CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- cap-go capgoCapgo - Denial of Service via Improper Password Policy Length Validation6.9 Medium
- cap-go capgoCapgo - Server-Side Request Forgery via Webhook URL Validation5.3 Medium
- cap-go capgoCapgo - EXIF Metadata Exposure via Image Upload6.9 Medium
- cap-go capgoCapgo - App ID Confusion via ILIKE Wildcard in Preview Subdomain Lookup2.3 Low
- automattic woocommerceWooCommerce 7.1.0 Remote Code Execution via class-wc-meta-box-product-images.php9.3 Critical
- wptimecapsule time capsule pluginWordPress Time Capsule Plugin 1.21.16 Authentication Bypass8.7 High
- brainstorm force ultimate addons for beaver builderWordPress Ultimate Addons for Beaver Builder 1.2.4.1 Authentication Bypass9.3 Critical
- liquidfilesLiquidfiles versions before 4.2.12 are affected by a broken access control vulnerability...5.9 Medium
bcryptcrates.ioPanic in `bcrypt::verify` on non-ASCII hash input5.3 Mediummemmap2crates.ioUnchecked pointer offset in crate `memmap2`No score- joomshaper sp page builder, joomshaper.net sp page builder extension for joomla +1 moreJoomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.210.0 Critical
- icagenda, icagenda.com icagenda extension for joomla +1 moreJoomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.1510.0 Critical
- joomshaper.net sp lms extension for joomlaJoomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.49.5 Critical
- eemitch simple file listSimple File List <= 6.3.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Operations (Deletion / Move / Folder Creation / Download) via 'frontmanage' Shortcode Attribute6.5 Medium
- eemitch simple file listSimple File List <= 6.3.7 - Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX Action7.5 High
- eemitch simple file listSimple File List <= 6.3.7 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter7.5 High
- nodejs node, node.js +1 moreA flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before...3.7 Low
- crmperks database for contact form 7, wpforms, elementor formsDatabase for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value8.1 High
- jonasbn crypt::openssl::pkcs12Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path9.1 Critical
- cap-go capgoCapgo - Scope Escalation via API Key Creation in /functions/v1/apikey8.7 High
- cap-go capgoCapgo - Account Merge via Poisoned public.users.email in SSO Provisioning8.7 High
- cap-go capgoCapgo - Unauthenticated Organization Enumeration and Billing Status Disclosure via Supabase RPC8.7 High
- cap-go capgoCapgo - Unauthenticated Cross-Tenant Metrics Poisoning via upsert_version_meta RPC6.9 Medium
- cap-go capgoCapgo - Improper 2FA Enforcement Logic via Team Security Settings5.1 Medium
- wpmudev branda – white label & branding, free login page customizerBranda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover9.8 Critical
- ankitects ankiAnki's local HTTP server does not sufficiently validate requests2.1 Low
- surrealdbSurrealDB before 3.1.5 Denial of Service via deep operator chains7.1 High
- surrealdbSurrealDB 3.1.0 before 3.1.5 Field Permission Bypass via Traversal5.3 Medium
- surrealdbSurrealDB < 3.1.5 Information Disclosure via ORDER BY5.3 Medium
- surrealdbSurrealDB before 3.1.5 Arbitrary File Read via DEFINE ANALYZER8.3 High
- surrealdbSurrealDB before 3.1.5 SSRF via JWKS URL Redirect5.1 Medium
- pydantic pydantic-settingsNestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size5.3 Medium
- merill lokkaLokka: Azure Resource Manager URL path validation issue8.7 High
- jhb-software payload-plugins@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing7.1 High
- langchain-ai langsmith-sdkArbitrary server-side file read in LangSmith SDK TracingMiddleware5.0 Medium
- gouef githubtoplanguagesgithubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow7.1 High
- python-zeep zeep, mvantellingen python-zeep +1 moreZeep SSRF because Settings.forbid_external is not enforced5.9 Medium
- ankitects ankiAnki: User scripts in iframes have access to the internal Anki API6.5 Medium
- gunthercox chatterbotChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainer5.5 Medium
- openremoteOpenRemote < 1.25.0 IDOR via Bulk Alarm Deletion Endpoint8.6 High
- appium appium-mcpMCP Appium: Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGeneratorUI)8.2 High
- evermind-ai everosPath traversal in EverOS /api/v1/memory/add via unvalidated sender_id8.2 High
- olo-dot-io uni-cliUni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests8.6 High
- eidetic-labs stigmem-nodestigmem before 0.9.0a12 Cross-Tenant BOLA via decay sweep7.2 High
- eidetic-labs stigmem-nodestigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine8.6 High
- eidetic-labs stigmem-nodestigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstones7.2 High
- msgpack messagepack, msgpack-python +1 moreMessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error7.5 High
gogs.io/gogsGoGogs: XSS in .ipynb files renderer due to outdated notebookjs8.5 High- parse-community parse-serverParse Server: LiveQuery discloses object data to a subscriber across an ACL read-access change2.3 Low
- ihor-sokoliuk mcp-searxngmcp-searxng: DNS-resolved Private Hostname SSRF in `web_url_read`7.1 High
- Show moreLoading…