# CVEs published 2026-07-22

199 CVEs were published on July 22, 2026: 19 critical, 100 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-16632](https://cve.now/CVE-2026-16632.md): boazsegev facil.io WebSocket Frame websocket\_parser.h websocket\_on\_protocol\_error input validation (CVSS 6.9, boazsegev facil.io)
- [CVE-2026-16631](https://cve.now/CVE-2026-16631.md): publint package-manager pack.js child\_process.exec os command injection (CVSS 4.8, publint)
- [CVE-2026-61246](https://cve.now/CVE-2026-61246.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 8.8, Oracle Platform Security for Java)
- [CVE-2026-60455](https://cve.now/CVE-2026-60455.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 8.8, Oracle Platform Security for Java)
- [CVE-2026-60439](https://cve.now/CVE-2026-60439.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 8.8, Oracle Platform Security for Java)
- [CVE-2026-60373](https://cve.now/CVE-2026-60373.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 8.8, Oracle Platform Security for Java)
- [CVE-2026-60372](https://cve.now/CVE-2026-60372.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 9.8, Oracle Platform Security for Java)
- [CVE-2026-60371](https://cve.now/CVE-2026-60371.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 8.0, Oracle Platform Security for Java)
- [CVE-2026-60370](https://cve.now/CVE-2026-60370.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 7.5, Oracle Platform Security for Java)
- [CVE-2026-60369](https://cve.now/CVE-2026-60369.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 9.9, Oracle Platform Security for Java)
- [CVE-2026-60368](https://cve.now/CVE-2026-60368.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 8.8, Oracle Platform Security for Java)
- [CVE-2026-60367](https://cve.now/CVE-2026-60367.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 9.8, Oracle Platform Security for Java)
- [CVE-2026-60366](https://cve.now/CVE-2026-60366.md): Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 10.0, Oracle Platform Security for Java)
- [CVE-2026-16630](https://cve.now/CVE-2026-16630.md): syncfusion ej2-javascript-ui-controls package.json child\_process.exec os command injection (CVSS 4.8, syncfusion ej2-javascript-ui-controls)
- [CVE-2026-16629](https://cve.now/CVE-2026-16629.md): danger danger-js CLI localGetFileAtSHA.ts danger.git.diffForFile os command injection (CVSS 4.8, danger-js · danger)
- [CVE-2026-16628](https://cve.now/CVE-2026-16628.md): oclif JIT Plugin Entry child\_process.exec os command injection (CVSS 4.8, oclif)
- [CVE-2026-64793](https://cve.now/CVE-2026-64793.md): Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions (CVSS 9.1, regularlabs.com Articles Anywhere extension for Joomla · re…)
- [CVE-2026-64794](https://cve.now/CVE-2026-64794.md): Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions (CVSS 6.5, regularlabs.com Articles Anywhere extension for Joomla · re…)
- [CVE-2026-64797](https://cve.now/CVE-2026-64797.md): Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension (CVSS 7.5, regularlabs.com IP Login extension for Joomla)
- [CVE-2026-63265](https://cve.now/CVE-2026-63265.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints (CVSS 8.0, regularlabs.com Advanced Module Manager extension for J… +21)
- [CVE-2026-63685](https://cve.now/CVE-2026-63685.md): Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension (CVSS 8.8, regularlabs.com DB Replacer extension for Joomla)
- [CVE-2026-63280](https://cve.now/CVE-2026-63280.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager (CVSS 8.8, regularlabs.com Advanced Module Manager extension for Jo… +2)
- [CVE-2026-64796](https://cve.now/CVE-2026-64796.md): Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension (CVSS 9.8, regularlabs.com Sourcerer extension for Joomla)
- [CVE-2026-63683](https://cve.now/CVE-2026-63683.md): Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager (CVSS 7.5, regularlabs.com Advanced Module Manager extension for Jo… +2)
