5, stanfordnlp stanza · stanza)
- [CVE-2026-54782](https://cve.now/CVE-2026-54782.md): CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation (CVSS 10.0, CoreWCF · CoreWCF.Primitives)
- [CVE-2026-54781](https://cve.now/CVE-2026-54781.md): CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced (CVSS 7.4, CoreWCF · CoreWCF.Primitives)
- [CVE-2026-54784](https://cve.now/CVE-2026-54784.md): CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality (CVSS 7.4, CoreWCF · CoreWCF.Primitives)
- [CVE-2026-54774](https://cve.now/CVE-2026-54774.md): CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate (CVSS 7.4, CoreWCF · CoreWCF.Primitives)
- [CVE-2026-54783](https://cve.now/CVE-2026-54783.md): CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages (CVSS 7.4, CoreWCF · CoreWCF.Primitives)
- [CVE-2026-15105](https://cve.now/CVE-2026-15105.md): davenardella snap7 ReadVar Request s7\_server.cpp PerformFunctionRead out-of-bounds write (CVSS 5.3, davenardella snap7)
- [CVE-2026-54780](https://cve.now/CVE-2026-54780.md): CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass (CVSS 3.7, CoreWCF · CoreWCF.Primitives)
- [CVE-2026-54775](https://cve.now/CVE-2026-54775.md): CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service. (CVSS 6.5, CoreWCF · CoreWCF.Kafka)
- [CVE-2026-54778](https://cve.now/CVE-2026-54778.md): CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution (CVSS 6.2, CoreWCF · CoreWCF.UnixDomainSocket)
- [CVE-2026-54773](https://cve.now/CVE-2026-54773.md): CoreWCF: WS-Security signature substitution via document-wide Signature lookup (CVSS 5.9, CoreWCF · CoreWCF.Primitives)
- [CVE-2026-54779](https://cve.now/CVE-2026-54779.md): CoreWCF: SAML token replay protection is inoperative (CVSS 5.9, CoreWCF · CoreWCF.Primitives)
- [CVE-2026-54772](https://cve.now/CVE-2026-54772.md): CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake (CVSS 7.5, CoreWCF · CoreWCF.NetFramingBase)
- [CVE-2026-54776](https://cve.now/CVE-2026-54776.md): CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade (CVSS 4.4, CoreWCF · CoreWCF.UnixDomainSocket)
- [CVE-2026-54777](https://cve.now/CVE-2026-54777.md): CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance (CVSS 6.5, CoreWCF · CoreWCF.NetNamedPipe)
- [CVE-2026-15168](https://cve.now/CVE-2026-15168.md): Use of Uninitialized Variable in Wireshark (CVSS 2.5, Wireshark Foundation Wireshark)
- [CVE-2026-5922](https://cve.now/CVE-2026-5922.md): Poly Voice – Potential Unauthorized Modification of WebUI using XSS Attack (CVSS 5.9, HP Poly CCX · HP Poly Edge E +1)
- [CVE-2026-55877](https://cve.now/CVE-2026-55877.md): Symfony UX: XSS in symfony/ux-icons via unsanitized SVG content in local files and Iconify on-demand responses (CVSS 6.1, symfony ux · symfony/ux-icons)
- [CVE-2026-55878](https://cve.now/CVE-2026-55878.md): Symfony: Path Traversal in symfony/ux-toolkit Allows Arbitrary File Write and Read via Crafted Recipe Manifest (CVSS 7.8, symfony ux · symfony/ux-toolkit)
- [CVE-2026-5923](https://cve.now/CVE-2026-5923.md): Poly Voice – Potential Unauthorized Modification of WebUI using CSRF Attack (CVSS 6.0, HP Poly CCX · HP Poly Edge E +1)
- [CVE-2026-55471](https://cve.now/CVE-2026-55471.md): HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactory (CVSS 8.7, hapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fhir.…)
- [CVE-2026-55470](https://cve.now/CVE-2026-55470.md): HAPI FHIR: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoS (CVSS 7.5, hapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fh… +3)
- [CVE-2026-44161](https://cve.now/CVE-2026-44161.md): Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in \`out\_http\` (CVSS 7.2, fluentd)
- [CVE-2026-44160](https://cve.now/CVE-2026-44160.md): Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in \`in\_http\` and \`in\_forward\` (CVSS 7.5, fluentd)
- [CVE-2026-44025](https://cve.now/CVE-2026-44025.md): Fluentd: Exposure of Sensitive Information via Monitor Agent API (CVSS 7.5, fluentd)
- [CVE-2026-44024](https://cve.now/CVE-2026-44024.md): Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in \`${tag}\` Placeholder (CVSS 9.8, fluentd)
- [CVE-2026-10037](https://cve.now/CVE-2026-10037.md): Sandbox Escape in Ubuntu OpenJDK Packages via xdg-desktop-portal (CVSS 8.8, Canonical Ubuntu)
- [CVE-2026-55830](https://cve.now/CVE-2026-55830.md): RestrictedPython guard hooks can be shadowed via positional-only arguments (CVSS 8.3, zopefoundation RestrictedPython · restrictedpython)
- [CVE-2026-48492](https://cve.now/CVE-2026-48492.md): Snipe-IT's selectlist visibility is too permissive (CVSS 4.9, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-55849](https://cve.now/CVE-2026-55849.md): @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized \`--workspace\` Argument (CVSS 8.5, cyclonedx-node-npm · @cyclonedx/cyclonedx-npm)
- [CVE-2026-35211](https://cve.now/CVE-2026-35211.md): OpenCTI: Elasticsearch Painless Script Injection via GraphQL \`script\` filter operator allows authenticated user to exfiltrate data and cause DoS (CVSS 6.5, OpenCTI-Platform opencti · pycti)
- [CVE-2026-35210](https://cve.now/CVE-2026-35210.md): OpenCTI: Authorization Bypass via \`synchronized-upsert\` HTTP Header Injection (CVSS 7.1, OpenCTI-Platform opencti · pycti)
- [CVE-2026-54528](https://cve.now/CVE-2026-54528.md): jupyterlab-git excluded\_paths Case-Sensitivity Bypass Allows Reading Excluded Directories (CVSS 7.1, jupyterlab-git)
- [CVE-2026-54527](https://cve.now/CVE-2026-54527.md): JupyterLab Git: Stored XSS leading to RCE (CVSS 9.3, jupyterlab-git · jupyterlab-git-core +1)
- [CVE-2026-60105](https://cve.now/CVE-2026-60105.md): Monsta FTP \< 2.14.5 SSRF via IPv4-Mapped IPv6 Address Bypass (CVSS 7.7, Monsta Limited of New Zealand Monsta FTP)
- [CVE-2026-59818](https://cve.now/CVE-2026-59818.md): etcd: gRPC client listener does not enforce \`--client-crl-file\` certificate revocation (CVSS 6.5, etcd-io etcd)
- [CVE-2026-58191](https://cve.now/CVE-2026-58191.md): Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig\* routes (CVSS 6.5, appium · @appium/base-driver)
- [CVE-2026-58192](https://cve.now/CVE-2026-58192.md): Appium: Unauthenticated arbitrary file/directory deletion in @appium/storage-plugin (CVSS 8.6, appium)
- [CVE-2026-15166](https://cve.now/CVE-2026-15166.md): Stack-based Buffer Overflow in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-57481](https://cve.now/CVE-2026-57481.md): Parse Server: LiveQuery discloses object data to a subscriber across an ACL read-access change (CVSS 2.3, parse-community parse-server · parse-server)
- [CVE-2026-57480](https://cve.now/CVE-2026-57480.md): Parse Server: Denial of service via exponential-time processing of deeply nested query operators (CVSS 8.7, parse-community parse-server · parse-server)
