CVEs published July 18, 2026
81 CVEs were published on July 18, 2026: 5 critical, 31 high.
- Published
- 81
- Critical
- 5
- High
- 31
- Medium
- 41
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 41
Most affected products
- surrealdb
- 15
- Sipeed PicoClaw
- 9
- surrealdb · surrealdb-core
- 8
- VMware Avi Load Balancer
- 7
- nextlevelbuilder GoClaw
- 6
- SourceCodester Class and Exam Timetabling System
- 4
- zevorn rt-claw
- 4
- AstrBotDevs AstrBot
- 3
- Shibby Tomato
- 3
- @fastify/http-proxy
- 2
Critical 5
- CVE-2026-9323Insecure PRNG and Information Exposure in urwid Web Display Backendurwid
- CVE-2025-71392SurrealDB before 2.2.2 SurrealQL Injection via exportsurrealdb
- CVE-2024-58366SurrealDB before 1.1.1 Format String via Scripting Functionssurrealdb · DelSkayn rquickjs
- CVE-2026-16117@fastify/http-proxy vulnerable to prefix escape via URL-encoded characters@fastify/http-proxy
- CVE-2026-47865VMware Avi Load Balancer Authentication Bypass VulnerabilityVMware Avi Load Balancer
High 31
- CVE-2026-10130QueryWeaver Authentication Bypass via Email Signup Token Issuance for Existing AccountsFalkorDB QueryWeaver
- CVE-2026-12228Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollmsparisneo/lollms
- CVE-2026-53994ProFTPD mod_sftp Heap Buffer Overflow via Unsigned Integer Underflow and Size TruncationProFTPD Project ProFTPD
- CVE-2026-11826OpenPLC_v3 Heap-Based Buffer Overflow in Modbus Master getData()openplcproject OpenPLC_v3
- CVE-2025-71397SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loopssurrealdb
- CVE-2025-71395SurrealDB before 2.2.2 Memory Exhaustion via string::replacesurrealdb
- CVE-2025-71391SurrealDB before 2.2.2 Denial of Service via /sql endpointsurrealdb
- CVE-2024-58370SurrealDB before 1.1.0 Uncontrolled Recursion Denial of Servicesurrealdb
- CVE-2024-58369SurrealDB before 1.1.1 Denial of Service via Global Parameterssurrealdb
- CVE-2024-58368SurrealDB before 1.1.0 Denial of Service via HTTP Headerssurrealdb
- CVE-2024-58367SurrealDB before 2.0.4 Improper Authorization via SELECT Permissionssurrealdb · surrealdb-core
- CVE-2024-58365SurrealDB before 1.2.0 Denial of Service via Nonexistent Functionsurrealdb
- CVE-2024-58364SurrealDB before 1.2.1 Denial of Service via Parsing Errorsurrealdb
- CVE-2024-58362SurrealDB before 1.5.5 Query Injection via RPC APIsurrealdb · surrealdb-core
- CVE-2024-58361SurrealDB before 2.0.4 Denial of Service via Parser Exceptionsurrealdb · surrealdb-core
- CVE-2024-58359SurrealDB before 2.1.0 Denial of Service via rand() Sortingsurrealdb · surrealdb-core
- CVE-2024-58357SurrealDB before 2.1.0 Denial of Service via rand::time()surrealdb · surrealdb-core
- CVE-2023-54366SurrealDB before 1.0.1 Insecure Default Table Permissionssurrealdb
- CVE-2026-59173Apache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditionsApache Software Foundation Apache Traffic Server
- CVE-2026-15631@fastify/http-proxy vulnerable to prefix escape via WebSocket path traversal@fastify/http-proxy
- CVE-2026-9147uproot 5.7.4 and prior Code Injection via TStreamerInfo Metadatascikit-hep uproot
- CVE-2026-16158@fastify/reply-from vulnerable to cross-upstream request routing via URL cache key collision@fastify/reply-from
- CVE-2026-16097Shibby Tomato Scheduler Name sub_42537C stack-based overflowShibby Tomato
- CVE-2026-16096Shibby Tomato webmon_recent_domains sub_40BB50 stack-based overflowShibby Tomato
- CVE-2026-16095Shibby Tomato rc setup_conntrack out-of-bounds writeShibby Tomato
- CVE-2026-47871VMware Avi Load Balancer Directory Traversal VulnerabilityVMware Avi Load Balancer
- CVE-2026-47870VMware Avi Load Balancer Privilege Escalation VulnerabilityVMware Avi Load Balancer
- CVE-2026-47869VMware Avi Load Balancer Remote Code Execution VulnerabilityVMware Avi Load Balancer
- CVE-2026-47868VMware Avi Load Balancer Local Privilege Escalation VulnerabilityVMware Avi Load Balancer
- CVE-2026-47867VMware Avi Load Balancer Remote Code Execution VulnerabilityVMware Avi Load Balancer
- CVE-2026-47866VMware Avi Load Balancer Authorization Bypass VulnerabilityVMware Avi Load Balancer
Medium, low and unrated 45
- CVE-2026-16198Sipeed PicoClaw First Run Setup access_control.go authentication bypassSipeed PicoClaw
- CVE-2026-16197Sipeed PicoClaw Group Message feishu_64.go handleMessageReceive authorizationSipeed PicoClaw
- CVE-2026-16196Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgerySipeed PicoClaw
- CVE-2026-16195Sipeed PicoClaw Group Message wecom.go dispatchIncoming authorizationSipeed PicoClaw