- [CVE-2026-64798](https://cve.now/CVE-2026-64798.md): Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension (CVSS 9.1, regularlabs.com IP Login extension for Joomla)
- [CVE-2026-64795](https://cve.now/CVE-2026-64795.md): Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions (CVSS 5.4, regularlabs.com Modals extension for Joomla · regularlab… +3)
- [CVE-2026-64792](https://cve.now/CVE-2026-64792.md): Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions (CVSS 7.5, regularlabs.com Articles Anywhere extension for Joomla ·… +5)
- [CVE-2026-63281](https://cve.now/CVE-2026-63281.md): Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager (CVSS 4.8, regularlabs.com Advanced Module Manager extension for Jo… +2)
- [CVE-2026-64791](https://cve.now/CVE-2026-64791.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager (CVSS 8.8, regularlabs.com Regular Labs Extension Manager extension fo…)
- [CVE-2026-63684](https://cve.now/CVE-2026-63684.md): Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension (CVSS 8.8, regularlabs.com Content Templater extension for Joomla ·… +1)
- [CVE-2026-13089](https://cve.now/CVE-2026-13089.md): OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify (CVSS 7.5, RITOU OIDC::Lite)
- [CVE-2026-64829](https://cve.now/CVE-2026-64829.md): Question2Answer 1.8.8 Session Fixation via Forgot-Password Flow (CVSS 9.1, q2a question2answer)
- [CVE-2026-14881](https://cve.now/CVE-2026-14881.md): Compass connection import allows to override OIDC browser open command (usually set through settings), allowing for arbitrary shell commands execution when connecting to cluster using OIDC auth flow (CVSS 8.4, MongoDB Compass)
- [CVE-2026-13055](https://cve.now/CVE-2026-13055.md): Server crash via aggregation pipeline expression with compound wildcard index specification (CVSS 7.1, MongoDB Server)
- [CVE-2026-13056](https://cve.now/CVE-2026-13056.md): A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM (CVSS 7.1, MongoDB Server)
- [CVE-2026-13057](https://cve.now/CVE-2026-13057.md): Authorization Bypass via Client-Supplied $search.mergingPipeline Leaks Unauthorized Collection Data Through $$SEARCH\_META (CVSS 6.0, MongoDB Server)
- [CVE-2026-13058](https://cve.now/CVE-2026-13058.md): Transaction Command Insufficient Input Validation Leading to Process Termination (CVSS 7.1, MongoDB Server)
- [CVE-2026-13059](https://cve.now/CVE-2026-13059.md): Improper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control Bypass (CVSS 8.6, MongoDB Server)
- [CVE-2026-9737](https://cve.now/CVE-2026-9737.md): Find command with $meta sort can lead to crash (CVSS 7.1, MongoDB Server)
- [CVE-2026-13060](https://cve.now/CVE-2026-13060.md): $graphLookup Aggregation Stage Authorization Check Inconsistency Allowing Unauthorized Collection Access (CVSS 7.1, MongoDB Server)
- [CVE-2026-14899](https://cve.now/CVE-2026-14899.md): Off-by-one out of bounds read in MIME header parser for forwarding (CVSS 7.5, Mozilla Thunderbird)
- [CVE-2026-13061](https://cve.now/CVE-2026-13061.md): Improper Access Control Allowing Cross-User Session Metadata Disclosure in $listSessions Aggregation Stage (CVSS 5.3, MongoDB Server)
- [CVE-2026-13062](https://cve.now/CVE-2026-13062.md): MongoDB mongos Improper Validation of Internal Flags in Queryable Encryption Write Commands on Sharded Clusters (CVSS 7.1, MongoDB Server)
- [CVE-2026-13063](https://cve.now/CVE-2026-13063.md): libmongocrypt Improper Input Validation Leading to Process Termination (CVSS 5.3, MongoDB Server)
- [CVE-2026-13064](https://cve.now/CVE-2026-13064.md): MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service (CVSS 7.1, MongoDB Server)
- [CVE-2026-13065](https://cve.now/CVE-2026-13065.md): MongoDB $linearFill Window Function Improper Input Validation Leading to Process Termination (CVSS 7.1, MongoDB Server)
- [CVE-2026-13066](https://cve.now/CVE-2026-13066.md): Server-Side JavaScript DBPointer BSON Serialization Memory Disclosure (CVSS 7.1, MongoDB Server)
