CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- langchain4jLangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvector7.6 High
- drupal flag attendance field, flag attendance field project attendance field +1 moreFlag attendance field - Critical - PHP object injection - SA-CONTRIB-2026-0498.1 High
- drupal formatter fieldFormatter Field - Critical - PHP object injection - SA-CONTRIB-2026-0489.8 Critical
- sourcecodester cet automated grading system with ai predictive analyticsSourceCodester CET Automated Grading System with AI Predictive Analytics Student Self-Registration Endpoint index.php access control6.9 Medium
- projectcapsule capsuleCapsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected5.7 Medium
- gitea open source git serverGitea redirect handling permits open redirects through backslash paths6.1 Medium
- gitea open source git serverGitea 3D file viewer allows stored XSS through glTF extensionsRequired8.7 High
- gitea open source git serverPublic-only tokens bypass private-resource restrictions on `/api/v1/user` self routes8.1 High
- gitea open source git serverGitea organization forks can expose organization secrets without create permission8.1 High
- daytonaio daytonaDaytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join6.5 Medium
- anthropic claude code, anthropics claude-code +1 moreClaude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch6.0 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Any authenticated user can read other users' private notes via Socket.IO5.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameter6.3 Medium
- nesquena hermes-webuiHermes WebUI < 0.51.443 - Cross-Profile Session Data Exfiltration via Session Export Endpoint7.1 High
- nesquena hermes-webuiHermes WebUI < 0.51.443 - Broken Access Control in /api/session Endpoint7.1 High
- hermes-webuiHermes WebUI < 0.51.409 - Unauthenticated Passkey Registration via Authentication Bypass9.1 Critical
- nesquena hermes-webuiHermes WebUI < 0.51.368 - Profile-Scoped Authorization Bypass via Forged hermes_profile Cookie8.6 High
- nousresearch hermes-agentHermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store Files6.8 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: RAG ACL Bypass in Milvus Multitenancy Mode6.5 Medium
- nousresearch hermes-agentHermes Agent < 0.16.0 - DNS Rebinding Bypass via WebSocket Endpoints8.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects7.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal7.7 High
- nodejs undiciundici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching3.7 Low
- rti connext professionalOut-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libraries,Persistence Service) allows Overflow Buffers.4.8 Medium
- rti connext microInteger Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.8.8 High
- rti connext microOut-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.8.8 High
- rti connext professionalMissing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing.6.1 Medium
- rti connext professionalBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow.8.8 High
- rti connext professionalOut-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.9.2 Critical
- rti connext professionalMissing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data.6.0 Medium
- rti connext professionalHeap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.9.2 Critical
- nodejs undiciundici vulnerable to HTTP response queue poisoning via keep-alive socket reuse3.7 Low
- splunk ai toolkitOS Command Injection in the btool Configuration Helper in Splunk AI Toolkit9.1 Critical
- splunk ai toolkitInsecure Default Domain Allowlist in Splunk AI Toolkit4.3 Medium
- envoyproxy envoy, red hat openshift service mesh 2.6, openshift service mesh 3.0 +4 more +6 moreEnvoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplification7.5 High
- nodejs undiciundici vulnerable to HTTP header injection via Set-Cookie percent-decoding5.9 Medium
- nv-tlabs gen3cNVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API9.3 Critical
- pragdave earmarkStored XSS via unescaped HTML attribute values in earmark4.8 Medium
- cisco webex app, webex web app +1 moreA vulnerability in the browser-based version of Cisco Webex App could have allowed an...4.3 Medium
- cisco umbrella virtual appliance, umbrella insights virtual appliance +1 moreCisco Umbrella Virtual Appliance Privilege Escalation Vulnerability6.0 Medium
- cisco crosswork network controller, crosswork network change automation +1 moreCisco Crosswork Network Controller Remote Code Execution Vulnerability6.3 Medium
- cisco identity services engine, identity services engine software, ise passive identity connector +1 more +3 moreCisco Identity Services Engine Information Disclosure Vulnerability7.5 High
- cisco identity services engine, identity services engine software, ise passive identity connector +1 more +3 moreCisco Identity Services Engine Remote Code Execution Vulnerability9.1 Critical
- nodejs undici, red hat cluster observability operator 1.5.0, cryostat 4 +25 more +27 moreundici WebSocket client vulnerable to denial of service via fragment count bypass7.5 High
- red hat hardened images, satellite 6, satellite 6.16 for rhel 8 +4 more +6 moreKatello: missing repository authorization in content_uploads exposes cross-product content existence4.3 Medium
- dell aiops, aiops collector +1 moreDell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials"...7.8 High
- autodesk revitRFA File Parsing Vulnerability in Autodesk Revit5.5 Medium
- dell powerflex rack, powerflex rack release certification matrix +1 moreDell PowerFlex rack, version(s) RCM 3.7/3.7, contain(s) a Host Header Injection vulnerability. An...4.3 Medium
- dell powerflex, powerflex manager +1 moreDell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Neutralization of Special...5.7 Medium
- dell powerflex, powerflex manager +1 moreDell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Neutralization of Special...3.5 Low
- Show moreLoading…