CVEs published July 24, 2026
192 CVEs were published on July 24, 2026: 19 critical, 79 high.
- Published
- 192
- Critical
- 19
- High
- 79
- Medium
- 58
- Low
- 4
- Unrated
- 32
- Now in CISA KEV
- 0
- Fix available
- 103
Most affected products
- Linux
- 48
- Loytec LIP-ME20xC · Loytec L-INX +6
- 7
- Apache Software Foundation Apache NimBLE
- 6
- FFmpeg
- 6
- Devolutions PowerShell Universal
- 5
- Imagination Technologies Graphics DDK
- 4
- libssh2
- 4
- nuxsmin sysPass
- 4
- Red Hat Enterprise Linux
- 4
- Weintek cMT3092X firmware · Weintek EasyWeb
- 4
Critical 19
- CVE-2026-16280GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffsetImagination Technologies Graphics DDK
- CVE-2026-61884Tycon Systems TPDIN-Monitor-WEB2 Missing Authentication for Critical FunctionTycon Systems TPDIN-Monitor-WEB2
- CVE-2026-62835Azure Portal Information Disclosure VulnerabilityMicrosoft Azure Portal
- CVE-2026-48021epa4all Security Incident: Implement keystore based on Telematik TSL, implement hostname check and certificate check for lib-vaumed-united epa4all
- CVE-2026-64232block: recompute nr_integrity_segments in blk_insert_cloned_requestLinux
- CVE-2026-64216netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()Linux
- CVE-2026-58586Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebpZAPAD Image::WebP
- CVE-2026-56163Microsoft Azure Kubernetes Service Elevation of Privilege VulnerabilityMicrosoft Azure Kubernetes Service
- CVE-2026-58630Azure App Service on Azure Stack Hub Elevation of Privilege VulnerabilityMicrosoft Azure App Service for Linux
- CVE-2026-57106Data Quality Elevation of Privilege VulnerabilityMicrosoft Purview Data Governance
- CVE-2026-12503Loytec LINX firmware: Improper Link Resolution in /usr/bin/larm_starterLoytec LIP-ME20xC · Loytec L-INX +6
- CVE-2026-16634TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99FELIPE TOML::XS
- CVE-2026-24727SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous TypeSUNNET Technology Co. Corporate Training Management System
- CVE-2026-15704CWE-863: ABAC authorization bypass via trailing slash route normalization in Eclipse BaSyx Go ComponentsEclipse Foundation Eclipse BaSyx Go Components
- CVE-2026-12877Software Issue Manager < 5.1.0 - Unauthenticated SQL Injection via Search ParameterProject Management, Bug and Issue Tracking Plugin
- CVE-2026-58275Azure DNS Elevation of Privilege VulnerabilityMicrosoft Azure DNS
- CVE-2026-62825Azure Key Vault Elevation of Privilege VulnerabilityMicrosoft Azure Key Vault
- CVE-2026-56191Microsoft Exchange Online Tampering VulnerabilityMicrosoft Exchange Online
- CVE-2026-50517Microsoft M365 Copilot Remote Code Execution VulnerabilityMicrosoft 365 Copilot
High 79
- CVE-2026-60134Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security DecisionWeintek cMT3092X firmware · Weintek EasyWeb
- CVE-2026-61892Weintek cMT3092X Incorrect Permission Assignment for Critical ResourceWeintek cMT3092X firmware · Weintek EasyWeb
- CVE-2025-71408NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Argumentsntlk · nltk
- CVE-2026-66041FFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc FilterFFmpeg
- CVE-2026-66040FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf EncoderFFmpeg
- CVE-2026-66039FFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF FileFFmpeg
- CVE-2026-66038FFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.cFFmpeg
- CVE-2026-66037FFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()FFmpeg
- CVE-2026-66036FFmpeg Heap Out-of-Bounds Write in vf_hqdn3d FilterFFmpeg
- CVE-2026-17107Cluster-proxy: impersonation-header injection grants cluster-admin on every managed clusterRed Hat multicluster engine for Kubernetes
- CVE-2026-48036Hulumi: Drift classifier fails open on adapter errors and over-promotes Mixed verdictskerberosmansour hulumi · @hulumi/drift
- CVE-2026-48035Hulumi: AccountFoundation audit-delivery S3 bucket could be silently weakenedkerberosmansour hulumi · @hulumi/baseline
- CVE-2026-48033Hulumi: Policy packs bypassed by a forged Pulumi-URN logical namekerberosmansour hulumi · @hulumi/policies
- CVE-2026-48032Hulumi: IAM-role policy checks bypassed when the role trusts multiple OIDC providerskerberosmansour hulumi · @hulumi/policies
- CVE-2026-48034HULUMI-H5 bypass via decoy sibling resources targeting a different bucketkerberosmansour hulumi · @hulumi/policies