- [CVE-2026-13067](https://cve.now/CVE-2026-13067.md): tlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain Socket (CVSS 7.2, MongoDB Server)
- [CVE-2026-13068](https://cve.now/CVE-2026-13068.md): MongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cross-Database Privilege Misuse (CVSS 2.3, MongoDB Server)
- [CVE-2026-13069](https://cve.now/CVE-2026-13069.md): Queryable Encryption FLE2 Find Payload Missing Input Validation Leading to Resource Exhaustion (CVSS 7.1, MongoDB Server)
- [CVE-2026-13070](https://cve.now/CVE-2026-13070.md): Improper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Termination (CVSS 6.0, MongoDB Server)
- [CVE-2026-13071](https://cve.now/CVE-2026-13071.md): Server-Side JavaScript Aggregation Expression Memory Safety Issue Leading to Process Termination (CVSS 7.1, MongoDB Server)
- [CVE-2026-13072](https://cve.now/CVE-2026-13072.md): MongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption (CVSS 9.2, MongoDB Server)
- [CVE-2026-13073](https://cve.now/CVE-2026-13073.md): MongoDB Aggregation Command Invariant Assertion Failure Leading to Process Termination (CVSS 5.3, MongoDB Server)
- [CVE-2026-13074](https://cve.now/CVE-2026-13074.md): Awaitable Hello Command in Exhaust Mode Unthrottled Response Loop Leading to Denial of Service (CVSS 6.9, MongoDB Server)
- [CVE-2026-13075](https://cve.now/CVE-2026-13075.md): $rankFusion and $scoreFusion Unbounded Memory Allocation During Error Suggestion Generation (CVSS 7.1, MongoDB Server)
- [CVE-2026-13076](https://cve.now/CVE-2026-13076.md): Aggregation Framework Memory Exhaustion Leading to Process Termination (CVSS 7.1, MongoDB Server)
- [CVE-2026-13077](https://cve.now/CVE-2026-13077.md): Out-of-Bounds Heap Read in BSON CodeWScope Element Parsing via Malformed BSONColumn Data (CVSS 7.1, MongoDB Server)
- [CVE-2026-13078](https://cve.now/CVE-2026-13078.md): Local File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader (CVSS 6.3, MongoDB Server)
- [CVE-2026-22049](https://cve.now/CVE-2026-22049.md): ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to th (CVSS 8.7, NETAPP ONTAP)
- [CVE-2026-16624](https://cve.now/CVE-2026-16624.md): CVE-2026-16624 (CVSS 9.6, Cal.com Cal.diy)
- [CVE-2026-3482](https://cve.now/CVE-2026-3482.md): IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass (CVSS 5.3, IBM Sterling B2B Integrator · IBM Sterling File Gateway)
- [CVE-2026-16157](https://cve.now/CVE-2026-16157.md): Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability (CVSS 7.8, Duplicati)
- [CVE-2026-64835](https://cve.now/CVE-2026-64835.md): FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder (CVSS 8.7, FFmpeg)
- [CVE-2026-65650](https://cve.now/CVE-2026-65650.md): Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload. (CVSS 4.3, Elgg)
- [CVE-2026-64834](https://cve.now/CVE-2026-64834.md): FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer (CVSS 8.7, FFmpeg)
- [CVE-2026-64833](https://cve.now/CVE-2026-64833.md): FFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.c (CVSS 7.1, FFmpeg)
- [CVE-2026-64832](https://cve.now/CVE-2026-64832.md): FFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.c (CVSS 8.7, FFmpeg)
- [CVE-2026-64831](https://cve.now/CVE-2026-64831.md): FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoder (CVSS 8.7, FFmpeg)
- [CVE-2026-64830](https://cve.now/CVE-2026-64830.md): FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer (CVSS 8.7, FFmpeg)
- [CVE-2026-7328](https://cve.now/CVE-2026-7328.md): Unverified AXI Address in Subsystem Mode Commands Enables Denial of Service (CVSS 6.8, Caliptra Core Runtime Firmware)
- [CVE-2026-65013](https://cve.now/CVE-2026-65013.md): Onlook tRPC Insecure Direct Object Reference via multiple procedures (CVSS 8.7, onlook repo)
- [CVE-2026-65012](https://cve.now/CVE-2026-65012.md): InvokeAI \< 6.13.7 Unauthenticated Directory Enumeration via scan\_folder (CVSS 6.3, invoke-ai InvokeAI)