- [CVE-2026-15174](https://cve.now/CVE-2026-15174.md): Heap-based Buffer Overflow in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-15172](https://cve.now/CVE-2026-15172.md): Unchecked Input for Loop Condition in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-15173](https://cve.now/CVE-2026-15173.md): Heap-based Buffer Overflow in Wireshark (CVSS 4.7, Wireshark Foundation Wireshark)
- [CVE-2026-15171](https://cve.now/CVE-2026-15171.md): NULL Pointer Dereference in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-15169](https://cve.now/CVE-2026-15169.md): Heap-based Buffer Overflow in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-15167](https://cve.now/CVE-2026-15167.md): Stack-based Buffer Overflow in Wireshark (CVSS 7.5, Wireshark Foundation Wireshark)
- [CVE-2026-55778](https://cve.now/CVE-2026-55778.md): Parse Server: Stored XSS via non-standard file extension bypassing file upload extension blocklist (CVSS 2.1, parse-community parse-server · parse-server)
- [CVE-2026-15170](https://cve.now/CVE-2026-15170.md): Heap-based Buffer Overflow in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-15165](https://cve.now/CVE-2026-15165.md): Heap-based Buffer Overflow in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-15163](https://cve.now/CVE-2026-15163.md): Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark (CVSS 5.5, Wireshark Foundation Wireshark)
- [CVE-2026-15164](https://cve.now/CVE-2026-15164.md): Heap-based Buffer Overflow in ciscodump (CVSS 5.5, Wireshark Foundation ciscodump)
- [CVE-2025-12506](https://cve.now/CVE-2025-12506.md): Use of Incorrectly-Resolved Name or Reference in GitLab (CVSS 3.5, GitLab)
- [CVE-2026-49866](https://cve.now/CVE-2026-49866.md): libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays (CVSS 7.5, js-libp2p · @libp2p/gossipsub)
- [CVE-2026-6352](https://cve.now/CVE-2026-6352.md): Incorrect Authorization in GitLab (CVSS 2.7, GitLab)
- [CVE-2026-6896](https://cve.now/CVE-2026-6896.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7, GitLab)
- [CVE-2026-7492](https://cve.now/CVE-2026-7492.md): Missing Authorization in GitLab (CVSS 4.3, GitLab)
- [CVE-2026-8472](https://cve.now/CVE-2026-8472.md): Missing Authorization in GitLab (CVSS 4.3, GitLab)
- [CVE-2026-11827](https://cve.now/CVE-2026-11827.md): Insufficiently Protected Credentials in GitLab (CVSS 4.9, GitLab)
- [CVE-2026-13320](https://cve.now/CVE-2026-13320.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 7.3, GitLab)
- [CVE-2026-58525](https://cve.now/CVE-2026-58525.md): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVSS 8.2, Microsoft Edge)
- [CVE-2026-54590](https://cve.now/CVE-2026-54590.md): AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansion (CVSS 5.9, ronf asyncssh · asyncssh)
- [CVE-2026-54591](https://cve.now/CVE-2026-54591.md): AsyncSSH: SCP Path Traversal to Arbitrary File Write (CVSS 8.1, ronf asyncssh · asyncssh)
- [CVE-2026-55542](https://cve.now/CVE-2026-55542.md): Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL (CVSS 1.3, grokability snipe-it · snipe/snipe-it)
- [CVE-2026-55206](https://cve.now/CVE-2026-55206.md): py7zr: O(n^2) algorithmic complexity DoS in PackInfo.\_read() (CVSS 8.7, miurahr py7zr · py7zr)
- [CVE-2026-55195](https://cve.now/CVE-2026-55195.md): py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size (CVSS 8.7, miurahr py7zr · py7zr)
- [CVE-2026-55596](https://cve.now/CVE-2026-55596.md): Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript (CVSS 8.7, udecode plate · @platejs/media)
- [CVE-2026-56669](https://cve.now/CVE-2026-56669.md): Elysia: Inefficient Algorithmic Complexity and Interpretation Conflict (CVSS 7.5, elysiajs elysia · elysia)
- [CVE-2026-58494](https://cve.now/CVE-2026-58494.md): Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination (CVSS 6.5, bytecodealliance wasmtime · wasmtime-wasi)
- [CVE-2026-14896](https://cve.now/CVE-2026-14896.md): Nomad vulnerable to cross-namespace host volume claim deletion (CVSS 4.2, HashiCorp Nomad)
- [CVE-2026-58208](https://cve.now/CVE-2026-58208.md): NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled (CVSS 6.8, nats-io nats-server)
- [CVE-2026-58211](https://cve.now/CVE-2026-58211.md): NATS Server: \`no\_auth\_user\` pre-CONNECT fast path bypasses user connection restrictions (CVSS 5.4, nats-io nats-server)
- [CVE-2026-58207](https://cve.now/CVE-2026-58207.md): NATS Server: Remote crash via integer overflow in Connz pagination (CVSS 7.7, nats-io nats-server)
- [CVE-2026-0288](https://cve.now/CVE-2026-0288.md): PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent (CVSS 7.2, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-58210](https://cve.now/CVE-2026-58210.md): NATS Server: MQTT partial CONNECT packets can exhaust pre-auth memory (CVSS 7.5, nats-io nats-server)
- [CVE-2026-58209](https://cve.now/CVE-2026-58209.md): NATS Server: MQTT retained and QoS replay bypass subscribe deny filters (CVSS 4.3, nats-io nats-server)
- [CVE-2026-14361](https://cve.now/CVE-2026-14361.md): Consul-template is vulnerable to path redirection in writeToFile through symlink attack (CVSS 4.7, HashiCorp Tooling)
- [CVE-2026-14891](https://cve.now/CVE-2026-14891.md): Nomad vulnerable to sandbox escape in Docker task driver (CVSS 8.7, HashiCorp Nomad)
- [CVE-2026-58214](https://cve.now/CVE-2026-58214.md): NATS Server: MQTT subscribe ACL bypass via $MQTT.deliver.pubrel prefix (incomplete fix for CVE-2026-33217) (CVSS 4.3, nats-io nats-server)
- [CVE-2026-58254](https://cve.now/CVE-2026-58254.md): NATS Server: Incomplete fix for CVE-2026-33249: Leaf node connections bypass Nats-Trace-Dest permission check (CVSS 5.3, nats-io nats-server)
- [CVE-2026-8801](https://cve.now/CVE-2026-8801.md): File Extension Restriction Bypass in MOVEit Transfer (CVSS 3.5, Progress MOVEit Transfer)
- [CVE-2026-8800](https://cve.now/CVE-2026-8800.md): Cross-Org External Token Metadata accessible to AuditUser role (CVSS 2.7, Progress MOVEit Transfer)
- [CVE-2026-58213](https://cve.now/CVE-2026-58213.md): NATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injection (CVSS 7.1, nats-io nats-server)
- [CVE-2026-15154](https://cve.now/CVE-2026-15154.md): Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector\_params.regex (CVSS 6.5, guardrails-detectors · Red Hat OpenShift AI)
- [CVE-2026-8651](https://cve.now/CVE-2026-8651.md): IPv6 Loopback Spoof via Trusted Host Header Bypasses Origin Check in MOVEit Transfer (CVSS 3.7, Progress MOVEit Transfer)
- [CVE-2026-58250](https://cve.now/CVE-2026-58250.md): NATS Server: Pre-auth server crash via double INFO in leafnode handshake (CVSS 7.5, nats-io nats-server)
- [CVE-2026-8650](https://cve.now/CVE-2026-8650.md): Authenticated Path Traversal allows MOVEit admins to view arbitrary system files (CVSS 4.5, Progress MOVEit Transfer)
