# CVEs published 2026-07-12

63 CVEs were published on July 12, 2026: 3 critical, 17 high. Days are UTC.

- [CVE-2026-15514](https://cve.now/CVE-2026-15514.md): Metasoft 美特软件 MetaCRM PHPRPC Remote Call rpc.jsp RPCService.query sql injection (CVSS 6.9, Metasoft 美特软件 MetaCRM)
- [CVE-2026-15513](https://cve.now/CVE-2026-15513.md): Wavlink WL-NU516U1 adm.cgi wlink\_uci\_set\_value os command injection (CVSS 5.3, Wavlink WL-NU516U1)
- [CVE-2026-15512](https://cve.now/CVE-2026-15512.md): pig-mesh Pig pig-codegen GeneratorServiceImpl.java code injection (CVSS 5.3, pig-mesh Pig)
- [CVE-2026-15511](https://cve.now/CVE-2026-15511.md): Comfast CF-WR631AX V3 FastCGI Backend webmgnt system\_wl\_upload\_pic\_file os command injection (CVSS 9.3, Comfast CF-WR631AX)
- [CVE-2026-15510](https://cve.now/CVE-2026-15510.md): Leantime API saveSetting improper authorization (CVSS 5.3, Leantime)
- [CVE-2026-15509](https://cve.now/CVE-2026-15509.md): Leantime JSON-RPC Endpoint addUser improper authorization (CVSS 5.3, Leantime)
- [CVE-2026-15508](https://cve.now/CVE-2026-15508.md): Helicone ai-gateway AWS Metadata Service service.rs build\_target\_url server-side request forgery (CVSS 5.3, Helicone ai-gateway)
- [CVE-2026-15507](https://cve.now/CVE-2026-15507.md): coollabsio Coolify Policy Policies authorization (CVSS 5.3, coollabsio Coolify)
- [CVE-2026-15506](https://cve.now/CVE-2026-15506.md): SecureAge CatchPulse Driver saappctl.sys heap-based overflow (CVSS 8.5, SecureAge CatchPulse)
- [CVE-2026-15505](https://cve.now/CVE-2026-15505.md): vnotex vnote YAML Frontmatter markdownit.js cross site scripting (CVSS 5.1, vnotex vnote)
- [CVE-2026-10668](https://cve.now/CVE-2026-10668.md): Host-triggerable control-endpoint wedge (DoS) in Nuvoton NuMaker HSUSBD UDC driver (CVSS 2.4, zephyrproject zephyr)
- [CVE-2026-10667](https://cve.now/CVE-2026-10667.md): SMP use-after-free in Zephyr \`CONFIG\_USERSPACE\` dynamic kernel-object tracking, reachable from unprivileged user threads (CVSS 7.8, zephyrproject zephyr)
- [CVE-2026-10666](https://cve.now/CVE-2026-10666.md): Stack buffer overflow in \`net\_ipaddr\_parse()\` IPv4 address-with-port parsing in \`subsys/net/ip/utils.c\` (CVSS 8.1, zephyrproject zephyr)
- [CVE-2026-10665](https://cve.now/CVE-2026-10665.md): Heap buffer overflow on WireGuard receive path via unbounded incoming packet length (CVSS 7.4, zephyrproject zephyr)
- [CVE-2026-10664](https://cve.now/CVE-2026-10664.md): Out-of-bounds write in nRF70 Wi-Fi driver power-save event handler (unbounded TWT flow count) (CVSS 5.0, zephyrproject zephyr)
- [CVE-2026-10663](https://cve.now/CVE-2026-10663.md): Use-after-free / double-free of the root USB device in the experimental USB host stack (CVSS 6.1, zephyrproject zephyr)
- [CVE-2026-58596](https://cve.now/CVE-2026-58596.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 8.3, Microsoft Edge)
- [CVE-2026-15502](https://cve.now/CVE-2026-15502.md): AojiaoZero Antaris PayPal IPN Payment ipn.php \_rewardPurchase sql injection (CVSS 5.3, AojiaoZero Antaris)
- [CVE-2026-15501](https://cve.now/CVE-2026-15501.md): AstrBotDevs AstrBot MCP Test Endpoint tools.py ToolsRoute.test\_mcp\_connection server-side request forgery (CVSS 5.3, AstrBotDevs AstrBot)
- [CVE-2026-61876](https://cve.now/CVE-2026-61876.md): LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting (CVSS 9.4, openwrt luci)