- [CVE-2026-65011](https://cve.now/CVE-2026-65011.md): Graylog2 Server Missing Permission Check on Event Definition Duplicate (CVSS 5.3, graylog2-server)
- [CVE-2026-16615](https://cve.now/CVE-2026-16615.md): Librest: weak random number generation in pkce implementation (CVSS 6.8, GNOME librest · Red Hat Enterprise Linux)
- [CVE-2026-46737](https://cve.now/CVE-2026-46737.md): Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. (CVSS 6.7, Dell PowerProtect Data Manager)
- [CVE-2026-49499](https://cve.now/CVE-2026-49499.md): Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. (CVSS 8.8, Dell PowerProtect Data Manager)
- [CVE-2026-64828](https://cve.now/CVE-2026-64828.md): Froiden TableTrack 1.3.10 Stored XSS via Order Notes Field (CVSS 5.3, Froiden TableTrack)
- [CVE-2026-46738](https://cve.now/CVE-2026-46738.md): Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. (CVSS 9.1, Dell PowerProtect Data Manager)
- [CVE-2026-40712](https://cve.now/CVE-2026-40712.md): Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. (CVSS 9.1, Dell PowerProtect Data Manager)
- [CVE-2026-40714](https://cve.now/CVE-2026-40714.md): Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability. (CVSS 7.2, Dell PowerProtect Data Manager)
- [CVE-2026-16606](https://cve.now/CVE-2026-16606.md): Unauthenticated remote code execution (pre-auth RCE) vulnerability in openFT for Linux and Oracle Solaris (CVSS 9.3, Fujitsu Linux openFT · Fujitsu Oracle Solaris openFT)
- [CVE-2026-44276](https://cve.now/CVE-2026-44276.md): Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to an Unauthorized Actor vulnera (CVSS 6.0, Dell PowerProtect Data Manager)
- [CVE-2026-16607](https://cve.now/CVE-2026-16607.md): Authenticated local root privilege escalation vulnerability in openFT for Linux and Oracle Solaris (CVSS 8.5, Fujitsu Linux openFT · Fujitsu Oracle Solaris openFT)
- [CVE-2026-14985](https://cve.now/CVE-2026-14985.md): CVE-2026-14985 (CVSS 7.8, Analog Way Picturall Quad Compact Mark II)
- [CVE-2026-13321](https://cve.now/CVE-2026-13321.md): DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVSS 8.6, ISC BIND)
- [CVE-2026-13204](https://cve.now/CVE-2026-13204.md): Unexpected exit in certain situations with NSEC and NSEC3 both present (CVSS 7.5, ISC BIND)
- [CVE-2026-12617](https://cve.now/CVE-2026-12617.md): Record ordering based unexpected exit with CNAME or DNAME (CVSS 7.5, ISC BIND)
- [CVE-2026-48029](https://cve.now/CVE-2026-48029.md): libheif: heap OOB read in ImageItem\_Grid::decode\_grid\_tile via irot-induced tile-coordinate underflow (CVSS 7.1, strukturag libheif)
- [CVE-2026-11721](https://cve.now/CVE-2026-11721.md): Cache poisoning possible with label count discrepancy, RRSIG, and wildcards (CVSS 7.5, ISC BIND)
- [CVE-2026-11622](https://cve.now/CVE-2026-11622.md): Potential memory usage beyond configured limits (CVSS 7.5, ISC BIND)
- [CVE-2026-11605](https://cve.now/CVE-2026-11605.md): Unnecessary validation of DNSSEC signed records (CVSS 7.5, ISC BIND)
- [CVE-2026-11331](https://cve.now/CVE-2026-11331.md): Potential wildcard CNAME RPZ policy bypass (CVSS 7.5, ISC BIND)
- [CVE-2026-10822](https://cve.now/CVE-2026-10822.md): Key Record using PRIVATEDNS algorithm may lead to unexpected exit (CVSS 6.5, ISC BIND)
- [CVE-2026-10723](https://cve.now/CVE-2026-10723.md): Incorrect acceptance of NSEC3 records (CVSS 6.8, ISC BIND)
- [CVE-2026-2395](https://cve.now/CVE-2026-2395.md): SQLi in Xpoda Türkiye Informatics Technology's No Code Platform (CVSS 9.8, Xpoda Türkiye Informatics Technology No Code Platform)
- [CVE-2026-62145](https://cve.now/CVE-2026-62145.md): Local Privilege Escalation in Gaia Portal (CVSS 7.5, checkpoint Quantum Security Gateway · checkpoint Quantum Se…)
- [CVE-2026-62144](https://cve.now/CVE-2026-62144.md): Management Authentication Bypass and Privilege Escalation (CVSS 9.1, checkpoint Quantum Security Management · checkpoint Multi-D…)
- [CVE-2026-16232](https://cve.now/CVE-2026-16232.md): Authentication Bypass in the SmartConsole Login Process Using an Application Token (CVSS 9.3, KEV, checkpoint Quantum Security Management · checkpoint Multi-D…)
