CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- curlUAF after pause in socket callback7.3 High
- curlstale proxy password leak9.8 Critical
- curlincomplete mTLS config matching in conn reuse7.5 High
- curlenv-set cross-proxy Digest auth state leak9.1 Critical
- curlpassword leak with netrc and user in URL9.1 Critical
- curlSASL double-free9.8 Critical
- curltrailing dot domain super cookie9.1 Critical
- curlwrong reuse for different services6.5 Medium
- curlwrong STARTTLS connection reuse8.1 High
- curlproto-default skips SSH verification7.5 High
- curlcross-origin Digest auth state leak9.8 Critical
- curlWS Auto-PONG memory exhaustion7.5 High
- curlNative CA trust persist9.1 Critical
- curlQUIC zero-length UDP datagrams busy-loop7.5 High
- curlHTTP/2 stream-dependency tree UAF9.8 Critical
- funnelkit funnel builder by funnelkitWordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerability7.6 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nf_log: validate MAC header was set before dumping it7.1 High
- linux, linux kernel +1 morenet/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint5.5 Medium
- linux, linux kernel +1 moretun: zero the whole vnet header in tun_put_user()5.5 Medium
- linux, linux kernel +1 morenet/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion5.5 Medium
- linux, linux kernel +1 morebpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths5.5 Medium
- linux, linux kernel +1 moretap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR5.5 Medium
- linux, linux kernel +1 morecrypto: jitterentropy - replace long-held spinlock with mutex5.5 Medium
- linux, linux kernel +1 morexfrm: espintcp: do not reuse an in-progress partial send7.8 High
- linux, linux kernel +1 morebatman-adv: tvlv: reject oversized TVLV packets8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreio_uring/poll: fix signed comparison in io_poll_get_ownership()7.8 High
- linux, linux kernel +1 morexfrm: ipcomp: Free destination pages on acomp errors7.5 High
- linux, linux kernel +1 morebatman-adv: tp_meter: avoid use of uninit sender vars9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipc/shm: serialize orphan cleanup with shm_nattch updates5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresctp: stream: fully roll back denied add-stream state7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreaf_unix: Reject SIOCATMARK on non-stream sockets5.5 Medium
- linux, linux kernel +1 morenetfilter: ebtables: fix OOB read in compat_mtw_from_user7.8 High
- linux, linux kernel +1 morebatman-adv: clear current gateway during teardown5.5 Medium
- linux, linux kernel +1 morevrf: Fix a potential NPD when removing a port from a VRF5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moresctp: purge outqueue on stale COOKIE-ECHO handling9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreipc: limit next_id allocation to the valid ID range7.8 High
- linux, linux kernel +1 morebatman-adv: dat: handle forward allocation error7.5 High
- linux, linux kernel +1 morenetfilter: ipset: stop hash:* range iteration at end5.5 Medium
- linux, linux kernel +1 morenetfilter: xt_policy: fix strict mode inbound policy matching8.3 High
- linux, linux kernel +1 morebatman-adv: fix tp_meter counter underflow during shutdown7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: serialize accept_q access8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresctp: diag: reject stale associations in dump_one path7.1 High
- linux, linux kernel +1 morebatman-adv: frag: disallow unicast fragment in fragment5.5 Medium
- linux, linux kernel +1 morenetfilter: ip6t_hbh: reject oversized option lists7.1 High
- linux, linux kernel +1 morebatman-adv: fix fragment reassembly length accounting9.8 Critical
- linux, linux kernel +1 morebatman-adv: v: stop OGMv2 on disabled interface5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_queue: hold bridge skb->dev while queued7.8 High
- ultimatemember ultimate member – user profile, registration, login, member directory, content restriction & membership pluginUltimate Member <= 2.11.4 - Authenticated (Contributor+) Account Takeover via Password Reset Link Disclosure8.8 High
- themeco cornerstoneThemeco Cornerstone < 7.8.8 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Password Hash Disclosure7.7 High
- themeco cornerstoneThemeco Cornerstone < 7.8.9 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Meta Disclosure7.7 High
- Show moreLoading…