- [CVE-2026-58252](https://cve.now/CVE-2026-58252.md): NATS Server: Subscribe Authz Bypass via Wildcard-Overlap (CVSS 6.5, nats-io nats-server)
- [CVE-2026-59807](https://cve.now/CVE-2026-59807.md): Composio SDK \< 0.2.32-beta.283 - Sensitive File Upload via tool-file-uploads.ts (CVSS 8.9, ComposioHQ composio)
- [CVE-2026-59806](https://cve.now/CVE-2026-59806.md): Gradio \< 6.20.0 - Open Redirect and SSRF via /gradio\_api/file= endpoint (CVSS 4.9, gradio-app gradio)
- [CVE-2026-58253](https://cve.now/CVE-2026-58253.md): NATS Server: Route API Auth Bypass (CVSS 8.8, nats-io nats-server)
- [CVE-2026-59805](https://cve.now/CVE-2026-59805.md): Gumroad \< 2026.07.06.2 - Insecure Direct Object Reference in PurchasesController (CVSS 7.1, antiwork gumroad)
- [CVE-2026-59804](https://cve.now/CVE-2026-59804.md): Midscene Bridge Server - Session Hijack via Unauthenticated WebSocket (CVSS 7.6, web-infra-dev midscene)
- [CVE-2026-59803](https://cve.now/CVE-2026-59803.md): rpcx - Denial of Service via Gzip Decompression Bomb in Wire Protocol (CVSS 8.7, smallnest rpcx)
- [CVE-2026-59802](https://cve.now/CVE-2026-59802.md): PasswordPusher \< 2.8.1 - Redirect-Based XSS via data URI in URL Push Payload (CVSS 6.3, PasswordPusher)
- [CVE-2026-8649](https://cve.now/CVE-2026-8649.md): Institution scope bypass vulnerability in custom reports (CVSS 6.4, Progress MOVEit Transfer)
- [CVE-2026-58251](https://cve.now/CVE-2026-58251.md): NATS Server: Queue Subscribe Authz Bypass (CVSS 6.5, nats-io nats-server)
- [CVE-2026-55404](https://cve.now/CVE-2026-55404.md): yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output (CVSS 7.5, yt-dlp)
- [CVE-2026-60104](https://cve.now/CVE-2026-60104.md): Bitwarden Server \< 2026.6.0 Authorization Bypass via Admin Auth Request (CVSS 9.3, bitwarden server)
- [CVE-2026-59936](https://cve.now/CVE-2026-59936.md): pypdf: Possible infinite loop for not terminated inline images (CVSS 8.7, py-pdf pypdf · pypdf)
- [CVE-2026-59935](https://cve.now/CVE-2026-59935.md): pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter) (CVSS 8.7, py-pdf pypdf · pypdf)
- [CVE-2026-59939](https://cve.now/CVE-2026-59939.md): httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling (CVSS 7.5, httplib2)
- [CVE-2026-59947](https://cve.now/CVE-2026-59947.md): Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure) (CVSS 4.7, composer · composer/composer)
- [CVE-2026-59948](https://cve.now/CVE-2026-59948.md): Composer: Arbitrary file write outside vendor via malicious transitive package name (CVSS 7.0, composer · composer/composer)
- [CVE-2026-59819](https://cve.now/CVE-2026-59819.md): LiteLLM: Local file read via request-supplied OIDC file references (CVSS 2.1, BerriAI litellm · litellm)
- [CVE-2026-59946](https://cve.now/CVE-2026-59946.md): Composer: Path traversal in package bin field lets dependencies chmod arbitrary host files (CVSS 6.1, composer · composer/composer)
- [CVE-2026-59822](https://cve.now/CVE-2026-59822.md): LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback (CVSS 8.8, KEV, BerriAI litellm · litellm)
- [CVE-2026-44332](https://cve.now/CVE-2026-44332.md): Fiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizer (CVSS 5.3, gofiber fiber · github.com/gofiber/fiber/v3)
- [CVE-2026-59820](https://cve.now/CVE-2026-59820.md): LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CVSS 6.1, BerriAI litellm · litellm)
- [CVE-2026-53624](https://cve.now/CVE-2026-53624.md): Fiber: HSTS header never set in helmet middleware due to incorrect protocol check (CVSS 4.8, gofiber fiber · github.com/gofiber/fiber/v3 +1)
- [CVE-2026-44512](https://cve.now/CVE-2026-44512.md): ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs) (CVSS 5.5, onnx)
- [CVE-2026-55575](https://cve.now/CVE-2026-55575.md): LiquidJS: \`pop\` filter bypasses \`memoryLimit\` accounting that its array-filter siblings enforce (CVSS 8.2, harttle liquidjs · liquidjs)
- [CVE-2026-58501](https://cve.now/CVE-2026-58501.md): Zeep SSRF because Settings.forbid\_external is not enforced (CVSS 5.9, mvantellingen python-zeep · zeep)
- [CVE-2026-55760](https://cve.now/CVE-2026-55760.md): handlebars.java FileTemplateLoader Path Traversal (CVSS 7.5, jknack handlebars.java · com.github.jknack:handlebars)
- [CVE-2026-45045](https://cve.now/CVE-2026-45045.md): Fiber: X-Real-IP Spoofing via Header.Add() in BalancerForward (CVSS 5.3, gofiber fiber · github.com/gofiber/fiber/v3 +1)
- [CVE-2026-59821](https://cve.now/CVE-2026-59821.md): LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks (CVSS 2.1, BerriAI litellm · litellm)
- [CVE-2026-14373](https://cve.now/CVE-2026-14373.md): Nomad Docker driver Linux host namespace bypass (CVSS 7.7, HashiCorp Nomad)
- [CVE-2026-59937](https://cve.now/CVE-2026-59937.md): pypdf: Possible long runtimes for repeated malformed cross-reference entries (CVSS 6.9, py-pdf pypdf · pypdf)
- [CVE-2026-59938](https://cve.now/CVE-2026-59938.md): pypdf: Possible large memory usage for wrong image dimensions (CVSS 6.9, py-pdf pypdf · pypdf)
- [CVE-2026-14362](https://cve.now/CVE-2026-14362.md): Denial of service via crafted push/pull gossip message in memberlist (CVSS 4.9, HashiCorp Shared library)
- [CVE-2026-59731](https://cve.now/CVE-2026-59731.md): Astro 6.4.7 Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch (CVSS 8.2, withastro astro · astro)
- [CVE-2026-60102](https://cve.now/CVE-2026-60102.md): Horde VFS \< 3.0.1 OS Command Injection via Horde\_Vfs\_Smb Driver (CVSS 7.7, horde Vfs)
- [CVE-2026-59927](https://cve.now/CVE-2026-59927.md): Mistune directives/include: mutual \`.. include::\` recursion crashes the renderer with \`RecursionError\`, denial of service via two attacker-controlled markdown files (CVSS 5.3, lepture mistune · mistune)
- [CVE-2026-59928](https://cve.now/CVE-2026-59928.md): Mistune block\_parser: quadratic-time parsing on long lists of repeated reference-link definitions (CVSS 7.5, lepture mistune · mistune)
- [CVE-2026-59924](https://cve.now/CVE-2026-59924.md): Mistune: Arbitrary File Read via Include directive path traversal (CVSS 5.9, lepture mistune · mistune)
- [CVE-2026-59929](https://cve.now/CVE-2026-59929.md): Mistune renderers/html.safe\_url: HARMFUL\_PROTOCOLS list misses legacy and chained schemes that historically chain to \`javascript:\` execution (CVSS 6.1, lepture mistune · mistune)
- [CVE-2025-3110](https://cve.now/CVE-2025-3110.md): OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform H (CVSS 6.9, OpenVPN Access Server)
- [CVE-2026-59925](https://cve.now/CVE-2026-59925.md): inline\_parser: quadratic-time parsing on long runs of \`\*\*x\*\*\` and \`\*\*\*x\*\*\*\` emphasis pairs (CVSS 7.5, lepture mistune · mistune)