- [CVE-2026-14932](https://cve.now/CVE-2026-14932.md): Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart (CVSS 6.5, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-14865](https://cve.now/CVE-2026-14865.md): XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX (CVSS 5.3, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13192](https://cve.now/CVE-2026-13192.md): RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 6.5, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13190](https://cve.now/CVE-2026-13190.md): PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 8.1, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-53910](https://cve.now/CVE-2026-53910.md): Heap-based Buffer Overflow in GNU diffutils (CVSS 2.1, GNU diffutils)
- [CVE-2026-13189](https://cve.now/CVE-2026-13189.md): SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 7.5, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13188](https://cve.now/CVE-2026-13188.md): DialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 5.9, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13187](https://cve.now/CVE-2026-13187.md): DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 8.1, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13186](https://cve.now/CVE-2026-13186.md): AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 8.1, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13185](https://cve.now/CVE-2026-13185.md): PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 8.1, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13184](https://cve.now/CVE-2026-13184.md): RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 7.5, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13183](https://cve.now/CVE-2026-13183.md): RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 7.5, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13182](https://cve.now/CVE-2026-13182.md): RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 7.5, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-13181](https://cve.now/CVE-2026-13181.md): RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX (CVSS 8.1, Progress Software Telerik UI for ASP.NET AJAX)
- [CVE-2026-56444](https://cve.now/CVE-2026-56444.md): Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-56416](https://cve.now/CVE-2026-56416.md): Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name (CVSS 4.8, NLnet Labs Unbound)
- [CVE-2026-55991](https://cve.now/CVE-2026-55991.md): Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-55990](https://cve.now/CVE-2026-55990.md): Packet of death for a DNSCrypt misconfigured Unbound (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-55973](https://cve.now/CVE-2026-55973.md): 'dns-error-reporting: yes' leads to stack buffer overflow (CVSS 7.5, NLnet Labs Unbound)
- [CVE-2026-55717](https://cve.now/CVE-2026-55717.md): 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-55708](https://cve.now/CVE-2026-55708.md): Privacy/configuration issue when adding local data in views through 'unbound-control' (CVSS 3.1, NLnet Labs Unbound)
- [CVE-2026-54478](https://cve.now/CVE-2026-54478.md): DNS Cookie bypass when combined with proxy-protocol use (CVSS 3.7, NLnet Labs Unbound)
- [CVE-2026-52863](https://cve.now/CVE-2026-52863.md): Memory corruption could lead to crash and denial of service (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-50252](https://cve.now/CVE-2026-50252.md): Possible cache poisoning attack by mapping source port population per thread (CVSS 5.7, NLnet Labs Unbound)
- [CVE-2026-50251](https://cve.now/CVE-2026-50251.md): Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush (CVSS 5.3, NLnet Labs Unbound)
- [CVE-2026-50248](https://cve.now/CVE-2026-50248.md): BOGUS configured primary hostname accepted for XFR in auth/rpz zones (CVSS 6.5, NLnet Labs Unbound)
