CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- significant-gravitas autogptAutoGPT has a DoS vulnerability in AddAudioToVideoBlock7.1 High
- significant-gravitas autogptAutoGPT has a DoS vulnerability in ScreenshotWebPageBlock8.7 High
- civilian board of contract appeals electronic docketing system (eds), government accountability office electronic protest docketing system (epds) +1 moreU.S. GAO EPDS and CBCA EDS network access control bypass5.1 Medium
- civilian board of contract appeals electronic docketing system (eds), government accountability office electronic protest docketing system (epds) +1 moreU.S. GAO EPDS and CBCA EDS user information disclosure6.9 Medium
- civilian board of contract appeals electronic docketing system (eds), government accountability office electronic protest docketing system (epds) +1 moreU.S. GAO EPDS and CBCA EDS client-based privilege escalation8.7 High
- significant-gravitas autogptAutoGPT has a DoS vulnerability in FileStoreBlock with StepThroughItemsBlock8.7 High
- civilian board of contract appeals electronic docketing system (eds), government accountability office electronic protest docketing system (epds) +1 moreU.S. GAO EPDS and CBCA EDS unauthenticated password change9.3 Critical
- webminWebmin HTTP header authentication bypass9.2 Critical
- webminWebmin information disclosure via regex pattern6.9 Medium
- webminWebmin MFA bypass6.9 Medium
- significant-gravitas autogptAutoGPT has a DoS vulnerability in LoopVideoBlock8.7 High
- haproxyHAProxy - NULL Pointer Dereference in hpack_dht_insert Function8.7 High
- haproxyHAProxy - Integer Overflow in FCGI Demux Record Length Field9.0 Critical
- nesquena hermes-webuiHermes WebUI < 0.51.468 - Resource Exhaustion via Unauthenticated OAuth Flow Endpoint6.9 Medium
- saad iqbal wp easypayWordPress WP EasyPay plugin <= 4.5.0 - Cross Site Request Forgery (CSRF) vulnerability6.5 Medium
- openfga, openfga helm charts +1 moreOpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions2.1 Low
- aiven-open pghoardPGHoard: Password written to debug log2.4 Low
- pipecatPipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID7.5 High
- open-telemetry github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver, opentelemetry-collector-contrib +1 moreOpenTelemetry githubreceiver silently ignores configured required_headers authentication6.9 Medium
- getkirby kirbyKirby: `pages.access` permission is not checked in the `site/find` REST API route7.1 High
- getkirby kirbyKirby: Access to files of top-level drafts is not protected by permissions6.3 Medium
- getkirby kirbyKirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header9.1 Critical
- getkirby kirbyKirby: Cross-site scripting (XSS) from incomplete HTML/XML sanitization in `Dom::sanitize()`8.5 High
- getkirby kirbyKirby: Request header injection in `Http\Remote`6.9 Medium
- getkirby kirbyKirby: Self cross-site scripting (self-XSS) in the writer field7.4 High
- getkirby kirbyKirby: `pages.access` permission is not checked in the pages picker for parent pages5.3 Medium
- open-telemetry github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter, opentelemetry-collector-contrib +1 moreOpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token5.3 Medium
- jupyter server, jupyter-server jupyter server, red hat migration toolkit for applications 8.2 +2 more +4 moreJupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP9.3 Critical
- getgrav gravGrav: Stored CSS injection via Markdown image ?style=… reaches MediaObjectTrait::style()4.8 Medium
- mervinpraison praisonaiPraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update5.3 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()5.0 Medium
- eclipse theia, the eclipse foundation eclipse theia +1 more[Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions8.4 High
- eclipse theia, the eclipse foundation eclipse theia +1 more[Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat6.7 Medium
- getgrav gravGrav: Admin Backup Zip File Exposes Account Credentials and Configuration Secrets6.8 Medium
- bitbonsai mcpvaultMCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence8.4 High
- containers podmanPodman: WORKDIR symlink traversal vulnerability5.3 Medium
- nodemailernodemailer before 9.0.1 File Read and SSRF via raw option7.1 High
- mervinpraison praisonai, praisonai-platform +1 morepraisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery9.8 Critical
- mervinpraison praisonaiPraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable8.8 High
- mervinpraison praisonaiPraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication8.2 High
- mervinpraison praisonaiagentsPraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter8.8 High
- mervinpraison praisonai, praisonai-platform +1 morepraisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)9.8 Critical
- mervinpraison praisonaiPraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation9.1 Critical
- mervinpraison praisonaiPraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default7.5 High
- eclipse theia, the eclipse foundation eclipse theia +1 more[Eclipse Theia] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files in AI Chat8.4 High
- mervinpraison praisonaiPraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml7.8 High
- mervinpraison praisonaiPraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining8.8 High
- mervinpraison praisonaiPraisonAI AgentLoop onToolCall approval runs after tool execution8.8 High
- mervinpraison praisonaiPraisonAI MCPServer exposes unauthenticated HTTP tools/call9.8 Critical
- mervinpraison praisonaiPraisonAI AgentOS exposes unauthenticated agent listing and invocation9.4 Critical
- Show moreLoading…