# CVEs published 2026-07-18

81 CVEs were published on July 18, 2026: 5 critical, 31 high. Days are UTC.

- [CVE-2026-16198](https://cve.now/CVE-2026-16198.md): Sipeed PicoClaw First Run Setup access\_control.go authentication bypass (CVSS 6.3, Sipeed PicoClaw)
- [CVE-2026-16197](https://cve.now/CVE-2026-16197.md): Sipeed PicoClaw Group Message feishu\_64.go handleMessageReceive authorization (CVSS 5.3, Sipeed PicoClaw)
- [CVE-2026-16196](https://cve.now/CVE-2026-16196.md): Sipeed PicoClaw web\_fetch web.go isPrivateOrRestrictedIP server-side request forgery (CVSS 5.3, Sipeed PicoClaw)
- [CVE-2026-16195](https://cve.now/CVE-2026-16195.md): Sipeed PicoClaw Group Message wecom.go dispatchIncoming authorization (CVSS 5.3, Sipeed PicoClaw)
- [CVE-2026-10130](https://cve.now/CVE-2026-10130.md): QueryWeaver Authentication Bypass via Email Signup Token Issuance for Existing Accounts (CVSS 8.2, FalkorDB QueryWeaver)
- [CVE-2026-16194](https://cve.now/CVE-2026-16194.md): zhayujie CowAgent web\_fetch.py WebFetch.execute server-side request forgery (CVSS 5.3, zhayujie CowAgent)
- [CVE-2026-16156](https://cve.now/CVE-2026-16156.md): SourceCodester Class and Exam Timetabling System forexam.php cross site scripting (CVSS 5.1, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-16155](https://cve.now/CVE-2026-16155.md): SourceCodester Class and Exam Timetabling System schoolyr.php cross site scripting (CVSS 5.1, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-12228](https://cve.now/CVE-2026-12228.md): Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms (CVSS 8.7, parisneo/lollms)
- [CVE-2026-57857](https://cve.now/CVE-2026-57857.md): Flow Payment Plugin for WordPress Reflected Cross-Site Scripting via error\_message Parameter (CVSS 4.3, Flow Payment)
- [CVE-2026-16154](https://cve.now/CVE-2026-16154.md): SourceCodester Class and Exam Timetabling System edit\_room1.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-16152](https://cve.now/CVE-2026-16152.md): SourceCodester Class and Exam Timetabling System edit\_rooma.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-16151](https://cve.now/CVE-2026-16151.md): CartoDB carto-api-client filters.ts addFilter prototype pollution (CVSS 5.3, CartoDB carto-api-client)
- [CVE-2026-53994](https://cve.now/CVE-2026-53994.md): ProFTPD mod\_sftp Heap Buffer Overflow via Unsigned Integer Underflow and Size Truncation (CVSS 7.5, ProFTPD Project ProFTPD)
- [CVE-2026-57848](https://cve.now/CVE-2026-57848.md): Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation (CVSS 5.5, stoatchat Stoat for Android)
- [CVE-2026-16150](https://cve.now/CVE-2026-16150.md): RobinHerbots Inputmask Internal Deep Merge Helper extend.js extendAliases prototype pollution (CVSS 5.3, RobinHerbots Inputmask)
- [CVE-2026-16133](https://cve.now/CVE-2026-16133.md): LiuMengxuan04 MiniCode mcp.ts child\_process.spawn command injection (CVSS 2.3, LiuMengxuan04 MiniCode)
- [CVE-2026-16131](https://cve.now/CVE-2026-16131.md): itsourcecode Hospital Management System prescriptionrecord.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-16130](https://cve.now/CVE-2026-16130.md): nearai ironclaw write\_file path\_utils.rs validate\_path link following (CVSS 4.8, nearai ironclaw)