- CVE-2026-16194zhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgeryzhayujie CowAgent
- CVE-2026-16156SourceCodester Class and Exam Timetabling System forexam.php cross site scriptingSourceCodester Class and Exam Timetabling System
- CVE-2026-16155SourceCodester Class and Exam Timetabling System schoolyr.php cross site scriptingSourceCodester Class and Exam Timetabling System
- CVE-2026-57857Flow Payment Plugin for WordPress Reflected Cross-Site Scripting via error_message ParameterFlow Payment
- CVE-2026-16154SourceCodester Class and Exam Timetabling System edit_room1.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-16152SourceCodester Class and Exam Timetabling System edit_rooma.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-16151CartoDB carto-api-client filters.ts addFilter prototype pollutionCartoDB carto-api-client
- CVE-2026-57848Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validationstoatchat Stoat for Android
- CVE-2026-16150RobinHerbots Inputmask Internal Deep Merge Helper extend.js extendAliases prototype pollutionRobinHerbots Inputmask
- CVE-2026-16133LiuMengxuan04 MiniCode mcp.ts child_process.spawn command injectionLiuMengxuan04 MiniCode
- CVE-2026-16131itsourcecode Hospital Management System prescriptionrecord.php sql injectionitsourcecode Hospital Management System
- CVE-2026-16130nearai ironclaw write_file path_utils.rs validate_path link followingnearai ironclaw
- CVE-2026-16129princezuda SafestClaw Built-in Web shell.py ShellAction._validate_command incomplete blacklistprincezuda SafestClaw
- CVE-2026-16128zevorn rt-claw http_request swarm.c receiver_thread server-side request forgeryzevorn rt-claw
- CVE-2026-16127zevorn rt-claw http_request tool_net.c claw_net_post server-side request forgeryzevorn rt-claw
- CVE-2026-16126zevorn rt-claw Swarm RPC Receiver swarm.c handle_rpc_request authorizationzevorn rt-claw
- CVE-2026-16125zevorn rt-claw http_request net.c claw_net_post server-side request forgeryzevorn rt-claw
- CVE-2026-16124nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgerynextlevelbuilder GoClaw
- CVE-2026-16123nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.go ToolsInvokeHandler.ServeHTTP authorizationnextlevelbuilder GoClaw
- CVE-2026-16122nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorizationnextlevelbuilder GoClaw
- CVE-2026-16121nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorizationnextlevelbuilder GoClaw
- CVE-2026-16120nextlevelbuilder GoClaw exec_approval.go extractBin name resolutionnextlevelbuilder GoClaw
- CVE-2025-71398SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypasssurrealdb
- CVE-2025-71396SurrealDB before 2.2.2 Denial of Service via JavaScript Scriptingsurrealdb
- CVE-2025-71394SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZERsurrealdb
- CVE-2025-71393SurrealDB before 2.2.2 Memory Exhaustion via Nested Functionssurrealdb
- CVE-2025-71390SurrealDB before 2.3.6 deny-net Bypass via DNS Resolutionsurrealdb
- CVE-2024-58363SurrealDB before 1.5.4 Authentication Bypass via Database Switchsurrealdb · surrealdb-core
- CVE-2024-58358SurrealDB before 2.1.0 Denial of Service via Nonexistent Rolesurrealdb · surrealdb-core
- CVE-2024-58356SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITEsurrealdb · surrealdb-core
- CVE-2026-16119nextlevelbuilder GoClaw WebSocket Approval Endpoint exec_approval.go RequestApproval authorizationnextlevelbuilder GoClaw
- CVE-2026-16088halo-dev halo Files Backup Endpoint MigrationEndpoint.java download path traversalhalo-dev halo
- CVE-2026-16085Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphereSipeed PicoClaw
- CVE-2026-16084Sipeed PicoClaw web.go web_fetch server-side request forgerySipeed PicoClaw
- CVE-2026-16083Sipeed PicoClaw LINE Webhook line.go webhook.ParseRequest authentication replaySipeed PicoClaw
- CVE-2026-16082Sipeed PicoClaw pipeline_execute.go ExecTool.executeRun toctouSipeed PicoClaw
- CVE-2026-16081Sipeed PicoClaw auth.go cross-site request forgerySipeed PicoClaw
- CVE-2026-16077AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _normalize_rw_path link followingAstrBotDevs AstrBot
- CVE-2026-16076AstrBotDevs AstrBot API open_api.py OpenApiRoute.chat_send authentication spoofingAstrBotDevs AstrBot
- CVE-2026-9734W3SC Elementor to Zoho CRM <= 2.2.0 - Cross-Site Request Forgery to Settings Updatew3scloud W3SC Elementor to Zoho CRM
- CVE-2026-16075AstrBotDevs AstrBot session-listing Endpoint open_api.py OpenApiRoute.get_chat_sessions authorizationAstrBotDevs AstrBot