CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- fossbillingFOSSBilling: IDOR Vulnerability in Support Ticket Creation5.1 Medium
- theforeman foreman, red hat satellite 6.18, satellite 6.19 +1 more +3 moreForeman-mcp-server: mcp server: active session hijacking via insecure session state reuse7.8 High
- red hat ansible automation platform 2, ansible automation platform 2.5, ansible automation platform 2.5 for rhel 8 +4 more +6 moreEda-server: websocket missing authorization allows credential theft via activation_id spoofing9.6 Critical
- avideoAVideo - Stored Cross-Site Scripting via Unescaped User-Agent in Participants Panel5.1 Medium
motioneyePyPImotionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal10.0 Critical- rtk-ai rtkrtk: Permission-gate bypass in rtk rewrite auto-allow via unsplit shell separators7.8 High
motioneyePyPImotionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)9.8 Critical- motioneye-project motioneyemotionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution5.3 Medium
- rtk-ai rtk, rtkai rtk-rewrite +1 more@rtk-ai/rtk-rewrite: OpenClaw Rewrite Plugin Command Injection via execSync Template String6.3 Medium
- motioneye-project motioneyemotionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read7.7 High
- jdx misemise: Local credential_command executes untrusted config6.3 Medium
- jdx misemise: Arbitrary command execution via task-include files in an untrusted, config-less repository8.6 High
- ash-project ashPrivate action arguments can be set by user input in Ash5.9 Medium
- jdx misemise HTTP backend uses raw version path for install symlink destination5.5 Medium
- daytonaio daytonaDaytona: Cross-tenant organization takeover via invitation acceptance with an unverified email8.4 High
- daytonaio daytonaDaytona: Git credential leak via git clone with TLS verification disabled5.9 Medium
- octoprintOctoPrint: File exfiltration possible via query parameters on upload endpoints7.0 High
- adobe acrobat reader, acrobat dc, acrobat reader dc +2 moreAcrobat Reader | Out-of-bounds Write (CWE-787)7.8 High
- nicolargo glancesGlances: Arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configuration7.8 High
- adobe acrobat reader, acrobat dc, acrobat reader dc +2 moreAcrobat Reader | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe acrobat reader, acrobat dc, acrobat reader dc +2 moreAcrobat Reader | Out-of-bounds Read (CWE-125)5.5 Medium
- budibaseBudibase: Anonymous NoSQL operator injection via published-app query templates10.0 Critical
- wwbn avideoAVideo incomplete fix for CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sink8.1 High
- python, python software foundation cpython +1 moreConfiguration Injection via Carriage Return (\r) in write() method4.1 Medium
- home-assistant core, home assistant companion +1 moreHome Assistant: Exported BroadcastReceiver allows local apps to spoof device location7.1 High
- immich-app immichimmich: One-click account takeover via XSS in login page continue redirect9.6 Critical
- gogsGogs: Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS5.4 Medium
- openidentityplatform openamOpenAM Session Hijacking via CDSSO8.3 High
- openidentityplatform openamOpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC8.5 High
- gnupgCMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS...2.9 Low
- artifex mupdfMuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Rendering7.1 High
- octoprintOctoPrint: XSS in Suppressed Command Notifications4.6 Medium
- gogsGogs: Unauthenticated Organization Teams Information Disclosure via API5.5 Medium
- gogsGogs: Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion)5.5 Medium
- gogsGogs: Path Traversal in organization name results in RCE through Git hooks10.0 Critical
- gogsGogs: LFS dedupe path leaks private repo content across tenants7.1 High
- gogsGogs: UploadRepoFiles writes outside repo working tree via committed parent sym9.0 Critical
- gogsGogs: Write to readonly repositories using receive-pack + service=git-upload-pack confusion7.1 High
- gogsIn Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a...7.1 High
- openstack swiftOpenStack Swift vulnerable to authenticated server-side request forgery5.3 Medium
- gogsGogs: Password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVES6.8 Medium
- gogsGogs: Write-level collaborators can mutate admin-only repository settings via API7.1 High
- gogsGogs: DOM-based XSS via Milestone Name on New Issue Page4.8 Medium
- gogsGogs: RCE via git rebase --exec argument injection in pull request merge9.9 Critical
- gogsGogs: Migration Redirect Bypass Leads to Internal Repository Theft8.7 High
- gogsGogs: Privilege Escalation via Collaboration Access Mode Validation5.5 Medium
- gogsGogs: Open Redirect via redirect_to in Gogs5.4 Medium
- gnu libidnGNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode...4.0 Medium
- gnu sasl, debian linux +1 moreGNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the...3.7 Low
- revive adserverThe XML‑RPC API addUser method has a validation bypass introduced in the fix for CVE‑2025‑55129....0.0 None
- Show moreLoading…