CVEs published June 8 to June 14, 2026
1,769 CVEs were published Jun 8 to Jun 14, 2026, 135 of them critical. CISA added 7 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,769
- Critical
- 135
- Added to CISA KEV
- 7
- Busiest day
- Tue, Jun 9 (718)
- Quietest day
- Sun, Jun 14 (18)
- June 8, 2026286 CVEs · 22 critical
- June 9, 2026718 CVEs · 36 critical
- June 10, 2026251 CVEs · 23 critical
- June 11, 2026194 CVEs · 19 critical
- June 12, 2026280 CVEs · 32 critical
- June 13, 202622 CVEs · 2 critical
- June 14, 202618 CVEs · 1 critical
Added to CISA KEV 7
- CVE-2026-42271LiteLLM: Authenticated command execution via MCP stdio test endpointsBerriAI litellm · litellm
- CVE-2026-50751User Authentication Bypass in VPN Remote Access and Mobile Accesscheckpoint Quantum Security Gateway · checkpoint Spark Fire…
- CVE-2026-11645Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sanGoogle Chrome
- CVE-2026-20245Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation VulnerabilityCisco Catalyst SD-WAN Controller · Cisco Catalyst SD-WAN Ma…
- CVE-2026-7473Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding BypassArista Networks EOS
- CVE-2026-10520An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated userivanti Sentry
- CVE-2026-35273Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management).Oracle PeopleSoft Enterprise PeopleTools