CVEs published July 6 to July 12, 2026
1,493 CVEs were published Jul 6 to Jul 12, 2026, 146 of them critical. CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,493
- Critical
- 146
- Added to CISA KEV
- 6
- Busiest day
- Wed, Jul 8 (363)
- Quietest day
- Sun, Jul 12 (63)
- July 6, 2026196 CVEs · 30 critical
- July 7, 2026167 CVEs · 21 critical
- July 8, 2026363 CVEs · 23 critical
- July 9, 2026277 CVEs · 31 critical
- July 10, 2026348 CVEs · 33 critical
- July 11, 202679 CVEs · 5 critical
- July 12, 202663 CVEs · 3 critical
Added to CISA KEV 6
- CVE-2026-48282ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe ColdFusion
- CVE-2026-48908Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2joomshaper.net SP Page Builder extension for Joomla
- CVE-2026-55255Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flowlangflow-ai langflow · langflow
- CVE-2026-56290Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0JoomlaCK.fr Page Builder CK extension for Joomla
- CVE-2026-48939Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15icagenda.com iCagenda extension for Joomla
- CVE-2026-56291Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1balbooa.com Balbooa Forms extension for Joomla