- [CVE-2026-16129](https://cve.now/CVE-2026-16129.md): princezuda SafestClaw Built-in Web shell.py ShellAction.\_validate\_command incomplete blacklist (CVSS 4.8, princezuda SafestClaw)
- [CVE-2026-16128](https://cve.now/CVE-2026-16128.md): zevorn rt-claw http\_request swarm.c receiver\_thread server-side request forgery (CVSS 6.9, zevorn rt-claw)
- [CVE-2026-16127](https://cve.now/CVE-2026-16127.md): zevorn rt-claw http\_request tool\_net.c claw\_net\_post server-side request forgery (CVSS 6.9, zevorn rt-claw)
- [CVE-2026-16126](https://cve.now/CVE-2026-16126.md): zevorn rt-claw Swarm RPC Receiver swarm.c handle\_rpc\_request authorization (CVSS 6.9, zevorn rt-claw)
- [CVE-2026-16125](https://cve.now/CVE-2026-16125.md): zevorn rt-claw http\_request net.c claw\_net\_post server-side request forgery (CVSS 6.9, zevorn rt-claw)
- [CVE-2026-16124](https://cve.now/CVE-2026-16124.md): nextlevelbuilder GoClaw web\_fetch web\_shared.go isPrivateIP server-side request forgery (CVSS 5.3, nextlevelbuilder GoClaw)
- [CVE-2026-16123](https://cve.now/CVE-2026-16123.md): nextlevelbuilder GoClaw Invoke Endpoint tools\_invoke.go ToolsInvokeHandler.ServeHTTP authorization (CVSS 5.3, nextlevelbuilder GoClaw)
- [CVE-2026-16122](https://cve.now/CVE-2026-16122.md): nextlevelbuilder GoClaw exec\_approval.go matchesAllowlist authorization (CVSS 4.8, nextlevelbuilder GoClaw)
- [CVE-2026-16121](https://cve.now/CVE-2026-16121.md): nextlevelbuilder GoClaw exec\_approval.go isSafeBin improper authorization (CVSS 5.3, nextlevelbuilder GoClaw)
- [CVE-2026-9323](https://cve.now/CVE-2026-9323.md): Insecure PRNG and Information Exposure in urwid Web Display Backend (CVSS 9.2, urwid)
- [CVE-2026-11826](https://cve.now/CVE-2026-11826.md): OpenPLC\_v3 Heap-Based Buffer Overflow in Modbus Master getData() (CVSS 8.7, openplcproject OpenPLC\_v3)
- [CVE-2026-16120](https://cve.now/CVE-2026-16120.md): nextlevelbuilder GoClaw exec\_approval.go extractBin name resolution (CVSS 5.3, nextlevelbuilder GoClaw)
- [CVE-2025-71398](https://cve.now/CVE-2025-71398.md): SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass (CVSS 5.8, surrealdb)
- [CVE-2025-71397](https://cve.now/CVE-2025-71397.md): SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops (CVSS 7.1, surrealdb)
- [CVE-2025-71396](https://cve.now/CVE-2025-71396.md): SurrealDB before 2.2.2 Denial of Service via JavaScript Scripting (CVSS 2.3, surrealdb)
- [CVE-2025-71395](https://cve.now/CVE-2025-71395.md): SurrealDB before 2.2.2 Memory Exhaustion via string::replace (CVSS 7.1, surrealdb)
- [CVE-2025-71394](https://cve.now/CVE-2025-71394.md): SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZER (CVSS 2.3, surrealdb)
- [CVE-2025-71393](https://cve.now/CVE-2025-71393.md): SurrealDB before 2.2.2 Memory Exhaustion via Nested Functions (CVSS 6.0, surrealdb)
- [CVE-2025-71392](https://cve.now/CVE-2025-71392.md): SurrealDB before 2.2.2 SurrealQL Injection via export (CVSS 9.4, surrealdb)
- [CVE-2025-71391](https://cve.now/CVE-2025-71391.md): SurrealDB before 2.2.2 Denial of Service via /sql endpoint (CVSS 7.1, surrealdb)
- [CVE-2025-71390](https://cve.now/CVE-2025-71390.md): SurrealDB before 2.3.6 deny-net Bypass via DNS Resolution (CVSS 5.8, surrealdb)
