CVEs published July 26, 2026
15 CVEs were published on July 26, 2026: 1 critical, 7 high.
- Published
- 15
- Critical
- 1
- High
- 7
- Medium
- 6
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 10
Most affected products
- Microsoft Edge
- 3
- codexu NoteGen
- 2
- Linux
- 2
- mf-yang openclaw-cn
- 2
- nanocoai NanoClaw
- 2
- koxudaxi datamodel-code-generator
- 1
- NousResearch hermes-agent
- 1
- perwendel spark
- 1
- techjewel Fluent Forms Pro Add On Pack
- 1
Critical 1
High 7
- CVE-2026-57990Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMicrosoft Edge
- CVE-2026-57989Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMicrosoft Edge
- CVE-2026-17497NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/pythoncodexu NoteGen
- CVE-2026-17496NoteGen chat preview XSS via unsanitized AI/skill HTML renderingcodexu NoteGen
- CVE-2024-14040net: nexthop: Increase weight to u16Linux
- CVE-2026-63720datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Fieldkoxudaxi datamodel-code-generator
- CVE-2026-15962Fluent Forms Pro Add On Pack <= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Fieldtechjewel Fluent Forms Pro Add On Pack
Medium, low and unrated 7
- CVE-2026-57978Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft Edge
- CVE-2026-17459perwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlinkperwendel spark
- CVE-2026-17458mf-yang openclaw-cn Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgerymf-yang openclaw-cn
- CVE-2026-17457mf-yang openclaw-cn Scheme navigation-guard.ts assertBrowserNavigationAllowed information disclosuremf-yang openclaw-cn
- CVE-2026-17434nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorizationnanocoai NanoClaw
- CVE-2026-17433nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorizationnanocoai NanoClaw
- CVE-2026-17432NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access controlNousResearch hermes-agent