- [CVE-2026-59926](https://cve.now/CVE-2026-59926.md): Mistune: XSS via unescaped class option in Admonition directive (CVSS 5.3, lepture mistune · mistune)
- [CVE-2026-29009](https://cve.now/CVE-2026-29009.md): U-Boot \< 2026.07-rc2 Buffer Overflow in nfs\_readlink\_reply() via NFS READLINK (CVSS 8.8, u-boot)
- [CVE-2026-29008](https://cve.now/CVE-2026-29008.md): U-Boot 2026.04-rc3 Integer Underflow DoS via tcp\_rx\_state\_machine() (CVSS 8.7, u-boot)
- [CVE-2026-59923](https://cve.now/CVE-2026-59923.md): Mistune: XSS via percent-encoded javascript URI bypass in safe\_url() (CVSS 6.1, lepture mistune · mistune)
- [CVE-2026-59930](https://cve.now/CVE-2026-59930.md): Mistune toc / TableOfContents directive: heading IDs use predictable \`toc\_N\` numbering with no slugification, allowing collision with attacker-controlled \`id="toc\_N"\` content (CVSS 4.3, lepture mistune · mistune)
- [CVE-2026-59922](https://cve.now/CVE-2026-59922.md): Mistune plugins/formatting: quadratic-time parsing on long runs of \`~~x~~\`, \`==x==\`, and \`^^x^^\` markers (strikethrough / mark / insert) (CVSS 7.5, lepture mistune · mistune)
- [CVE-2026-29007](https://cve.now/CVE-2026-29007.md): U-Boot 2026.04-rc3 Out-of-Bounds Read in tcp\_rx\_state\_machine via tcp.c (CVSS 6.9, u-boot)
- [CVE-2026-59895](https://cve.now/CVE-2026-59895.md): Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utility (CVSS 6.1, honojs hono · hono)
- [CVE-2026-59896](https://cve.now/CVE-2026-59896.md): hono/jsx does not isolate context per request, leading to cross-request data disclosure (CVSS 6.5, honojs hono · hono)
- [CVE-2026-59897](https://cve.now/CVE-2026-59897.md): Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication (CVSS 4.8, honojs hono · hono)
- [CVE-2026-59892](https://cve.now/CVE-2026-59892.md): OpenTelemetry JavaScript: Denial of service in \`JaegerPropagator\` via unhandled exception on a malformed header (CVSS 7.5, open-telemetry opentelemetry-js · @opentelemetry/propagator…)
- [CVE-2026-59890](https://cve.now/CVE-2026-59890.md): setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+ (CVSS 6.1, pypa setuptools · setuptools)
- [CVE-2026-59261](https://cve.now/CVE-2026-59261.md): OpenClaw \< 2026.5.28 - Credential Override via Workspace Dotenv Files (CVSS 8.4, OpenClaw)
- [CVE-2026-59887](https://cve.now/CVE-2026-59887.md): linkify-it: Quadratic-complexity DoS via the \`mailto:\` validator scan-loop on attacker text (CVSS 7.5, markdown-it linkify-it · linkify-it)
- [CVE-2026-59883](https://cve.now/CVE-2026-59883.md): Guzzle: Cookie Disclosure and Injection via IP-Address Domains (CVSS 4.7, guzzle · guzzlehttp/guzzle)
- [CVE-2026-59882](https://cve.now/CVE-2026-59882.md): guzzlehttp/psr7: Host Confusion via Weak URI Host Validation (CVSS 4.2, guzzle psr7 · guzzlehttp/psr7)
- [CVE-2026-59879](https://cve.now/CVE-2026-59879.md): Immutable.js \`List\` 32-bit trie overflow → unrecoverable DoS (CVSS 8.7, immutable-js · immutable)
- [CVE-2026-42505](https://cve.now/CVE-2026-42505.md): Invoking Encrypted Client Hello privacy leak in crypto/tls (CVSS 5.3, Go standard library crypto/tls · stdlib)
- [CVE-2026-39822](https://cve.now/CVE-2026-39822.md): Root escape via symlink plus trailing slash in os (CVSS 7.8, Go standard library os · stdlib)
- [CVE-2026-59880](https://cve.now/CVE-2026-59880.md): Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set (CVSS 8.7, immutable-js · immutable)
- [CVE-2026-59262](https://cve.now/CVE-2026-59262.md): AFFiNE - Unauthorized Document Edit History Access via GraphQL histories Field (CVSS 7.1, affine monorepo)
- [CVE-2026-59725](https://cve.now/CVE-2026-59725.md): Socket.IO: Engine.IO Polling Transport Connection Exhaustion (CVSS 7.5, socketio engine.io · engine.io)
- [CVE-2026-59724](https://cve.now/CVE-2026-59724.md): Socket.IO: Engine.IO WebTransport SID DoS (CVSS 7.5, socketio socket.io · engine.io)
- [CVE-2026-59876](https://cve.now/CVE-2026-59876.md): protobufjs: Text Format string map parsing can mutate returned map object prototype (CVSS 4.8, protobufjs protobuf.js · protobufjs)
- [CVE-2026-59877](https://cve.now/CVE-2026-59877.md): protobufjs: Denial of Service via infinite loop in .proto option parsing (CVSS 5.3, protobufjs protobuf.js · protobufjs)
- [CVE-2026-53951](https://cve.now/CVE-2026-53951.md): Copier: trust-prefix bypass via path traversal runs tasks unprompted (CVSS 8.8, copier-org copier · copier)
- [CVE-2026-59871](https://cve.now/CVE-2026-59871.md): node-tar: Process crash via PAX numeric path type confusion (CVSS 5.3, isaacs node-tar · tar)
- [CVE-2026-9074](https://cve.now/CVE-2026-9074.md): IBM API Connect SQL Injection (CVSS 9.1, IBM API Connect)
- [CVE-2026-59874](https://cve.now/CVE-2026-59874.md): node-tar: Negative tar entry size causes infinite loop in archive replace (CVSS 8.7, isaacs node-tar · tar)
- [CVE-2026-59873](https://cve.now/CVE-2026-59873.md): node-tar: Decompression/parse DoS via unlimited input (CVSS 9.2, isaacs node-tar · tar)
- [CVE-2026-3144](https://cve.now/CVE-2026-3144.md): IBM API Connect Default Credentials (CVSS 8.1, IBM API Connect)
- [CVE-2026-59875](https://cve.now/CVE-2026-59875.md): node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records (CVSS 5.3, isaacs node-tar · tar)
- [CVE-2026-59868](https://cve.now/CVE-2026-59868.md): js-yaml: YAML merge-key chains can force quadratic CPU consumption (CVSS 5.3, nodeca js-yaml · js-yaml)
- [CVE-2026-59869](https://cve.now/CVE-2026-59869.md): js-yaml: YAML merge-key chains can force quadratic CPU consumption (CVSS 7.5, nodeca js-yaml · js-yaml)
- [CVE-2026-59870](https://cve.now/CVE-2026-59870.md): js-yaml quadratic-complexity denial of service via YAML11\_SCHEMA !!omap parsing (CVSS 7.5, nodeca js-yaml · js-yaml)
- [CVE-2026-54344](https://cve.now/CVE-2026-54344.md): ToolJet GitHub Actions comment body shell injection exposes deployment secrets (CVSS 4.7, ToolJet)
- [CVE-2026-59702](https://cve.now/CVE-2026-59702.md): repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack (CVSS 9.2, repomix)
- [CVE-2026-55761](https://cve.now/CVE-2026-55761.md): Portainer: Unauthenticated Restore Endpoint Allows Admin Takeover on Uninitialised Portainer Instances (CVSS 7.1, portainer · github.com/portainer/portainer)
- [CVE-2026-14967](https://cve.now/CVE-2026-14967.md): Path traversal in github\_workflows allows writing artifacts outside output directory (CVSS 3.1, Black Lantern Security BBOT · bbot)
- [CVE-2026-14966](https://cve.now/CVE-2026-14966.md): Symlink guard bypass in unarchive module allows planting symlinks during extraction (CVSS 3.1, Black Lantern Security BBOT · bbot)
- [CVE-2026-57439](https://cve.now/CVE-2026-57439.md): CyberChef: Prototype pollution in Series Chart operation (CVSS 5.0, gchq CyberChef · cyberchef)