- [CVE-2026-50243](https://cve.now/CVE-2026-50243.md): 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL (CVSS 6.3, NLnet Labs Unbound)
- [CVE-2026-50046](https://cve.now/CVE-2026-50046.md): Possible heap use-after-free in an error path when a DoT forwarded query is jostled out (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-50045](https://cve.now/CVE-2026-50045.md): 'max-global-quota' reset by DNSSEC validation restarts (CVSS 5.3, NLnet Labs Unbound)
- [CVE-2026-46582](https://cve.now/CVE-2026-46582.md): A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path (CVSS 3.7, NLnet Labs Unbound)
- [CVE-2026-44690](https://cve.now/CVE-2026-44690.md): Cross-zone wildcard cache poisoning via RRSIG.labels manipulation (CVSS 7.5, NLnet Labs Unbound)
- [CVE-2026-44687](https://cve.now/CVE-2026-44687.md): Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN (CVSS 3.7, NLnet Labs Unbound)
- [CVE-2026-44621](https://cve.now/CVE-2026-44621.md): Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-42955](https://cve.now/CVE-2026-42955.md): Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records (CVSS 3.7, NLnet Labs Unbound)
- [CVE-2026-41637](https://cve.now/CVE-2026-41637.md): Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries (CVSS 3.7, NLnet Labs Unbound)
- [CVE-2026-40691](https://cve.now/CVE-2026-40691.md): Packet of death for DNSCrypt over TCP (CVSS 7.5, NLnet Labs Unbound)
- [CVE-2026-32665](https://cve.now/CVE-2026-32665.md): Remote DNS-over-QUIC denial of service due to \`quic-size\` budget bypass (CVSS 7.5, NLnet Labs Unbound)
- [CVE-2026-14586](https://cve.now/CVE-2026-14586.md): Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments (CVSS 5.9, NLnet Labs Unbound)
- [CVE-2026-16560](https://cve.now/CVE-2026-16560.md): 389-ds-base: 389-ds-base: heap-buffer-overflow in rdn\_av\_swap on quoted multivalued rdn (CVSS 5.3, Red Hat Directory Server · Red Hat Enterprise Linux)
- [CVE-2026-16270](https://cve.now/CVE-2026-16270.md): ReDoS in Open Mercato (CVSS 6.9, Open Mercato)
- [CVE-2026-8152](https://cve.now/CVE-2026-8152.md): Unblu Spark Open Redirect leading to DOM-Based XSS (CVSS 9.3, Unblu Spark)
- [CVE-2026-44191](https://cve.now/CVE-2026-44191.md): Ansible-lightspeed: visual studio code ansible lightspeed extension: remote code execution via command injection in configuration settings (CVSS 7.8, Red Hat Ansible Automation Platform)
- [CVE-2026-4773](https://cve.now/CVE-2026-4773.md): OTP Bypass in Magarsus' IDM-MFA (CVSS 8.1, Magarsus Consulting Ltd. IDM-MFA)
- [CVE-2026-44187](https://cve.now/CVE-2026-44187.md): Ansible-lightspeed: ansible lightspeed extension for visual studio code: information disclosure of google gemini api key (CVSS 3.3, Red Hat Ansible Automation Platform)
- [CVE-2026-44192](https://cve.now/CVE-2026-44192.md): Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and data exfiltration via path traversal (CVSS 6.6, Red Hat Ansible Automation Platform)
- [CVE-2026-44190](https://cve.now/CVE-2026-44190.md): Ansible-lightspeed: ansible lightspeed visual studio code extension: arbitrary code execution via command injection in activation script setting (CVSS 7.8, Red Hat Ansible Automation Platform)
- [CVE-2026-44189](https://cve.now/CVE-2026-44189.md): Ansible-lightspeed: visual studio code ansible lightspeed extension: arbitrary code execution via malicious playbook filename (CVSS 7.8, Red Hat Ansible Automation Platform)
- [CVE-2025-13146](https://cve.now/CVE-2025-13146.md): Contact Form 7 – Dynamic Text Extension \<= 5.0.7 - Unauthenticated Arbitrary Shortcode Execution (CVSS 6.5, sevenspark DTX – Dynamic Text Extension for Contact Form)
- [CVE-2026-16551](https://cve.now/CVE-2026-16551.md): Denial-of-Service in OpenCanary's MongoDB module (CVSS 6.9, Thinkst Applied Research OpenCanary)
- [CVE-2026-65603](https://cve.now/CVE-2026-65603.md): Grav Login Plugin 3.8.11 Privilege Escalation via Profile Update (CVSS 8.7, getgrav grav)
- [CVE-2026-65602](https://cve.now/CVE-2026-65602.md): Traefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypass (CVSS 5.3, traefik · github.com/traefik/traefik/v3 +2)