- [CVE-2024-58370](https://cve.now/CVE-2024-58370.md): SurrealDB before 1.1.0 Uncontrolled Recursion Denial of Service (CVSS 7.1, surrealdb)
- [CVE-2024-58369](https://cve.now/CVE-2024-58369.md): SurrealDB before 1.1.1 Denial of Service via Global Parameters (CVSS 7.1, surrealdb)
- [CVE-2024-58368](https://cve.now/CVE-2024-58368.md): SurrealDB before 1.1.0 Denial of Service via HTTP Headers (CVSS 8.7, surrealdb)
- [CVE-2024-58367](https://cve.now/CVE-2024-58367.md): SurrealDB before 2.0.4 Improper Authorization via SELECT Permissions (CVSS 7.1, surrealdb · surrealdb-core)
- [CVE-2024-58366](https://cve.now/CVE-2024-58366.md): SurrealDB before 1.1.1 Format String via Scripting Functions (CVSS 9.0, surrealdb · DelSkayn rquickjs)
- [CVE-2024-58365](https://cve.now/CVE-2024-58365.md): SurrealDB before 1.2.0 Denial of Service via Nonexistent Function (CVSS 7.1, surrealdb)
- [CVE-2024-58364](https://cve.now/CVE-2024-58364.md): SurrealDB before 1.2.1 Denial of Service via Parsing Error (CVSS 7.1, surrealdb)
- [CVE-2024-58363](https://cve.now/CVE-2024-58363.md): SurrealDB before 1.5.4 Authentication Bypass via Database Switch (CVSS 5.3, surrealdb · surrealdb-core)
- [CVE-2024-58362](https://cve.now/CVE-2024-58362.md): SurrealDB before 1.5.5 Query Injection via RPC API (CVSS 8.7, surrealdb · surrealdb-core)
- [CVE-2024-58361](https://cve.now/CVE-2024-58361.md): SurrealDB before 2.0.4 Denial of Service via Parser Exception (CVSS 7.1, surrealdb · surrealdb-core)
- [CVE-2024-58359](https://cve.now/CVE-2024-58359.md): SurrealDB before 2.1.0 Denial of Service via rand() Sorting (CVSS 7.1, surrealdb · surrealdb-core)
- [CVE-2024-58358](https://cve.now/CVE-2024-58358.md): SurrealDB before 2.1.0 Denial of Service via Nonexistent Role (CVSS 6.9, surrealdb · surrealdb-core)
- [CVE-2024-58357](https://cve.now/CVE-2024-58357.md): SurrealDB before 2.1.0 Denial of Service via rand::time() (CVSS 7.1, surrealdb · surrealdb-core)
- [CVE-2024-58356](https://cve.now/CVE-2024-58356.md): SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE (CVSS 2.3, surrealdb · surrealdb-core)
- [CVE-2023-54366](https://cve.now/CVE-2023-54366.md): SurrealDB before 1.0.1 Insecure Default Table Permissions (CVSS 8.7, surrealdb)
- [CVE-2026-16117](https://cve.now/CVE-2026-16117.md): @fastify/http-proxy vulnerable to prefix escape via URL-encoded characters (CVSS 10.0, @fastify/http-proxy)
- [CVE-2026-16119](https://cve.now/CVE-2026-16119.md): nextlevelbuilder GoClaw WebSocket Approval Endpoint exec\_approval.go RequestApproval authorization (CVSS 5.3, nextlevelbuilder GoClaw)
- [CVE-2026-59173](https://cve.now/CVE-2026-59173.md): Apache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditions (CVSS 7.5, Apache Software Foundation Apache Traffic Server)
- [CVE-2026-15631](https://cve.now/CVE-2026-15631.md): @fastify/http-proxy vulnerable to prefix escape via WebSocket path traversal (CVSS 8.7, @fastify/http-proxy)
- [CVE-2026-9147](https://cve.now/CVE-2026-9147.md): uproot 5.7.4 and prior Code Injection via TStreamerInfo Metadata (CVSS 8.5, scikit-hep uproot)
- [CVE-2026-16158](https://cve.now/CVE-2026-16158.md): @fastify/reply-from vulnerable to cross-upstream request routing via URL cache key collision (CVSS 8.7, @fastify/reply-from)