- [CVE-2026-15063](https://cve.now/CVE-2026-15063.md): Trustyai-service-operator: trustyai service operator: gorch port bypass when auth is enabled (CVSS 6.3, trustyai-explainability trustyai-service-operator · Red Hat…)
- [CVE-2026-49147](https://cve.now/CVE-2026-49147.md): App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes (CVSS 7.5, PETDANCE App::Ack)
- [CVE-2026-49146](https://cve.now/CVE-2026-49146.md): App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrc (CVSS 7.5, PETDANCE App::Ack)
- [CVE-2026-59703](https://cve.now/CVE-2026-59703.md): repomix - Local File Inclusion via file:// URL Scheme in Git Clone Endpoint (CVSS 8.7, repomix)
- [CVE-2026-55668](https://cve.now/CVE-2026-55668.md): File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope (CVSS 6.3, filebrowser · github.com/filebrowser/filebrowser +1)
- [CVE-2026-49145](https://cve.now/CVE-2026-49145.md): App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc (CVSS 7.5, PETDANCE App::Ack)
- [CVE-2026-54652](https://cve.now/CVE-2026-54652.md): Frigate viewer can read logs exposing admin and camera credentials (CVSS 8.1, blakeblackshear frigate)
- [CVE-2026-55873](https://cve.now/CVE-2026-55873.md): SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets (CVSS 4.3, seaweedfs · github.com/seaweedfs/seaweedfs)
- [CVE-2026-55874](https://cve.now/CVE-2026-55874.md): SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read (CVSS 7.7, seaweedfs · github.com/seaweedfs/seaweedfs)
- [CVE-2026-15067](https://cve.now/CVE-2026-15067.md): Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover (CVSS 8.8, Terraform Provider for Snowflake)
- [CVE-2026-15044](https://cve.now/CVE-2026-15044.md): Trustyai-service-operator: trustyai service operator: unauthenticated access to ai guardrails and orchestrator apis (CVSS 6.3, trustyai-service-operator · Red Hat OpenShift AI)
- [CVE-2026-15062](https://cve.now/CVE-2026-15062.md): SQL Injection in Snowflake Snowpark Python SDK (CVSS 9.6, Snowflake Snowpark Python SDK)
- [CVE-2026-15036](https://cve.now/CVE-2026-15036.md): Harness gitspaces Endpoint list\_all.go getAuthorizedSpaces authorization (CVSS 5.3, Harness)
- [CVE-2026-11903](https://cve.now/CVE-2026-11903.md): Stored XSS in MOVEit Transfer Ad Hoc module (CVSS 8.0, Progress MOVEit Transfer)
- [CVE-2026-10699](https://cve.now/CVE-2026-10699.md): Memory leak in SFTP service can result in a denial of service in MOVEit Transfer (CVSS 7.5, Progress MOVEit Transfer)
- [CVE-2026-10698](https://cve.now/CVE-2026-10698.md): Table scope bypass vulnerability in custom reports (CVSS 7.2, Progress MOVEit Transfer)
- [CVE-2026-10706](https://cve.now/CVE-2026-10706.md): Exposure of Sensitive Information to an Unauthorized attacker (CVSS 7.5, Adalo No-Code App Builder App Builder)
- [CVE-2026-10708](https://cve.now/CVE-2026-10708.md): Insufficiently Protected Credentials (CVSS 7.5, Adalo No-Code App Builder App Builder)
- [CVE-2026-15035](https://cve.now/CVE-2026-15035.md): bentoml OpenLLM Model Repository Directory Name common.py async\_run\_command command injection (CVSS 4.8, bentoml OpenLLM · bentoml)
- [CVE-2026-60092](https://cve.now/CVE-2026-60092.md): AVideo - Stored Cross-Site Scripting via Unescaped User-Agent in Participants Panel (CVSS 5.1, AVideo · wwbn/avideo)
- [CVE-2026-59257](https://cve.now/CVE-2026-59257.md): n8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolation (CVSS 5.3, n8n)
- [CVE-2026-59253](https://cve.now/CVE-2026-59253.md): n8n - Improper Authorization in Workflow Assignment to Folders (CVSS 5.3, n8n)
- [CVE-2026-58657](https://cve.now/CVE-2026-58657.md): Grav - Stored CSS Injection via Markdown Image resize() Action (CVSS 4.8, Grav · getgrav/grav)
- [CVE-2026-58656](https://cve.now/CVE-2026-58656.md): Grav API Plugin - Cross-Origin Admin Account Takeover via CORS Wildcard and JWT Query Parameter (CVSS 8.7, getgrav grav)
- [CVE-2026-58654](https://cve.now/CVE-2026-58654.md): Grav - Arbitrary File Upload via Avatar Endpoint (CVSS 5.3, Grav)
- [CVE-2026-56778](https://cve.now/CVE-2026-56778.md): n8n - Authorization Bypass in Public API Execution Retry Endpoint (CVSS 5.3, n8n)
- [CVE-2026-56776](https://cve.now/CVE-2026-56776.md): n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint (CVSS 5.3, n8n)
- [CVE-2026-56775](https://cve.now/CVE-2026-56775.md): n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints (CVSS 5.3, n8n)
- [CVE-2026-56374](https://cve.now/CVE-2026-56374.md): ImageMagick - Heap Buffer Overflow in FTXT Encoder via format Parameter (CVSS 4.8, ImageMagick · Magick.NET-Q16-AnyCPU +17)
- [CVE-2026-56362](https://cve.now/CVE-2026-56362.md): ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization (CVSS 2.1, ImageMagick · Magick.NET-Q16-AnyCPU +18)
- [CVE-2026-56360](https://cve.now/CVE-2026-56360.md): n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger (CVSS 6.3, n8n)
- [CVE-2026-56359](https://cve.now/CVE-2026-56359.md): n8n - Cross-Site Scripting in Credential Management OAuth2 Authorization URL (CVSS 4.8, n8n)
- [CVE-2026-56298](https://cve.now/CVE-2026-56298.md): Capgo - EXIF Metadata Exposure in App Information Image Upload (CVSS 5.3, Capgo)
- [CVE-2026-56297](https://cve.now/CVE-2026-56297.md): FreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback (CVSS 8.3, FreeRDP)
- [CVE-2026-56293](https://cve.now/CVE-2026-56293.md): Capgo - Stale Cross-Organization Authorization via Incomplete deploy\_history Update in transfer\_app() (CVSS 5.3, Capgo)
- [CVE-2026-56284](https://cve.now/CVE-2026-56284.md): Capgo - Unauthenticated Metrics Disclosure via get\_total\_metrics RPC (CVSS 6.9, Cap-go capgo)
- [CVE-2026-56283](https://cve.now/CVE-2026-56283.md): Capgo - HTML Injection Leading to Open Redirection in Organization Settings (CVSS 4.8, Capgo)
- [CVE-2026-56273](https://cve.now/CVE-2026-56273.md): Flowise - Path Traversal in Vector Store basePath Parameter (CVSS 4.9, Flowise · flowise-components)
- [CVE-2026-56250](https://cve.now/CVE-2026-56250.md): Capgo - Arbitrary R2 Object Deletion via Mutable r2\_path in app\_versions (CVSS 8.7, Capgo)
- [CVE-2026-56246](https://cve.now/CVE-2026-56246.md): Capgo - Cross-Organization Authorization Bypass via Scoped API Key Privilege Inheritance (CVSS 7.2, Capgo)
- [CVE-2026-56226](https://cve.now/CVE-2026-56226.md): Capgo - Unauthenticated Organization Data Disclosure via get\_orgs\_v6 RPC (CVSS 8.7, Cap-go capgo)
- [CVE-2026-56220](https://cve.now/CVE-2026-56220.md): Capgo - Unauthorized Manifest Insertion via Read-Only Org Member (CVSS 7.1, Capgo)
- [CVE-2026-56217](https://cve.now/CVE-2026-56217.md): Capgo - Encrypted Bundle Policy Bypass via Direct PostgREST Update (CVSS 5.3, Capgo)
- [CVE-2026-15053](https://cve.now/CVE-2026-15053.md): Tanium addressed a denial of service vulnerability in Tanium Server. (CVSS 7.5, Tanium Server)
