CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- error311 fileriseFileRise shared-folder upload path traversal allows arbitrary file write and admin takeover9.3 Critical
- betterdocs proBetterDocs Pro <= 3.8.0 - Unauthenticated Local File Inclusion via doc_style9.8 Critical
- hitachi virtual storage platform e390, e590, e790, e390h, e590h, e790h, virtual storage platform e990, e1090, e1090h, virtual storage platform g100, g200, g400, g600, g800, f400, f600, f800 +3 more +5 moreDoS Vulnerability in 10G iSCSI Interface of Hitachi Virtual Storage Platform8.6 High
ts-deepmergenpmts-deepmerge: Prototype Method Override leads to DoS6.9 Medium- canonical microcephMicroCeph path traversal issue in the remote-import API5.1 Medium
- creativethemeshq blocksy companionBlocksy Companion <= 2.1.45 - Authenticated (Editor+) Stored Cross-Site Scripting via 'product_description' Parameter4.4 Medium
- themefusion avada (fusion) builderAvada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry Value9.1 Critical
- wproyal royal addons for elementor – addons and templates kit for elementorRoyal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source6.5 Medium
- legalweb wp dsgvo tools (gdpr)WP DSGVO Tools (GDPR) <= 3.1.39 - Missing Authorization to Unauthenticated Sensitive Personal Data Disclosure via subject-access-request AJAX Endpoint (process_now/is_ajax Parameters)5.3 Medium
- rocklobsterinc bogoBogo <= 3.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via REST API4.3 Medium
- addonspress advanced importAdvanced Import: One-Click Demo Import for WordPress <= 1.4.6 - Authenticated (Author+) Server-Side Request Forgery via 'demo_file' Parameter6.4 Medium
- bitpressadmin bit integrations – form integration, webhook, spreadsheets, crm, lms & email automationBit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping6.5 Medium
- teamwsa woosa – marktplaats for woocommerceWoosa <= 2.0.5 - Authenticated (Administrator+) Arbitrary File Read via 'log_file' Parameter4.9 Medium
- wpdevteam betterdocs – ai documentation, knowledge base, docs, wikis, faq with chatbotBetterDocs <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'blockId' Block Attribute6.4 Medium
- creavi appointment booking calendarAppointment Booking Calendar <= 1.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Booking Field Label6.4 Medium
- techlabpro1 classified listing – ai-powered classified ads & business directoryClassified Listing <= 5.4.2 - Missing Authorization to Authenticated (Subscriber+) Feature Modification via Multiple AJAX Handlers ('listingId'/'id' Parameters)4.3 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreIn libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because...6.9 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within...4.9 Medium
- mitsubishi electric corporation electric melsec iq-f series fx5-enet/ip ethernet module fx5-enet/ipDenial-of-service (DoS) vulnerability in MELSEC iQ-F Series FX5-ENET/IP Ethernet module8.7 High
- adamsilverstein user admin simplifierUser Admin Simplifier <= 3.0.0 - Cross-Site Request Forgery4.3 Medium
- mitsubishi electric corporation electric melsec iq-f series fx5-eip ethernet/ip module fx5-eipDenial-of-service (DoS) vulnerability in MELSEC iQ-F Series EtherNet/IP module8.7 High
- freerdpFreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode7.5 High
- freerdpFreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds Check6.1 Medium
- freerdpFreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch8.7 High
- freerdpFreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag8.7 High
- freerdpFreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch7.2 High
- freerdpFreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation8.7 High
- tenda ac7 firmwareIn Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a...9.8 Critical
- tenda ac7 firmwareTenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform...9.8 Critical
- tenda ac7 firmwareTenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform...9.8 Critical
- tenda ac7 firmwareTenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform...9.8 Critical
- microsoft heif image extensionMicrosoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because...9.1 Critical
- aver ptc115, ptc115+, ptc500+ +1 more +3 moreAVer PTC cameras Files or Directories Accessible to External Parties9.3 Critical
- apollo pharmacy blood glucose monitoring system (model no. apg-01 bt)Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT Cleartext Transmission of Sensitive Information7.1 High
- apollo pharmacy blood glucose monitoring system (model no. apg-01 bt)Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT Missing Authorization7.1 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: Open redirect in multi-factor authentication flow via unvalidated 'next' parameter5.3 Medium
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: Stored XSS via untrusted error and plan-node text rendered through html-react-parser9.3 Critical
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: HTML injection in cloud verify_credentials / deploy endpoints via unsanitised SDK exception text4.8 Medium
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: Unauthenticated pickle deserialization in SQL Editor close / update_connection routes enables remote code execution9.5 Critical
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: AI Assistant read-only transaction bypass allows unauthorised writes and remote code execution9.4 Critical
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: SQL injection in named restore point endpoint5.3 Medium
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: SQL injection in COMMENT ON ... IS '<description>' rendering across dialog templates8.7 High
- golang.org/x/image golang.org/x/image/tiffLack of limit on tile sizes in x/image/tiff in golang.org/x/image7.5 High
- golang.org/x/image golang.org/x/image/webpPanic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image7.5 High
- mervinpraison praisonaiPraisonAI - Information Disclosure via Shared MultiAgentLedger State7.1 High
- mervinpraison praisonaiPraisonAI - Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint8.6 High
- microsoft dynamics 365Dynamics 365 Elevation of Privilege Vulnerability9.9 Critical
- microsoft 365 copilotM365 Copilot Information Disclosure Vulnerability9.8 Critical
- microsoft azure ai bot serviceAzure Bot Service Elevation of Privilege Vulnerability7.7 High
- microsoft cost managementMicrosoft Cost Management Information Disclosure Vulnerability7.5 High
- Show moreLoading…