CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- siyuan-note siyuanSiYuan: Stored XSS in Bazaar marketplace via package README event handlers7.1 High
- siyuan-note siyuanSiYuan: Unauthenticated Admin API Access via Blanket chrome-extension:// Origin Allowlist9.2 Critical
- siyuan-note siyuanSiYuan: Unauthenticated SQLite Data Exfiltration via Template Injection in /api/icon/getDynamicIcon5.9 Medium
- siyuan-note siyuanSiYuan: Stored XSS to RCE via CSS-snippet <style> breakout in renderSnippet()9.9 Critical
- siyuan-note siyuanSiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)7.5 High
- rocket.chatRocket.Chat: Any Authenticated User Can Permanently Deregister Workspace from Rocket.Chat Cloud via Unprotected `/api/v1/fingerprint` Endpoint8.1 High
- rocket.chatRocket.Chat: Apple Sign-In skips JWT claims validation, allowing expired and cross-audience token replay7.4 High
- rocket.chatRocket.Chat: Email Parameter Fallback Leads To Account Takeover Within Apple OAuth9.3 Critical
- rocket.chatRocket.Chat: Livechat Visitor Profile Disclosure Leaks Bearer Token and Enables Visitor Impersonation6.7 Medium
- rocket.chatRocket.Chat: OAuth access and refresh tokens remain valid after account deactivation2.3 Low
- rocket.chatRocket.Chat: users.deactivateIdle` deactivates accounts without revoking existing login tokens2.3 Low
- fossbillingFOSSBilling: Authentication bypass allows unauthenticated administrator creation9.3 Critical
- rocket.chatRocket.Chat: SAML signature validation skipped when IdP certificate field is empty9.3 Critical
- rocket.chatRocket.Chat: Pre-Auth NoSQL Injection in OAuth2 Token Endpoint leading to Arbitrary User ATO9.1 Critical
- rocket.chatRocket.Chat: Pre-Auth NoSQL Injection in CAS Login Handler leading to Arbitrary CAS/SAML User Session Hijack9.1 Critical
- rocket.chatRocket.Chat: Authenticated Arbitrary Data Export Theft via Mass Assignment in sendFileMessage8.5 High
- rocket.chatRocket.Chat: Lack of SAML Signature Check During Logout Could Lead To DoS8.7 High
- significant-gravitas autogptAutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating features7.7 High
- rocket.chatRocket.Chat: Missing URL protocol sanitization in ImageElement allows javascript: URLs in markdown images4.4 Medium
- kubevirt, red hat openshift virtualization 4, redhat openshift virtualization +2 moreKubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body6.5 Medium
- kubevirt, red hat container native virtualization 4.12, container native virtualization 4.13 +10 more +12 moreKubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption7.3 High
- gogsGogs: Authorization Bypass in Watch API allows any user to monitor private repository activity4.3 Medium
- mastodonMastodon: Persistent anonymous DoS via unhandled NoMethodError in MATH_TRANSFORMER7.5 High
- mastodonMastodon: Spoofing of attribution domains5.3 Medium
- hubbell aclara metrum cellular web interfaceMissing authentication for critical function in Hubbell Aclara Metrum Cellular Web Interface8.7 High
- hp inc. dock accessoryHP Dock Accessory WMI Provider Installer Security Update7.3 High
- mastodonMastodon: Removal of integrity-protected JSON entries from signed activities6.5 Medium
- mastodonMastodon: SSRF protection bypass on older Ruby versions8.6 High
- mastodonMastodon: LD-Signature Bypass via JSON-LD Named-Graph Restructuring5.3 Medium
- mastodonMastodon: SSRF Bypass via IPv6 Unspecified Address (::)8.7 High
- fossbillingFOSSBilling: IDOR in Servicecustom Client API allows cross-client data access7.1 High
- twentyhq twentyTwenty: Cross-workspace IDOR in AgentTurnResolver7.6 High
- drupal salesforce suiteSalesforce Suite - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-0634.8 Medium
- dopry geolocation fieldGeolocation Field - Critical - SQL Injection - SA-CONTRIB-2026-0626.5 Medium
- google chromeUse after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local...7.8 High
- google chromeUse after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to...8.8 High
- google chromeUse after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote...8.8 High
- google chromeInappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a...4.7 Medium
- google chromeUse after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to...8.8 High
- google chromeUninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a remote...5.3 Medium
- google chromeUse after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker...7.5 High
- drupal paragraphsParagraphs - Moderately critical - Access bypass - SA-CONTRIB-2026-0616.5 Medium
- google chromeUse after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker...8.8 High
- google chromeUse after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a...8.8 High
- google chromeRace in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had...8.3 High
- google chromeInsufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.197...4.2 Medium
- google chromeUninitialized Use in GPU in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who...5.3 Medium
- google chromeUse after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote...8.8 High
- google chromeInappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.197 allowed a...6.5 Medium
- google chromeInappropriate implementation in DeviceBoundSessionCredentials in Google Chrome prior to 149.0...4.3 Medium
- Show moreLoading…