- [CVE-2026-65601](https://cve.now/CVE-2026-65601.md): Traefik before 3.7.7 Namespace Confusion via HTTPRoute ExtensionRef (CVSS 5.3, traefik · github.com/traefik/traefik)
- [CVE-2026-65600](https://cve.now/CVE-2026-65600.md): Traefik before v2.11.52 Authentication Bypass via ReplacePathRegex (CVSS 7.8, traefik · github.com/traefik/traefik/v2 +2)
- [CVE-2026-65599](https://cve.now/CVE-2026-65599.md): n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header (CVSS 5.1, n8n-io n8n · n8n)
- [CVE-2026-65598](https://cve.now/CVE-2026-65598.md): n8n before 1.123.64 Remote Code Execution via Git Clone (CVSS 8.9, n8n-io n8n · n8n)
- [CVE-2026-65597](https://cve.now/CVE-2026-65597.md): n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe (CVSS 8.2, n8n-io n8n · n8n)
- [CVE-2026-65596](https://cve.now/CVE-2026-65596.md): n8n before 1.123.64 Credential Exfiltration via GraphQL Node (CVSS 5.1, n8n-io n8n · n8n)
- [CVE-2026-65595](https://cve.now/CVE-2026-65595.md): n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange (CVSS 8.9, n8n-io n8n · n8n)
- [CVE-2026-65594](https://cve.now/CVE-2026-65594.md): n8n before 2.30.1 Missing OAuth Authorization Check (CVSS 5.1, n8n-io n8n · n8n)
- [CVE-2026-65593](https://cve.now/CVE-2026-65593.md): n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters (CVSS 6.3, n8n-io n8n · n8n)
- [CVE-2026-65592](https://cve.now/CVE-2026-65592.md): n8n before 1.123.64 Stored DOM XSS via cachedResultUrl (CVSS 8.4, n8n-io n8n · n8n)
- [CVE-2026-65591](https://cve.now/CVE-2026-65591.md): n8n before 1.123.64 Sanitizer Bypass Remote Code Execution (CVSS 8.9, n8n-io n8n · n8n)
- [CVE-2026-65590](https://cve.now/CVE-2026-65590.md): n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows (CVSS 5.5, n8n-io n8n · n8n)
- [CVE-2026-65589](https://cve.now/CVE-2026-65589.md): n8n before 1.123.64 Credential Exposure via LLM Node Execution Data (CVSS 5.1, n8n-io n8n · n8n)
- [CVE-2026-65016](https://cve.now/CVE-2026-65016.md): n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role (CVSS 7.7, n8n-io n8n · n8n)
- [CVE-2026-65015](https://cve.now/CVE-2026-65015.md): n8n before 2.30.1 Privilege Escalation via run\_node\_tool (CVSS 7.2, n8n-io n8n · n8n)
- [CVE-2026-65014](https://cve.now/CVE-2026-65014.md): n8n before 2.28.0 Authentication Bypass via test-webhook (CVSS 6.3, n8n-io n8n · n8n)
- [CVE-2026-16544](https://cve.now/CVE-2026-16544.md): Awx: websocket eventconsumer missing authorization for inventory\_update\_events, project\_update\_events, and system\_job\_events allows cross-organization stdout disclosure (CVSS 6.5, Red Hat Ansible Automation Platform)
- [CVE-2026-61392](https://cve.now/CVE-2026-61392.md): There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information (CVSS 5.3, Hikvision DS-2CD Series · Hikvision DS-2DE Series)
- [CVE-2026-61391](https://cve.now/CVE-2026-61391.md): There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malf (CVSS 7.2, Hikvision DS-2CD Series · Hikvision DS-2DE Series)
- [CVE-2026-61390](https://cve.now/CVE-2026-61390.md): There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfuncti (CVSS 7.7, Hikvision DS-2CD Series · Hikvision DS-2DE Series)
- [CVE-2026-57600](https://cve.now/CVE-2026-57600.md): Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial s (CVSS 7.5, Hikvision DS-2CD Series · Hikvision DS-2DE Series +2)
- [CVE-2026-57599](https://cve.now/CVE-2026-57599.md): There is a privilege escalation vulnerability in some Hikvision cameras. (CVSS 6.6, Hikvision DS-2CD Series)
- [CVE-2026-16473](https://cve.now/CVE-2026-16473.md): Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame (CVSS 4.3, Red Hat Enterprise Linux)
- [CVE-2026-14551](https://cve.now/CVE-2026-14551.md): Local Privilege Escalation in servereye client (sensorhub) (CVSS 8.8, servereye Windows Agent)
