CVEs published July 20 to July 26, 2026
2,806 CVEs were published Jul 20 to Jul 26, 2026, 474 of them critical. CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 2,806
- Critical
- 474
- Added to CISA KEV
- 6
- Busiest day
- Tue, Jul 21 (1,474)
- Quietest day
- Sun, Jul 26 (15)
- July 20, 2026266 CVEs · 45 critical
- July 21, 20261,474 CVEs · 308 critical
- July 22, 2026199 CVEs · 19 critical
- July 23, 2026376 CVEs · 57 critical
- July 24, 2026192 CVEs · 19 critical
- July 25, 2026284 CVEs · 25 critical
- July 26, 202615 CVEs · 1 critical
Added to CISA KEV 6
- CVE-2021-27137An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724.DD-WRT
- CVE-2026-0770Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution VulnerabilityLangflow
- CVE-2026-60137WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_QueryWordPress
- CVE-2026-63030WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code ExecutionWordPress · wordpress-multisite
- CVE-2026-16232Authentication Bypass in the SmartConsole Login Process Using an Application Tokencheckpoint Quantum Security Management · checkpoint Multi-D…
- CVE-2026-50522Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…