- [CVE-2026-53480](https://cve.now/CVE-2026-53480.md): Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1 (CVSS 2.7, Dell PowerProtect Data Domain)
- [CVE-2026-53482](https://cve.now/CVE-2026-53482.md): Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1 (CVSS 7.5, Dell PowerProtect Data Domain)
- [CVE-2026-22927](https://cve.now/CVE-2026-22927.md): Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability. (CVSS 7.8, Omnissa Workspace ONE® Tunnel for Windows)
- [CVE-2026-60125](https://cve.now/CVE-2026-60125.md): importModule function in MISP ignores per-organisation import module restrictions (CVSS 5.3, misp)
- [CVE-2026-56086](https://cve.now/CVE-2026-56086.md): Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1 (CVSS 8.8, Dell PowerProtect Data Domain)
- [CVE-2026-60124](https://cve.now/CVE-2026-60124.md): MISP importModule missing authorization allows read-only users to modify events via misp\_standard imports (CVSS 5.3, misp)
- [CVE-2026-15034](https://cve.now/CVE-2026-15034.md): flask-dashboard Flask-MonitoringDashboard cross-site request forgery (CVSS 5.3, flask-dashboard Flask-MonitoringDashboard)
- [CVE-2026-44840](https://cve.now/CVE-2026-44840.md): Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query (CVSS 7.5, dgraph-io dgraph · github.com/dgraph-io/dgraph +2)
- [CVE-2026-41122](https://cve.now/CVE-2026-41122.md): Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1 (CVSS 7.1, Dell PowerProtect Data Domain)
- [CVE-2026-54061](https://cve.now/CVE-2026-54061.md): Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import (CVSS 9.1, dgraph-io dgraph · github.com/dgraph-io/dgraph +1)
- [CVE-2026-15033](https://cve.now/CVE-2026-15033.md): christopherthielen check-peer-dependencies peerDependencies packageUtils.js shelljs.exec os command injection (CVSS 5.3, christopherthielen check-peer-dependencies)
- [CVE-2026-58480](https://cve.now/CVE-2026-58480.md): Blocksy Companion Pro \< 2.1.47 Unauthenticated File Upload via save\_attachments (CVSS 9.2, Creative Themes Blocksy Companion)
- [CVE-2026-6740](https://cve.now/CVE-2026-6740.md): Nexter Blocks \<= 4.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'commentIcon' Block Attribute (CVSS 6.4, posimyththemes Nexter Blocks – Gutenberg Blocks, Page Build…)
- [CVE-2026-6820](https://cve.now/CVE-2026-6820.md): VikBooking Hotel Booking Engine & PMS \<= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via Booking Form Email Field (CVSS 7.2, e4jvikwp VikBooking Hotel Booking Engine & PMS)
- [CVE-2026-12002](https://cve.now/CVE-2026-12002.md): Smash Balloon Social Photo Feed – Easy Social Feeds Plugin \<= 6.11.1 - Cross-Site Request Forgery to oEmbed Access Token Overwrite via 'sbi\_access\_token' Parameter (CVSS 4.7, smub Smash Balloon Social Photo Feed – Easy Social Feeds Pl…)
- [CVE-2026-5459](https://cve.now/CVE-2026-5459.md): User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration \<= 4.3.1 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Subscription Overwrite (CVSS 5.3, wedevs User Frontend: AI Powered Frontend Posting, User Dir…)
- [CVE-2026-6459](https://cve.now/CVE-2026-6459.md): Essential Addons for Elementor \<= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup (CVSS 6.4, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2026-5356](https://cve.now/CVE-2026-5356.md): LatePoint - Calendar Booking Plugin for Appointments and Events \<= 5.4.0 - Unauthenticated Stripe PaymentIntent Amount-Binding Bypass (CVSS 7.5, LatePoint – Calendar Booking Plugin for Appointments and Ev…)
- [CVE-2026-14454](https://cve.now/CVE-2026-14454.md): Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed (CVSS 9.8, TONYC Imager)
- [CVE-2026-8315](https://cve.now/CVE-2026-8315.md): Stored XSS in Webbeyaz's Mediküm Web (CVSS 5.4, Webbeyaz Web Design Mediküm Web)
- [CVE-2026-8310](https://cve.now/CVE-2026-8310.md): Reflected XSS in Webbeyaz's Mediküm Web (CVSS 6.1, Webbeyaz Web Design Mediküm Web)
- [CVE-2026-8307](https://cve.now/CVE-2026-8307.md): SQLi in Webbeyaz's Mediküm Web (CVSS 9.8, Webbeyaz Web Design Mediküm Web)
- [CVE-2026-6371](https://cve.now/CVE-2026-6371.md): Stored XSS in Limatek's LimRAD NAC (CVSS 4.8, Limatek System LimRAD NAC)
- [CVE-2026-41042](https://cve.now/CVE-2026-41042.md): Apache Gravitino: Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server via H2's INIT parameter (CVSS 9.1, Apache Software Foundation Apache Gravitino)
- [CVE-2026-3688](https://cve.now/CVE-2026-3688.md): WCFM - WooCommerce Multivendor Membership \<= 2.11.10 - Insecure Direct Object Reference to Limited Privilege Escalation via User Role Overwrite (CVSS 8.1, wclovers WCFM Membership – WooCommerce Memberships for Mult…)
- [CVE-2026-6742](https://cve.now/CVE-2026-6742.md): Advanced iFrame \<= 2026.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block 'additional' Attribute (CVSS 6.4, mdempfle Advanced iFrame)
- [CVE-2025-14785](https://cve.now/CVE-2025-14785.md): Website Builder by SeedProd - Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode \<= 6.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'seedprodnestedmenuwidget' Shortcode (CVSS 6.4, Website Builder by SeedProd — Theme Builder, Landing Page B…)
- [CVE-2026-6854](https://cve.now/CVE-2026-6854.md): My Calendar \<= 3.7.8 - Unauthenticated SQL Injection via 'mc\_auth' and 'mc\_host' Parameters (CVSS 7.5, joedolson My Calendar – Accessible Event Manager)
- [CVE-2026-14250](https://cve.now/CVE-2026-14250.md): Themehunk Login Registration \<= 1.0.2 - Unauthenticated Privilege Escalation via 'role' Parameter (CVSS 6.3, themehunk TH Login Registration)
- [CVE-2026-12936](https://cve.now/CVE-2026-12936.md): Recurio \<= 1.1.3 - Authenticated (Shop Manager+) SQL Injection via 'data' Parameter (CVSS 4.9, devitemsllc Recurio – Ultimate Subscription for WooCommerce)
- [CVE-2026-6230](https://cve.now/CVE-2026-6230.md): Tainacan \<= 1.0.3 - Unauthenticated SQL Injection via 'geoquery' REST API Parameter (CVSS 7.5, Tainacan)
- [CVE-2026-6818](https://cve.now/CVE-2026-6818.md): VikBooking Hotel Booking Engine & PMS \<= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via 'special\_requests' Parameter (CVSS 7.2, e4jvikwp VikBooking Hotel Booking Engine & PMS)
- [CVE-2026-15041](https://cve.now/CVE-2026-15041.md): 389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification (CVSS 3.7, Red Hat Directory Server · Red Hat Enterprise Linux)
- [CVE-2026-56003](https://cve.now/CVE-2026-56003.md): libXfont2 computeProps Property Buffer Heap Buffer Overflow (CVSS 8.5, X.Org libXfont2)
- [CVE-2026-56002](https://cve.now/CVE-2026-56002.md): libXfont2 PCF Font Parsing Heap Buffer Overflow (CVSS 8.5, X.Org libXfont2)
- [CVE-2026-56001](https://cve.now/CVE-2026-56001.md): libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVSS 8.5, X.Org libXfont2)