- [CVE-2026-2406](https://cve.now/CVE-2026-2406.md): IDOR in Universe Software's Online Registration and Workflow Management System (CVSS 6.5, Universe Software Computer Marketing Trade and Industry Onl…)
- [CVE-2026-15787](https://cve.now/CVE-2026-15787.md): Ultimate Addons for Elementor \<= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes (CVSS 6.4, brainstormforce Ultimate Addons for Elementor)
- [CVE-2026-63264](https://cve.now/CVE-2026-63264.md): Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping \< 5.9.3 (CVSS 5.3, joomshopping.com JoomShopping extension for Joomla)
- [CVE-2026-63048](https://cve.now/CVE-2026-63048.md): Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 (CVSS 9.4, joomlack.fr Page Builder CK extension for Joomla)
- [CVE-2026-63047](https://cve.now/CVE-2026-63047.md): Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 (CVSS 7.5, joomdonation.com Events Booking extension for Joomla)
- [CVE-2026-45820](https://cve.now/CVE-2026-45820.md): fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). (CVSS 6.6, 101arrowz fflate · fflate)
- [CVE-2026-3821](https://cve.now/CVE-2026-3821.md): Supermicro SMASH service contain an Arbitrary code execution issue (CVSS 8.8, SMCI X14DBG-DAP,X14DBI)
- [CVE-2026-14322](https://cve.now/CVE-2026-14322.md): Timetics \< 1.0.57 - Unauthenticated Booking Auto-Approval via Arbitrary payment\_method (CVSS 5.3, Timetics)
- [CVE-2026-12987](https://cve.now/CVE-2026-12987.md): Events Manager \< 7.3.7 - Unauthenticated SQL Injection via PHP Object Injection in Booking Registration (CVSS 7.5, Events Manager)
- [CVE-2026-12968](https://cve.now/CVE-2026-12968.md): Product Addons – WowAddons \< 1.6.15 - Unauthenticated Stored XSS via Arbitrary SVG Upload (CVSS 8.8, Product Addons and Product Options With Custom Fields)
- [CVE-2026-15802](https://cve.now/CVE-2026-15802.md): WP Foodbakery \<= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete\_locations\_backup\_file AJAX Action (CVSS 8.1, Chimpstudio WP Foodbakery)
- [CVE-2026-16492](https://cve.now/CVE-2026-16492.md): umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection (CVSS 5.1, umijs umi)
- [CVE-2026-56844](https://cve.now/CVE-2026-56844.md): A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and (CVSS 8.4, Veeam Backup and Replication)
- [CVE-2026-16490](https://cve.now/CVE-2026-16490.md): itsourcecode Hospital Management System prescription.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2025-44089](https://cve.now/CVE-2025-44089.md): An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a crafted archive file. (CVSS 8.8)
- [CVE-2025-44090](https://cve.now/CVE-2025-44090.md): An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading and executing a crafted archive file. (CVSS 8.8)
- [CVE-2025-50324](https://cve.now/CVE-2025-50324.md): An issue in Milos Paripovic OneCommander v.3.96.0.0 allows a remote attacker to execute arbitrary code via the OneCommander.exe component. (CVSS 8.8)
- [CVE-2025-50325](https://cve.now/CVE-2025-50325.md): BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. (CVSS 5.4)
- [CVE-2025-50327](https://cve.now/CVE-2025-50327.md): An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbitrary code via a byp (CVSS 8.8)
- [CVE-2025-50329](https://cve.now/CVE-2025-50329.md): An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code v (CVSS 9.8)
- [CVE-2025-50330](https://cve.now/CVE-2025-50330.md): An issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote attacker to escalate privileges and execute arbitrary code via (CVSS 8.8)
- [CVE-2025-60835](https://cve.now/CVE-2025-60835.md): An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal. (CVSS 7.8)
- [CVE-2026-38763](https://cve.now/CVE-2026-38763.md): An issue in Unistal Systems Pvt. (CVSS 5.5)
- [CVE-2026-38765](https://cve.now/CVE-2026-38765.md): An issue in Unistal Systems Pvt. (CVSS 7.8)
- [CVE-2026-38766](https://cve.now/CVE-2026-38766.md): An issue in Unistal Systems Pvt. (CVSS 7.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-07-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.