- CVE-2026-54342TLS Certificate Verification Disabled on CXF Transport Clients in epa4allmed-united epa4all
- CVE-2026-66035libssh2 Heap Buffer Overflow via ETM Cipher Negotiationlibssh2
- CVE-2026-66034libssh2 Heap Out-of-Bounds Read via publickey subsystemlibssh2
- CVE-2026-66033libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiationlibssh2
- CVE-2026-66032libssh2 Double-Free Heap Corruption via sftp_open()libssh2
- CVE-2026-65623Quadratic CPU blow-up reassembling fragmented WebSocket messages in Banditmtrudel bandit
- CVE-2026-65711sysPass 3.2.11 Authenticated OS Command Injection via Backup Pathnuxsmin sysPass
- CVE-2026-65710sysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryptionnuxsmin sysPass
- CVE-2026-65709sysPass 3.2.11 Missing Object-Level Authorization via JSON-RPC APInuxsmin sysPass
- CVE-2026-65708sysPass 3.2.11 Insecure Direct Object Reference via AccountFileControllernuxsmin sysPass
- CVE-2026-65707Likeshop 3.0.5 Authenticated SQL Injection via adjustAccount Endpointlikeadmin-likeshop likeshop
- CVE-2026-65693Microweber CMS 2.0.20 Server-Side Template Injection via Mail Templatesmicroweber
- CVE-2026-64255wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlersLinux
- CVE-2026-64251pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()Linux
- CVE-2026-64247KVM: x86: hyper-v: Bound the bank index when querying sparse banksLinux
- CVE-2026-64243ASoC: codecs: simple-mux: Fix enum control bounds checkLinux
- CVE-2026-64235x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolinesLinux
- CVE-2026-66027Suna < 0.9.102 Broken Access Control via Message Queue APIkortix-ai suna
- CVE-2026-64226sched_ext: Avoid UAF in scx_root_enable_workfn() init failure pathLinux
- CVE-2026-64223wifi: mac80211: consume only present negotiated TTLM mapsLinux
- CVE-2026-64222octeontx2-pf: avoid double free of pool->stack on AQ init failureLinux
- CVE-2026-64221spi: ti-qspi: fix use-after-free after DMA setup failureLinux
- CVE-2026-64219drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_asyncLinux
- CVE-2026-64218batman-adv: bla: fix report_work leak on backbone_gw purgeLinux
- CVE-2026-64217netfs: Fix overrun check in netfs_extract_user_iter()Linux
- CVE-2026-64210net/mlx5e: xsk: Fix unlocked writing to ICOSQLinux
- CVE-2026-64208crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checksLinux
- CVE-2026-16801Improper control of generation of code ('Code Injection') in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier Devolutions PowerShell Universal
- CVE-2026-16800Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Universal 2026.2.2 and earlier aDevolutions PowerShell Universal
- CVE-2026-8789Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Arbitrary Connection Deletioneasyappointments Easy Appointments
- CVE-2026-55732Loytec LINX firmware: Out-of-bounds Read in BACnet packet parsing (bacdt_datetime_to_tod)Loytec LIP-ME20xC · Loytec L-INX +6
- CVE-2026-55730Loytec LWEB802: Reflected Cross-Site Scripting in LWEB802Loytec LWEB-802
- CVE-2026-55729Loytec LWEB802: Exposure of Sensitive Information in browser localStorageLoytec LWEB-802
- CVE-2026-12504Loytec LINX firmware: Improper Authentication in PAM configurationLoytec LIP-ME20xC · Loytec L-INX +6
- CVE-2026-12502Loytec LINX firmware: Improper Privilege Management in /usr/bin/ltsudoLoytec LIP-ME20xC · Loytec L-INX +6
- CVE-2026-12496Loytec LINX firmware: Unauthenticated stored XSS in OPC XML-DA serverLoytec LIP-ME20xC · Loytec L-INX +6
- CVE-2026-9765CVE-2026-9765 CVE RecordGrafana IRM
- CVE-2026-45816Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK requestApache Software Foundation Apache NimBLE
- CVE-2026-45815Apache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handlerApache Software Foundation Apache NimBLE
- CVE-2026-45813Apache NimBLE: Incorrect data validation in BASS add/modify source operationApache Software Foundation Apache NimBLE
- CVE-2026-45811Apache NimBLE: Buffer overflow in socket HCI transportApache Software Foundation Apache NimBLE
- CVE-2026-66144Apache Neethi: Remote PolicyReference fetch lacks resource boundsApache Software Foundation Apache Neethi
- CVE-2026-66143Apache Neethi: Missing global alternative-output budget across policy computation pathsApache Software Foundation Apache Neethi
