CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- extro responsive portfolio, rpc +1 moreJoomla! Component RPC Responsive Portfolio 1.6.1 SQL Injection8.8 High
- joomplace quiz deluxeJoomla! Component Quiz Deluxe 3.7.4 SQL Injection8.8 High
- joomplace survey force deluxeJoomla Survey Force Deluxe 3.2.4 SQL Injection via invite Parameter8.8 High
- joombooking jb visaJoomla! Component JB Visa 1.0 SQL Injection via visatype8.8 High
- gegabyte user benchJoomla! Component User Bench 1.0 SQL Injection via userid8.8 High
- gegabyte my projectsJoomla! Component My Projects 2.0 SQL Injection8.8 High
- nextgeneditor nextgen editorJoomla NextGen Editor 2.1.0 SQL Injection via plname Parameter8.8 High
- ruvnet agentic-flowAgentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync8.8 High
- q00 ouroborosOuroboros: Untrusted project .env can still reach RCE via omitted execution-routing keys (Incomplete fix of CVE-2026-47211)8.4 High
- jupyterlabJupyterLab before 4.5.9 Stored XSS via Extension Manager5.1 Medium
- riganti dotvvmDotVVM: Unrestricted file upload5.3 Medium
- riganti dotvvmDotVVM: Missing authorization in AuthorizeActionFilter9.2 Critical
- riganti dotvvmDotVVM: ReDOS in routing8.2 High
- naranor agent-coderagCodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution8.6 High
- cliEntire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind6.2 Medium
- pontedilana php-weasyprintPhpWeasyPrint vulnerable to arbitrary file deletion at shutdown via public $temporaryFiles3.0 Low
- parse-community parse-serverParse Server: Denial of service via exponential-time processing of deeply nested query operators8.7 High
- hcl software verse for androidHCL Verse for Android is susceptible to an injection vulnerability6.3 Medium
- sonos tractTract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx6.1 Medium
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morebpf: Free reuseport cBPF prog after RCU grace period.7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreip6_vti: set netns_immutable on the fallback device.7.8 High
- cedar-policy cedar-javaCedarJava has a policy injection vulnerability8.8 High
- cedar-policy cedar-javaCedarJava has a type confusion vulnerability8.8 High
- guzzleGuzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle5.8 Medium
- guzzle psr7, guzzlephp psr-7 +1 moreguzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization4.8 Medium
- openfga, openfga helm charts +1 moreOpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset6.8 Medium
- guzzleGuzzle: Silent HTTPS-Proxy Downgrade to Cleartext5.9 Medium
- nl-portal nl-portal-backend-librariesNL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)5.3 Medium
- avast antivirusAVAST Antivirus 25.11 Unquoted Service Path Privilege Escalation8.5 High
- personifyinc chromacamChromacam 4.0.3.0 Unquoted Service Path Privilege Escalation8.5 High
- malwarebytesMalwarebytes 4.5 Unquoted Service Path Privilege Escalation8.5 High
- brother sapsprintBrother SAPSprint 7.60 Unquoted Service Path Privilege Escalation8.5 High
- wondershare pdfelementWondershare PDFelement 5.2.9 Privilege Escalation via Unquoted Service Path8.5 High
- winstepWinstep 18.06.0096 Unquoted Service Path Privilege Escalation8.5 High
- realtek audio serviceRealtek Audio Service 1.0.0.55 Unquoted Service Path Privilege Escalation8.5 High
- real realtimes desktop serviceRealTimes Desktop Service 18.1.4 Unquoted Service Path Privilege Escalation8.5 High
- weird-solutions tftp broadbandTFTP Broadband 4.3.0.1465 Unquoted Service Path Privilege Escalation8.5 High
- network-inventory-advisor network inventory advisorNetwork Inventory Advisor 5.0.26.0 Unquoted Service Path Privilege Escalation8.5 High
- matrix42 remote control hostMatrix42 Remote Control Host 3.20.0031 Unquoted Path Privilege Escalation8.5 High
- anydeskAnyDesk 2.5.0 Unquoted Service Path Elevation of Privilege8.5 High
- wisecleaner wise care 365, wise disk cleaner +1 moreWise Care 365 4.27 and Wise Disk Cleaner 9.29 Unquoted Service Path Privilege Escalation8.5 High
- bdrive netdriveNetDrive 2.6.12 Unquoted Service Path Elevation of Privilege8.5 High
- binisoft windows firewall controlWindows Firewall Control 4.8.6.0 Unquoted Service Path Privilege Escalation8.5 High
- comodo dragon browserComodo Dragon Browser 52.15.25.663 Privilege Escalation via Unquoted Service Path8.5 High
- iperiusremote iperius remoteIperius Remote 1.7.0 Unquoted Service Path Elevation of Privilege8.5 High
- comodo chromodo browserComodo Chromodo Browser 52.15.25.664 Unquoted Service Path Privilege Escalation8.5 High
- networkdls fortitude httpFortitude HTTP 1.0.4.0 Unquoted Service Path Elevation of Privilege8.5 High
- jleehr canto-saas-apicanto-saas-api: OAuth credentials exposed in URL query string and exception messages5.3 Medium
- vembu storegridVembu StoreGrid 4.0 Unquoted Service Path Privilege Escalation8.5 High
- realtek high definition audio driverRealtek High Definition Audio Driver 6.0.1.6730 Privilege Escalation8.5 High
- Show moreLoading…