- [CVE-2026-6280](https://cve.now/CVE-2026-6280.md): Improper Access Control in Nomysoft Informatics' Nomysem (CVSS 6.5, NOMYSOFT Informatics Education and Consulting Nomysem)
- [CVE-2026-55999](https://cve.now/CVE-2026-55999.md): xorg-server / xwayland glamor font atlas Heap Buffer Overflow (CVSS 8.5, X.Org xorg-server · X.Org xwayland)
- [CVE-2026-13126](https://cve.now/CVE-2026-13126.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-13127](https://cve.now/CVE-2026-13127.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-13128](https://cve.now/CVE-2026-13128.md): Foxit PDF Editor/Reader Doc Object Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57239](https://cve.now/CVE-2026-57239.md): Foxit PDF Editor/Reader Local Privilege Escalation (CVSS 8.2, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57240](https://cve.now/CVE-2026-57240.md): Foxit PDF Editor/Reader Form Field Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-13129](https://cve.now/CVE-2026-13129.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57238](https://cve.now/CVE-2026-57238.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57241](https://cve.now/CVE-2026-57241.md): Foxit PDF Editor/Reader Page Out-of-bounds Read Vulnerability (CVSS 6.1, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57242](https://cve.now/CVE-2026-57242.md): Foxit PDF Editor/Reader Page Use-After-Free Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57243](https://cve.now/CVE-2026-57243.md): Foxit PDF Editor/Reader Page Out-of-bounds Read Vulnerability (CVSS 6.1, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57245](https://cve.now/CVE-2026-57245.md): Foxit PDF Editor/Reader Signature Hyperlink Use-After-Free Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57246](https://cve.now/CVE-2026-57246.md): Foxit PDF Editor/Reader Signature Buffer Overflow Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57248](https://cve.now/CVE-2026-57248.md): Foxit PDF Editor/Reader Annotation Improper Release Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57249](https://cve.now/CVE-2026-57249.md): Foxit PDF Editor/Reader Annotation Use-After-Free Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57251](https://cve.now/CVE-2026-57251.md): Foxit PDF Editor/Reader Cloud Appearance Buffer Overflow Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-56000](https://cve.now/CVE-2026-56000.md): xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() (CVSS 9.0, X.Org xorg-x11-server · X.Org xwayland)
- [CVE-2026-57253](https://cve.now/CVE-2026-57253.md): Foxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 6.1, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57252](https://cve.now/CVE-2026-57252.md): Foxit PDF Editor/Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57254](https://cve.now/CVE-2026-57254.md): Foxit PDF Editor/Reader Annotation Type Confusion Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57255](https://cve.now/CVE-2026-57255.md): Security vulnerability in Foxit PDF Editor/Reader — OOB Read via NaN-Bypass Clamp (CVSS 6.1, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57259](https://cve.now/CVE-2026-57259.md): Foxit PDF Editor/Reader XDP XFA XXE arbitrary local file read (CVSS 6.5, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57237](https://cve.now/CVE-2026-57237.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57244](https://cve.now/CVE-2026-57244.md): Foxit PDF Editor/Reader Form Control Use-After-Free Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57247](https://cve.now/CVE-2026-57247.md): Foxit PDF Editor/Reader Field Use-After-Free Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57250](https://cve.now/CVE-2026-57250.md): Foxit PDF Editor/Reader Form Field Use-After-Free Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57256](https://cve.now/CVE-2026-57256.md): Foxit Editor/Reader List Box Format Use-After-Free Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57257](https://cve.now/CVE-2026-57257.md): Security vulnerability in Foxit PDF Editor/Reader — PRC 3D BRep Renderer Heap OOB Read (CVSS 6.1, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57258](https://cve.now/CVE-2026-57258.md): Foxit PDF Editor/Reader Crash via Malformed PRC 3D Stream (CVSS 6.1, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-57260](https://cve.now/CVE-2026-57260.md): Security vulnerability in Foxit PDF Editor/Reader — U3D Adobe Mesh Decompression (Type Confusion / Invalid Pointer Dereference) (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2026-12378](https://cve.now/CVE-2026-12378.md): BookingPress \<= 1.1.28 - Unauthenticated PHP Object Injection (CVSS 8.1, Appointment Booking Calendar Plugin and Scheduling Plugin)
- [CVE-2026-9695](https://cve.now/CVE-2026-9695.md): Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 (CVSS 9.8, Dassault Systèmes DELMIA Apriso)
- [CVE-2026-10570](https://cve.now/CVE-2026-10570.md): Sympl Repeater for ACF and Elementor \<= 2.3 - Authenticated (Author+) Stored Cross-Site Scripting via ACF Repeater Field Values (CVSS 6.4, idocoh Sympl Repeater for ACF and Elementor)
- [CVE-2026-14500](https://cve.now/CVE-2026-14500.md): Bulk Order Update for WooCommerce \<= 1.6 - Unauthenticated Arbitrary File Read via 'csv\_url' Parameter (CVSS 5.3, sayantandas20 Bulk Order Update for WooCommerce)
- [CVE-2026-14489](https://cve.now/CVE-2026-14489.md): WHMCS Bridge \<= 6.9 - Unauthenticated Arbitrary File Upload via 'ccce' Parameter (CVSS 8.8, globalprogramming WHMCS Bridge)
- [CVE-2026-9731](https://cve.now/CVE-2026-9731.md): Wp Js Detect \<= 1.0.9 - Cross-Site Request Forgery to Plugin Settings Update (CVSS 4.3, wpkuf Wp Js Detect)
- [CVE-2026-12153](https://cve.now/CVE-2026-12153.md): WP Learn Manager \<= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation and Activation via jslearnmanager\_ajax AJAX Action (CVSS 9.8, rabilal WP Learn Manager)
- [CVE-2026-12041](https://cve.now/CVE-2026-12041.md): Chatra Live Chat + ChatBot + Cart Saver \<= 1.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'chatra-code' Setting (CVSS 4.4, Chatra Live Chat + ChatBot + Cart Saver)
- [CVE-2026-9700](https://cve.now/CVE-2026-9700.md): Eventer \<= 4.4.2 - Unauthenticated SQL Injection via 'code' Parameter (CVSS 7.5, joe007 Eventer)
- [CVE-2026-12097](https://cve.now/CVE-2026-12097.md): User Management \<= 1.2 - Missing Authorization to Unauthenticated Plugin Settings Modification (CVSS 5.3, saadiqbal User Management)
- [CVE-2026-11798](https://cve.now/CVE-2026-11798.md): Social Share, Social Login and Social Comments Plugin \<= 7.14.5 - Reflected Cross-Site Scripting via 'heateor\_mastodon\_share' Parameter (CVSS 6.1, the\_champ Social Share, Social Login and Social Comments Pl…)