- [CVE-2026-61875](https://cve.now/CVE-2026-61875.md): luci-app-upnp Stored XSS via UPnP Port Mapping Description (CVSS 8.7, openwrt luci)
- [CVE-2026-61874](https://cve.now/CVE-2026-61874.md): filebrowser before 2.63.17 Stale Public Share via Trailing-Slash Delete (CVSS 2.3, filebrowser)
- [CVE-2026-59260](https://cve.now/CVE-2026-59260.md): OpenWrt luci-app-samba4 read ACL remote code execution via smbd (CVSS 8.7, openwrt luci)
- [CVE-2026-56336](https://cve.now/CVE-2026-56336.md): Capgo - Information Disclosure via Unauthenticated SSO check-domain Endpoint (CVSS 6.9, Capgo)
- [CVE-2026-56313](https://cve.now/CVE-2026-56313.md): Capgo - Cross-Organization Account Disruption via SSO Prelink Endpoint (CVSS 7.2, Capgo)
- [CVE-2026-56308](https://cve.now/CVE-2026-56308.md): Capgo - Insufficient Authentication in Email Change Endpoint (CVSS 8.4, Capgo)
- [CVE-2026-56281](https://cve.now/CVE-2026-56281.md): Capgo - SQL Injection via Unvalidated limit Parameter in Admin Stats Endpoint (CVSS 5.1, Capgo)
- [CVE-2026-56271](https://cve.now/CVE-2026-56271.md): Flowise - Weak Default JWT Secrets in Authentication Middleware (CVSS 9.3, Flowise)
- [CVE-2026-56260](https://cve.now/CVE-2026-56260.md): Crawl4AI - Arbitrary File Write via output\_path Parameter (CVSS 8.8, Crawl4AI)
- [CVE-2026-56259](https://cve.now/CVE-2026-56259.md): Crawl4AI - LLM Credential Exfiltration via base\_url and Environment Variable Resolution (CVSS 8.8, Crawl4AI)
- [CVE-2026-56252](https://cve.now/CVE-2026-56252.md): Capgo - Scope Isolation Failure in Webhook Test Endpoint (CVSS 5.3, Capgo)
- [CVE-2026-56241](https://cve.now/CVE-2026-56241.md): Capgo - RBAC Demotion Privilege Retention via Stale org\_users.user\_right (CVSS 7.2, Capgo)
- [CVE-2026-56238](https://cve.now/CVE-2026-56238.md): Capgo - Unauthenticated Information Disclosure via PostgREST global\_stats Endpoint (CVSS 8.7, Capgo)
- [CVE-2026-15500](https://cve.now/CVE-2026-15500.md): AstrBotDevs AstrBot market\_list Endpoint plugin.py get\_online\_plugins server-side request forgery (CVSS 5.3, AstrBotDevs AstrBot)
- [CVE-2026-15499](https://cve.now/CVE-2026-15499.md): AstrBotDevs AstrBot Scheduled Task cron\_tools.py FutureTaskTool.call improper authorization (CVSS 5.3, AstrBotDevs AstrBot)
- [CVE-2026-15498](https://cve.now/CVE-2026-15498.md): sergomanov SmartHomeAdatum Login users.php sql injection (CVSS 6.9, sergomanov SmartHomeAdatum)
- [CVE-2026-15497](https://cve.now/CVE-2026-15497.md): SonicCloudOrg sonic-agent JWT Authentication Filter ExchangeController.java code injection (CVSS 6.9, SonicCloudOrg sonic-agent)
- [CVE-2026-15496](https://cve.now/CVE-2026-15496.md): SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection (CVSS 5.3, SonicCloudOrg sonic-agent)
- [CVE-2026-15495](https://cve.now/CVE-2026-15495.md): SonicCloudOrg sonic-agent Android WebSocket Server AndroidWSServer.java os command injection (CVSS 5.3, SonicCloudOrg sonic-agent)
- [CVE-2026-15494](https://cve.now/CVE-2026-15494.md): AMTT Hotel Broadband Operation System switch\_status.php sql injection (CVSS 5.1, AMTT Hotel Broadband Operation System)
- [CVE-2026-15493](https://cve.now/CVE-2026-15493.md): Akpali9 Attendance-Management-System absent.php cross site scripting (CVSS 5.1, Akpali9 Attendance-Management-System)
- [CVE-2026-15492](https://cve.now/CVE-2026-15492.md): igweze wizgrade studentConductManager.php cross site scripting (CVSS 5.3, igweze wizgrade)
