CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- evoke csmsEVoke Systems EVoke CSMS Insufficient Session Expiration6.9 Medium
- wolfsslHMAC zero-length tag forgery in EVP_DigestVerifyFinal2.1 Low
- evoke csmsEVoke Systems EVoke CSMS Insufficiently Protected Credentials6.9 Medium
- pydicom pynetdicom librarypydicom pynetdicom Library Path Traversal8.8 High
- open health imaging foundation (ohif) dicom web viewer frameworkOHIF Viewers DICOM Server-Side request forgery8.3 High
- wolfsslContinued acceptance of SHA-1/MD5 digests in certificate processing2.3 Low
- wolfsslCRL critical extension bypass in ParseCRL_Extensions1.0 Low
- wolfsslInteger underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info1.0 Low
- wolfsslDTLS 1.3 ACK serialization heap buffer overflow via integer truncation8.8 High
- wolfsslPKCS#7 decode ignores caller output buffer size, writing past buffer bounds1.0 Low
- wolfsslX.509 name constraint bypass via Subject CN treated as a DNS name6.0 Medium
- wolfsslUse-after-free in PQC hybrid key-share handling2.3 Low
- wolfsslML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery8.3 High
- wolfsslX25519 x86_64 assembly final reduction leaves non-canonical field element2.3 Low
- wolfsslWildcard DNS SAN bypasses CA name-constraint checks6.3 Medium
- wolfsslX.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring8.7 High
- wolfsslOut-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation6.3 Medium
- wolfsslRenesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage8.3 High
- wolfsslUn-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation8.2 High
- wolfsslChain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)6.3 Medium
- bitwarden serverBitwarden Server < 2026.5.0 JSON Injection via Webhook Templates2.3 Low
- bitwarden serverBitwarden Server < 2026.5.0 Broken Access Control via PreviewInvoiceController5.3 Medium
- bitwarden serverBitwarden Server < 2026.5.0 Privilege Escalation via Bulk User Remove Endpoint7.1 High
- mattermost google drive, google drive plugin +1 moreImproper Access Control in Mattermost Google Drive Plugin File Creation Endpoint4.2 Medium
- netflix lemurLemur: Authorization bypass in StrictRolePermission / AuthorityCreatorPermission8.8 High
- anysphere cursorCursor Desktop sandbox escape via agent-controlled working directory9.3 Critical
- anysphere cursorCursor Desktop sandbox escape via symlink and failed path canonicalization9.3 Critical
- seaweedfsSeaweedFS < 4.34 - Cross-Bucket Object Deletion via DeleteObjects Request-Body Keys7.2 High
- seaweedfsSeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access7.8 High
- open-telemetry opentelemetry-rustOpenTelemetry Rust: Unbounded memory allocation in W3C Baggage propagation5.3 Medium
- silabs.com simplicity sdkDPA Countermeasures weakening on Series 3 devices7.1 High
- go-chi chigo-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header6.9 Medium
- go-chi chigo-chi chi before 5.3.0 IP Spoofing via RealIP Middleware6.9 Medium
- go-chi chigo-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For6.9 Medium
github.com/gtsteffaniak/filebrowserGoFileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks6.5 Medium- canboatCANBoat - Off-by-One Global Buffer Overflow in searchForPgn()7.0 High
- rtklibRTKLIB 2.4.3 - Heap Buffer Overflow and Stack Read via Oversized RINEX Epoch Satellite Count7.1 High
- rtklibRTKLIB 2.4.3 - Out-of-bounds Read via Negative Array Index in getcodepri4.8 Medium
- rtklibRTKLIB 2.4.3 - Off-by-One Out-of-Bounds Read in decode_ssr3 via RTCM3 SSR Message6.9 Medium
- rtklibRTKLIB 2.4.3 - Out-of-bounds Write in decode_type1033 via Crafted RTCM3 Message9.3 Critical
- 1panel-dev maxkbMaxKB < 2.10.0 - Server-Side Request Forgery via downloadCallbackUrl and download_url Parameters5.3 Medium
- kanboardKanboard - Cross-User Deletion of Persistent Login Sessions via Unvalidated Session ID5.3 Medium
- samuelclay newsblurNewsBlur < 14.5.0 - Insecure Direct Object Reference in Social Interactions Endpoint5.3 Medium
- samuelclay newsblurNewsBlur < 14.5.0 - Server-Side Request Forgery via add_url Endpoint6.3 Medium
- schwehr libaislibais 0.15 - Out-of-bounds Vector Access in VdmStream::AddLine via Invalid Sequential Message ID8.7 High
- hcengineering platformHuly Platform - Server-Side Request Forgery via /import Endpoint6.3 Medium
- haiwen seahubSeahub < 13.0.23 - Authentication Bypass in ShareLinkZipTaskView GET Method8.7 High
- getmaxun maxunMaxun < 0.0.42 - Cross-Tenant IDOR in Storage and Webhook API Handlers8.7 High
- vanhauser-thc thc-hydraHydra - Stack Buffer Overflow in NTLM Authentication Handler8.6 High
fixurjavainstallcrates.iofixurjavainstall: Previous Fuji versions can accidentally wipe `/usr/share/man/man8`1.2 Low- Show moreLoading…