CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- azeotech daqfactoryUse after free in AzeoTech DAQFactory8.4 High
- k3sK3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression5.8 Medium
- filebrowserFile Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)9.3 Critical
- horner automation cscapeOut-of-bounds read in Horner Automation Cscape8.4 High
neotomanpmneotoma has tenant isolation gap in relationship query endpoints0.6 Low- filebrowserFile Browser: Authentication Bypass via Proxy Auth Header Forgery9.1 Critical
- emilstenstrom justhtmljusthtml 0.9.0 through 1.21.0 Cross-Site Scripting via code-span5.3 Medium
- filebrowserFile Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup8.2 High
- daan.dev omgf proWordPress OMGF Pro plugin <= 5.2.6 - Arbitrary File Upload vulnerability10.0 Critical
- openidentityplatform openamOpenAM Authentication Bypass via RADIUS Spoofing7.5 High
- jqlang jqjq: potential integer overflow in jvp_string_append6.9 Medium
- openidentityplatform openamOpenAM Arbitrary OAuth Token Minting via Push Registration7.6 High
- pnpmpnpm: Repository config can expand victim environment secrets into registry requests before scripts run6.5 Medium
- pnpmpnpm: Tarball hash of GitHub git dependencies is not stored in lockfile4.8 Medium
- wolfsslX.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()8.2 High
- pnpmpnpm binds unscoped user-level npm auth credentials to a repository-selected registry6.9 Medium
- pnpmpnpm: Transitive dependency alias path traversal allows project path override via symlink replacement8.8 High
- wolfsslAES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse2.0 Low
- anthropic claude code, anthropics claude-code +1 moreClaude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write4.4 Medium
- pnpmpnpm: Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)7.3 High
- wolfsslwolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer8.2 High
- pnpmpnpm: Git Fetch Argument Injection via Lockfile resolution.commit6.4 Medium
- pnpmpnpm: Unsafe default behavior breaks integrity check6.8 Medium
- pnpmpnpm: Integrity Check Bypass via Missing Lockfile Integrity Field6.8 Medium
- pnpmpnpm: stage download writes outside destination via manifest version traversal7.1 High
- wolfsslPartial-chain verification accepts untrusted intermediate as trust anchor6.0 Medium
- pnpmpnpm: reserved bin name deletes PNPM_HOME during global remove6.5 Medium
- pnpmpnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes8.8 High
- pnpmpnpm: Repository-controlled configDependencies can select a pacquet native install engine7.5 High
- wolfsslBleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption6.0 Medium
- pnpmpnpm: manifest identity spoof satisfies allowBuilds and runs attacker lifecycle7.5 High
- wolfsslHeap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData6.3 Medium
- openidentityplatform openamOpenAM Unsafe Java Deserialization via SNS7.7 High
- aquasec trivyTrivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser6.9 Medium
- zephyrproject zephyrnet: Maliciously fragmented IPv6 packets can prevent receiving/processing future incoming packets7.5 High
- aquasec trivyTrivy: Path traversal via a crafted vulnerability database or other downloaded artifacts7.0 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: information disclosure through arbitrary filesystem path probing4.9 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: unauthorized access to resources via uma permission ticket bypass4.6 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: attacker can re-enable and take over disabled clients via registration access token6.5 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass7.3 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: group-admin escalation to realm-admin7.7 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.4.14 +8 more +10 moreKeycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparison8.1 High
- tooljetToolJet: Cross-tenant credential decryption (IDOR) in POST /api/data-sources/decrypt — any authenticated user can decrypt any organization's data-source secrets6.8 Medium
- tooljetToolJet Cloud - SSRF to Azure Cloud Infrastructure Compromise8.3 High
- pretix venuelessPermissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create.2.3 Low
- tooljetToolJet - Marketplace Plugin Poisoning Enables Instance-Wide Remote Code Execution9.4 Critical
- outlineAuthorization Bypass in API Key/OAuth Scopes via Path Parsing Discrepancy5.3 Medium
- halo-dev haloHalo: Path Traversal in Backup Download Leads to Arbitrary File Read5.5 Medium
- danny-avila librechatLibreChat: Incomplete Fix for CVE-2024-11171 — Conversation Import Multer Instance Missing File Size Limits6.5 Medium
- danny-avila librechatLibreChat: Stored XSS via unescaped image alt text in markdown artifact preview5.4 Medium
- Show moreLoading…