- [CVE-2026-15491](https://cve.now/CVE-2026-15491.md): RafyMrX TOKO-ONLINE-ROTI missing authentication (CVSS 6.9, RafyMrX TOKO-ONLINE-ROTI)
- [CVE-2026-15490](https://cve.now/CVE-2026-15490.md): RafyMrX TOKO-ONLINE-ROTI add.php sql injection (CVSS 6.9, RafyMrX TOKO-ONLINE-ROTI)
- [CVE-2026-15489](https://cve.now/CVE-2026-15489.md): RafyMrX TOKO-ONLINE-ROTI login.php sql injection (CVSS 6.9, RafyMrX TOKO-ONLINE-ROTI)
- [CVE-2026-15488](https://cve.now/CVE-2026-15488.md): hcr707305003 shiroiAdmin FileController.php upload unrestricted upload (CVSS 6.9, hcr707305003 shiroiAdmin)
- [CVE-2026-15487](https://cve.now/CVE-2026-15487.md): TRENDnet TEW-821DAP Firmware Update system\_ntp sub\_41FBD0 os command injection (CVSS 5.3, TRENDnet TEW-821DAP)
- [CVE-2026-15486](https://cve.now/CVE-2026-15486.md): TRENDnet TEW-821DAP Firmware Update tools\_ddns sub\_42026C os command injection (CVSS 5.3, TRENDnet TEW-821DAP)
- [CVE-2026-15485](https://cve.now/CVE-2026-15485.md): TRENDnet TEW-821DAP DNS Lookup tools\_nslookup sub\_43F2C4 os command injection (CVSS 5.3, TRENDnet TEW-821DAP)
- [CVE-2026-15484](https://cve.now/CVE-2026-15484.md): TRENDnet TEW-821DAP ssi tools\_nslookup sub\_41EC14 buffer overflow (CVSS 8.7, TRENDnet TEW-821DAP)
- [CVE-2026-15483](https://cve.now/CVE-2026-15483.md): TRENDnet TEW-821DAP ssi tools\_nslookup sub\_41EC14 buffer overflow (CVSS 8.7, TRENDnet TEW-821DAP)
- [CVE-2026-15482](https://cve.now/CVE-2026-15482.md): Aster Telecom Azcall HTTP sis.php sql injection (CVSS 6.9, Aster Telecom Azcall)
- [CVE-2026-15481](https://cve.now/CVE-2026-15481.md): Trendnet TEW-635BRM IPoA WAN Connection Setup rc ipoa\_test command injection (CVSS 8.7, Trendnet TEW-635BRM)
- [CVE-2026-15480](https://cve.now/CVE-2026-15480.md): Trendnet TEW-635BRM Web Service rc start\_httpd stack-based overflow (CVSS 8.7, Trendnet TEW-635BRM)
- [CVE-2026-15479](https://cve.now/CVE-2026-15479.md): H3C NX15 Administrator Password Modification Endpoint modify change\_passwd password recovery (CVSS 6.9, H3C NX15)
- [CVE-2026-15478](https://cve.now/CVE-2026-15478.md): IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection (CVSS 5.3, IceHRM)
- [CVE-2026-15477](https://cve.now/CVE-2026-15477.md): Bahmni bahmnicore Search Endpoint sql additionalParams sql injection (CVSS 5.3, bahmnicore)
- [CVE-2026-15476](https://cve.now/CVE-2026-15476.md): QILING Disk Master Kernel Driver diskbckp.sys access control (CVSS 4.8, QILING Disk Master)
- [CVE-2026-15475](https://cve.now/CVE-2026-15475.md): MiniTool Partition Wizard Signed Kernel Driver pwdrvio.sys access control (CVSS 4.8, MiniTool Partition Wizard)
- [CVE-2026-15474](https://cve.now/CVE-2026-15474.md): Eleveo Call Recording Software audio.jsp improper authorization (CVSS 5.3, Eleveo Call Recording Software)
- [CVE-2026-15473](https://cve.now/CVE-2026-15473.md): Eleveo Call Recording Software Recorded Calls restoreCallAction.do improper authorization (CVSS 5.3, Eleveo Call Recording Software)
- [CVE-2026-15472](https://cve.now/CVE-2026-15472.md): Eleveo Call Recording Software composeEmailAction.do improper authorization (CVSS 5.3, Eleveo Call Recording Software)
- [CVE-2026-15471](https://cve.now/CVE-2026-15471.md): Eleveo Call Recording Software pci\_dss\_status.jsp improper authorization (CVSS 5.3, Eleveo Call Recording Software)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-07-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.