- CVE-2026-66142Apache Neethi: Uncontrolled recursion in policy processingApache Software Foundation Apache Neethi
- CVE-2026-15243Improper Validation of Certificate in CAS ClientJava Apereo CAS Client · Apereo Jasig CAS Client
- CVE-2026-10610Local privilege escalation in ESET security applications for macOSESET spol. s.r.o. ESET Endpoint Security for macOS · ESET s…
- CVE-2026-15810Cross-Site Scripting (XSS) in Looker allows Admin Account TakeoverGoogle Cloud Looker
- CVE-2026-7483Local privilege escalation in ESET security applications for macOSESET spol. s.r.o. ESET Endpoint Security for macOS · ESET s…
- CVE-2026-10033EventON Action User <= 2.5.14 - Missing Authorization to Unauthenticated Privilege Escalation via evoau_save_capability AJAX ActionEventON Action User
- CVE-2026-15401VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' Parametere4jvikwp VikBooking Hotel Booking Engine & PMS
- CVE-2026-49745GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0Imagination Technologies Graphics DDK
- CVE-2026-49744GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex()Imagination Technologies Graphics DDK
- CVE-2026-49743GPU DDK - Write UAF of sync checkpoint in GPU kick function after export fence file descriptor is prematurely closedImagination Technologies Graphics DDK
- CVE-2026-16519GeoVision GV-IP Device Utility DLL Search Order Hijacking VulnerabilityGeoVision GV-IP Device Utility
- CVE-2026-14603WowOptin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row InjectionWowOptin: Next-Gen Popup Maker
- CVE-2026-12981CAFEHAUS API <= 1.0.0 - Unauthenticated Arbitrary User Password ResetCAFEHAUS API
- CVE-2026-12497ProfilePress < 4.16.18 - Unauthenticated Privilege Escalation via Registration Role SelectionPaid Membership Plugin, Ecommerce, User Registration Form,…
- CVE-2026-14172Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable InvocationRapid7 InsightVM · Rapid7 Nexpose +1
- CVE-2026-16870Multiple Security Vulnerabilities in Snowflake libsnowflakeclientSnowflake libsnowflakeclient · Snowflake PHP PDO Driver +1
- CVE-2026-66141Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.Exim
- CVE-2026-66140Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because argumentsExim
- CVE-2026-66138In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a runniOpenStack Ironic Python Agent
- CVE-2026-12736WPify Woo <= 5.4.16 - Authenticated (Shop Manager+) Privilege Escalation via Arbitrary Option Update via save_option REST EndpointWPify Woo – Withdrawal, CRN/VAT, QR payments, Heureka and m…
- CVE-2026-35425Azure API Management (APIM) Remote Code Execution VulnerabilityMicrosoft Azure API Management
Medium, low and unrated 94
- CVE-2026-66337Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()Red Hat Enterprise Linux
- CVE-2026-66338Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()Red Hat Enterprise Linux
- CVE-2026-66339Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnelsRed Hat Enterprise Linux
- CVE-2026-61886Weintek cMT3092X Plaintext Storage of a PasswordWeintek cMT3092X firmware · Weintek EasyWeb
- CVE-2026-60135Weintek cMT3092X Incorrect User ManagementWeintek cMT3092X firmware · Weintek EasyWeb
- CVE-2026-55985Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive InformationTycon Systems TPDIN-Monitor-WEB2
- CVE-2026-57531Milkdown < 7.21.3 DOM XSS via innerHTML Assignmentmilkdown
- CVE-2026-57530Milkdown < 7.21.3 Stored XSS via javascript: URL in link hrefmilkdown
- CVE-2026-48037Hulumi: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posturekerberosmansour hulumi · @hulumi/baseline
- CVE-2026-64254NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BARLinux
- CVE-2026-64253kernel/fork: clear PF_BLOCK_TS in copy_process()Linux
- CVE-2026-64252MIPS: DEC: Prevent initial console buffer from landing in XKPHYSLinux
- CVE-2026-64250LoongArch: Report dying CPU to RCU in stop_this_cpu()Linux
- CVE-2026-64249fpga: region: fix use-after-free in child_regions_with_firmware()Linux
- CVE-2026-64248MIPS: smp: report dying CPU to RCU in stop_this_cpu()Linux
- CVE-2026-64246power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()Linux
- CVE-2026-64245fbdev: modedb: fix a possible UAF in fb_find_mode()Linux
- CVE-2026-64244drivers/base/memory: set mem->altmap after successful device registrationLinux