- [CVE-2026-16097](https://cve.now/CVE-2026-16097.md): Shibby Tomato Scheduler Name sub\_42537C stack-based overflow (CVSS 8.7, Shibby Tomato)
- [CVE-2026-16096](https://cve.now/CVE-2026-16096.md): Shibby Tomato webmon\_recent\_domains sub\_40BB50 stack-based overflow (CVSS 8.7, Shibby Tomato)
- [CVE-2026-16095](https://cve.now/CVE-2026-16095.md): Shibby Tomato rc setup\_conntrack out-of-bounds write (CVSS 8.7, Shibby Tomato)
- [CVE-2026-16088](https://cve.now/CVE-2026-16088.md): halo-dev halo Files Backup Endpoint MigrationEndpoint.java download path traversal (CVSS 5.1, halo-dev halo)
- [CVE-2026-16085](https://cve.now/CVE-2026-16085.md): Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphere (CVSS 4.8, Sipeed PicoClaw)
- [CVE-2026-16084](https://cve.now/CVE-2026-16084.md): Sipeed PicoClaw web.go web\_fetch server-side request forgery (CVSS 6.9, Sipeed PicoClaw)
- [CVE-2026-47871](https://cve.now/CVE-2026-47871.md): VMware Avi Load Balancer Directory Traversal Vulnerability (CVSS 8.8, VMware Avi Load Balancer)
- [CVE-2026-47870](https://cve.now/CVE-2026-47870.md): VMware Avi Load Balancer Privilege Escalation Vulnerability (CVSS 7.1, VMware Avi Load Balancer)
- [CVE-2026-47869](https://cve.now/CVE-2026-47869.md): VMware Avi Load Balancer Remote Code Execution Vulnerability (CVSS 8.7, VMware Avi Load Balancer)
- [CVE-2026-47868](https://cve.now/CVE-2026-47868.md): VMware Avi Load Balancer Local Privilege Escalation Vulnerability (CVSS 7.8, VMware Avi Load Balancer)
- [CVE-2026-47867](https://cve.now/CVE-2026-47867.md): VMware Avi Load Balancer Remote Code Execution Vulnerability (CVSS 8.7, VMware Avi Load Balancer)
- [CVE-2026-47866](https://cve.now/CVE-2026-47866.md): VMware Avi Load Balancer Authorization Bypass Vulnerability (CVSS 8.3, VMware Avi Load Balancer)
- [CVE-2026-47865](https://cve.now/CVE-2026-47865.md): VMware Avi Load Balancer Authentication Bypass Vulnerability (CVSS 9.8, VMware Avi Load Balancer)
- [CVE-2026-16083](https://cve.now/CVE-2026-16083.md): Sipeed PicoClaw LINE Webhook line.go webhook.ParseRequest authentication replay (CVSS 6.9, Sipeed PicoClaw)
- [CVE-2026-16082](https://cve.now/CVE-2026-16082.md): Sipeed PicoClaw pipeline\_execute.go ExecTool.executeRun toctou (CVSS 4.8, Sipeed PicoClaw)
- [CVE-2026-16081](https://cve.now/CVE-2026-16081.md): Sipeed PicoClaw auth.go cross-site request forgery (CVSS 5.3, Sipeed PicoClaw)
- [CVE-2026-16077](https://cve.now/CVE-2026-16077.md): AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py \_normalize\_rw\_path link following (CVSS 4.8, AstrBotDevs AstrBot)
- [CVE-2026-16076](https://cve.now/CVE-2026-16076.md): AstrBotDevs AstrBot API open\_api.py OpenApiRoute.chat\_send authentication spoofing (CVSS 5.3, AstrBotDevs AstrBot)
- [CVE-2026-9734](https://cve.now/CVE-2026-9734.md): W3SC Elementor to Zoho CRM \<= 2.2.0 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, w3scloud W3SC Elementor to Zoho CRM)
- [CVE-2026-16075](https://cve.now/CVE-2026-16075.md): AstrBotDevs AstrBot session-listing Endpoint open\_api.py OpenApiRoute.get\_chat\_sessions authorization (CVSS 5.3, AstrBotDevs AstrBot)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-07-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.