- [CVE-2026-14495](https://cve.now/CVE-2026-14495.md): DoLogin Security \<= 4.3 - Unauthenticated Authentication Bypass via Insufficient Randomness via 'dologin' Parameter Weak PRNG Token (CVSS 8.8, wpdo5ea DoLogin Security)
- [CVE-2026-57895](https://cve.now/CVE-2026-57895.md): Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. (CVSS 7.8, Fuji Electric Co. Pupsman)
- [CVE-2026-56437](https://cve.now/CVE-2026-56437.md): Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. (CVSS 7.8, Fuji Electric Co. Pupsman)
- [CVE-2026-14487](https://cve.now/CVE-2026-14487.md): Simple Coherent Form \<= 2.4.13 - Unauthenticated Arbitrary File Deletion via 'id' Parameter (CVSS 9.1, tombgtn Simple Coherent Form)
- [CVE-2026-9701](https://cve.now/CVE-2026-9701.md): Eventer \<= 4.4.2 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation (CVSS 9.8, joe007 Eventer)
- [CVE-2026-14482](https://cve.now/CVE-2026-14482.md): 多说社会化评论框 \<= 1.2 - Unauthenticated Privilege Escalation via api.php 'option'/'value' Parameters (CVSS 8.8, shen2 多说社会化评论框)
- [CVE-2026-14158](https://cve.now/CVE-2026-14158.md): Widget Logic Visual \<= 1.52 - Authenticated (Subscriber+) Remote Code Execution via 'nwlv\[cod-tag\]' Parameter (CVSS 8.8, totalbounty Widget Logic Visual)
- [CVE-2026-9842](https://cve.now/CVE-2026-9842.md): Backstage \<= 1.4.2 - Unauthenticated Privilege Escalation via Permissive Demo Role Capabilities (CVSS 7.5, pixelgrade Backstage – Customizer Demo Access)
- [CVE-2026-14244](https://cve.now/CVE-2026-14244.md): Jssor Slider by jssor.com \<= 3.1.24 - Unauthenticated Arbitrary File Read via 'url' Parameter (CVSS 7.5, Jssor Slider by jssor.com)
- [CVE-2026-55438](https://cve.now/CVE-2026-55438.md): Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing (CVSS 5.8, coder · github.com/coder/coder +1)
- [CVE-2026-55437](https://cve.now/CVE-2026-55437.md): Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component (CVSS 5.4, coder · github.com/coder/coder +1)
- [CVE-2026-55436](https://cve.now/CVE-2026-55436.md): Coder's AI Bridge Proxy skips TLS certificate verification in default configuration (CVSS 7.4, coder · github.com/coder/coder +1)
- [CVE-2026-55433](https://cve.now/CVE-2026-55433.md): Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers (CVSS 5.4, coder · github.com/coder/coder/v2 +1)
- [CVE-2026-55432](https://cve.now/CVE-2026-55432.md): Coder's sub-agent app registration bypasses template port-sharing policy enforcement (CVSS 5.4, coder · github.com/coder/coder/v2 +1)
- [CVE-2026-60002](https://cve.now/CVE-2026-60002.md): ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (CVSS 7.7, OpenBSD OpenSSH)
- [CVE-2026-60001](https://cve.now/CVE-2026-60001.md): sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. (CVSS 6.5, OpenBSD OpenSSH)
- [CVE-2026-56843](https://cve.now/CVE-2026-56843.md): Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domai (CVSS 9.9, Webpros Plesk)
- [CVE-2026-60000](https://cve.now/CVE-2026-60000.md): sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempt (CVSS 3.7, OpenBSD OpenSSH)
- [CVE-2026-59999](https://cve.now/CVE-2026-59999.md): In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not. (CVSS 5.9, OpenBSD OpenSSH)
- [CVE-2026-59998](https://cve.now/CVE-2026-59998.md): sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windo (CVSS 4.8, OpenBSD OpenSSH)
- [CVE-2026-55431](https://cve.now/CVE-2026-55431.md): Coder's session token leaked to arbitrary hosts via \`coder open app\` for external workspace apps (CVSS 7.7, coder · github.com/coder/coder +1)
- [CVE-2026-59997](https://cve.now/CVE-2026-59997.md): internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-l (CVSS 4.2, OpenBSD OpenSSH)
- [CVE-2026-59996](https://cve.now/CVE-2026-59996.md): scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destina (CVSS 4.2, OpenBSD OpenSSH)
- [CVE-2026-59995](https://cve.now/CVE-2026-59995.md): sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker (CVSS 4.2, OpenBSD OpenSSH)
- [CVE-2026-55430](https://cve.now/CVE-2026-55430.md): Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access (CVSS 5.8, coder · github.com/coder/coder/v2 +1)
- [CVE-2026-55429](https://cve.now/CVE-2026-55429.md): Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID (CVSS 8.7, coder · github.com/coder/coder +1)
- [CVE-2026-24697](https://cve.now/CVE-2026-24697.md): An OS command injection vulnerability exists in the start\_bonjour() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 (CVSS 7.2)
- [CVE-2026-24698](https://cve.now/CVE-2026-24698.md): An OS command injection vulnerability exists in the save\_syslog\_to\_file() function of the "httpd" binary in Cisco RV130/RV130W with firmware (CVSS 7.2)
- [CVE-2026-24699](https://cve.now/CVE-2026-24699.md): An OS command injection vulnerability exists in the sub\_34984() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and (CVSS 7.2)
- [CVE-2026-24700](https://cve.now/CVE-2026-24700.md): An OS command injection vulnerability exists in the start\_lltd() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 an (CVSS 7.2)
- [CVE-2026-31309](https://cve.now/CVE-2026-31309.md): Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node from v1.21.1-rc0 before v1.36.0 allows an unauthenticated at (CVSS 9.8)
- [CVE-2026-35552](https://cve.now/CVE-2026-35552.md): In CAXperts UPVWebServices 2.4.2212.603 through 2.7.6 and UDiTH Portal 2026.0.0 through 2026.2.0, an authenticated remote user can invoke an (CVSS 8.1)
- [CVE-2026-36027](https://cve.now/CVE-2026-36027.md): An issue in Code27 Companion Hub SQ3A.220705.003.A1 allows a physically proximate attacker to execute arbitrary code via the USB debugging ( (CVSS 6.8)
- [CVE-2026-36028](https://cve.now/CVE-2026-36028.md): A protection mechanism failure in the Code 27 Companion Hub allows an attacker with physical access to completely bypass kiosk restrictions (CVSS 6.8)
- [CVE-2026-39178](https://cve.now/CVE-2026-39178.md): A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via the search parameter (CVSS 6.3)
- [CVE-2026-39179](https://cve.now/CVE-2026-39179.md): A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via the newPassword param (CVSS 6.3)
- [CVE-2026-50812](https://cve.now/CVE-2026-50812.md): A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows (CVSS 5.5)
- [CVE-2026-50813](https://cve.now/CVE-2026-50813.md): An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension cha (CVSS 6.1)
- [CVE-2026-51535](https://cve.now/CVE-2026-51535.md): In OpENer 2.3.0 (commit 76b95cf), a resource exhaustion (Denial of Service) vulnerability exists in its network processing loop. (CVSS 7.5)
- [CVE-2026-52200](https://cve.now/CVE-2026-52200.md): An issue in Generic OEM UZ801\_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-07-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.