- CVE-2026-64242usb: gadget: net2280: Fix double free in probe error pathLinux
- CVE-2026-64241gpio: rockchip: teardown bugs and resource leaksLinux
- CVE-2026-64240media: rc: igorplugusb: fix control request setup packetLinux
- CVE-2026-64239mm/damon/sysfs-schemes: delete tried region in regions_rmdirs()Linux
- CVE-2026-64238gpio: shared: fix deadlock on shared proxy's parent removalLinux
- CVE-2026-64237Input: elan_i2c - validate firmware size before useLinux
- CVE-2026-64236i2c: davinci: fix division by zero on missing clock-frequencyLinux
- CVE-2026-64234tty: serial: pch_uart: add check for dma_alloc_coherent()Linux
- CVE-2026-64233usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bindLinux
- CVE-2026-64231drm/msm/dsi: don't dump registers past the mapped regionLinux
- CVE-2026-64230regulator: tps65219: fix irq_data.rdev not being assignedLinux
- CVE-2026-64229x86/mm: Disable broadcast TLB flush when PCID is disabledLinux
- CVE-2026-64228net: ethtool: phy: avoid NULL deref when PHY driver is unboundLinux
- CVE-2026-64227ACPI: driver: Check ACPI_COMPANION() against NULL during probeLinux
- CVE-2026-64225octeontx2-af: CGX: add bounds check to cgx_speed_mbps indexLinux
- CVE-2026-64224octeontx2-pf: fix double free in rvu_rep_rsrc_init()Linux
- CVE-2026-64220device property: set fwnode->secondary to NULL in fwnode_init()Linux
- CVE-2026-64215drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_tableLinux
- CVE-2026-64214powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()Linux
- CVE-2026-64213hwmon: (lm90) Add lock protection to lm90_alertLinux
- CVE-2026-64212wifi: iwlwifi: mld: don't dereference a pointer before NULL checking itLinux
- CVE-2026-64211srcu: Don't queue workqueue handlers to never-online CPUsLinux
- CVE-2026-64209phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing configLinux
- CVE-2026-17039Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment pathRed Hat Certificate System · Red Hat Enterprise Linux
- CVE-2026-66007Datasets Path Traversal via Unsanitized file_name Metadatahuggingface datasets · datasets
- CVE-2026-66006lakeFS Unauthenticated Operator Metadata Overwrite via setup_comm_prefstreeverse lakeFS
- CVE-2026-66005Jan Local API Server CORS Origin Reflection via 0.0.0.0 Bindingjanhq jan
- CVE-2026-49326Apache HBase: Missing scanner instance owner check in thrift delegation serviceApache Software Foundation Apache HBase
- CVE-2026-16802Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local Devolutions PowerShell Universal
- CVE-2026-16799Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier allows an auDevolutions PowerShell Universal
- CVE-2026-16798Insertion of sensitive information into sent data in the automation jobs API in Devolutions PowerShell Universal 2026.2.2 and earlier allowsDevolutions PowerShell Universal
- CVE-2026-66004BlenderMCP Path Traversal via download_polyhaven_asset APIahujasid blender-mcp · blender-mcp
- CVE-2026-8308Reflected XSS Polen Media's Website TemplatePolen Media Software and Information Services Website Templ…
- CVE-2026-17059Keycloak-services: keycloak-services: information disclosure via role-users endpoint bypasses per-user view filterRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-55731Loytec LINX firmware: Unchecked input for loop condition in the SNMP agentLoytec LIP-ME20xC · Loytec L-INX +6
- CVE-2026-55728Loytec LINX firmware: Stack-based Buffer Overflow in cmd_ipaddr_conflictLoytec LIP-ME20xC · Loytec L-INX +6
- CVE-2026-7007Division by zero in Zephyr ext2 superblock parsing allows DoS via crafted filesystem imagezephyrproject zephyr
- CVE-2026-17048Keycloak-services: keycloak-services: vault-resolved rotated client secrets leaked via admin rest apiRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-16743Accountsservice: accountsservice: arbitrary file read via seticonfile for systemd-homed usersRed Hat Enterprise Linux
- CVE-2026-7484Improper Access Control in Abis Technology's AVESİSABIS Technology Ltd. AVESİS
- CVE-2026-46452Apache NimBLE: Mesh Proxy SAR reassembly unbounded append and unchecked failureApache Software Foundation Apache NimBLE
- CVE-2026-45812Apache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report HandlerApache Software Foundation Apache NimBLE
- CVE-2026-66010DOMPurify before 3.4.12 Hook Bypass via CUSTOM_ELEMENT_HANDLINGcure53 DOMPurify · dompurify
- CVE-2026-66009Parse Server 9.0.0 Information Disclosure via GraphQL Error Messagesparse-community parse-server
- CVE-2026-66008Parse Server 9.0.0 Information Disclosure via GraphQL Error Messagesparse-community parse-server
- CVE-2026-16730Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setupRed Hat Enterprise Linux · Red Hat Update Infrastructure +2
- CVE-2026-15663Ninja Forms <= 3.14.9 - Authenticated (Administrator+) SQL Injection via Import File 'settings' Keykstover Ninja Forms – The Contact Form Builder That Grows W…
- CVE-2026-12702In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deploymenOctopus Deploy Octopus Server
- CVE-2026-63317Apache OpenNLP: Arbitrary Class Instantiation in GeneratorFactory via Feature Descriptor XMLApache Software Foundation Apache OpenNLP
- CVE-2026-15346VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' Parametere4jvikwp VikBooking Hotel Booking Engine & PMS
- CVE-2026-15739Rich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode Attributewidgetpack Rich Showcase for Google Reviews
- CVE-2026-15821SureDash <= 1.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesbrainstormforce SureDash – Community, Courses & Member Dash…
- CVE-2026-56392Heap-based Buffer Overflow in GNU coreutilsGNU coreutils
- CVE-2026-56391Out‑of‑bounds Read in GNU coreutilsGNU coreutils
- CVE-2026-15464WP Hotel Booking <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget_search' Shortcode Attributethimpress WP Hotel Booking
- CVE-2026-15653Visualizer <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'backend-title' Parameterthemeisle Visualizer – Tables & Charts Manager with Built-i…
- CVE-2026-12654Payment Plugins for Stripe WooCommerce <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification via Empty Webhook Secretpaymentplugins Payment Plugins for Stripe WooCommerce
- CVE-2026-15648Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attributeberocket Brands for WooCommerce
- CVE-2026-15334Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attributecozythemes Cozy Blocks – Page Builder for Gutenberg Editor…
- CVE-2026-15755Open User Map <= 1.4.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes100plugins Open User Map – Interactive Leaflet Maps
- CVE-2026-15333Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cozyCustomFont' Block Attributecozythemes Cozy Blocks – Page Builder for Gutenberg Editor…
- CVE-2026-15665Fluent Support <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode Attributewpmanageninja Fluent Support – Helpdesk & Customer Support…
- CVE-2026-16910Quay: ssrf in red hat quay notification webhooks (slack/generic)Red Hat OpenShift Update Service · Red Hat Quay
- CVE-2026-12690ProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing AuthorizationProfileGrid
- CVE-2026-12689ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing AuthorizationProfileGrid
- CVE-2026-12688ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN ForgeryProfileGrid
- CVE-2026-66139OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.OpenStack Zaqar
- CVE-2026-54422In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extracOpenStack Ironic Python Agent
- CVE-2026-11922Rate-limit Bypass in zenml-io/zenmlzenml-io/zenml
- CVE-2026-11354Participants Database <= 2.7.8.3 - Missing Authorization to Unauthenticated Arbitrary Record Update / Sensitive Information Exposure via 'id' Parameterxnau Participants Database
- CVE-2025-9205MapSVG Lite <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingoyatek MapSVG – Vector maps, Image maps, Google Maps
- CVE-2026-15420Nexter Blocks <= 5.0.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion via 'plus_name' Parameterposimyththemes Nexter Blocks – Gutenberg Blocks, Page Build…
- CVE-2026-13464Kirki <= 6.0.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'context' Parameterthemeum Kirki – Freeform Page Builder, Website Builder & Cu…
- CVE-2026-6454Firelight Lightbox <= 2.3.20 - Authenticated (Contributor+) Stored DOM Cross-Site Scripting via PDF beforeLoad 'href' Attributefirelightwp Firelight Lightbox
- CVE-2026-15100Post Grid Gutenberg Blocks <= 5.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'searchnoresult' Block Attributewpxpo Post Grid Gutenberg Blocks – PostX
- CVE-2026-49159Microsoft Graph Information Disclosure VulnerabilityMicrosoft Graph