CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
pterodactyl/panelPackagistPterodactyl Panel: Client email change endpoint allows enumeration of accounts in system5.5 Medium- kestraKestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass10.0 Critical
github.com/pterodactyl/wingsGoPterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container5.0 Medium- david-a-wheeler flawfinderFlawfinder output manipulation via untrusted filenames and source text8.7 High
- kestraKestra: Cross-Execution File Read via Preview Endpoint (IDOR)6.5 Medium
- miguelgrinberg python-socketiopython-socketio: Binary attachment accumulation can cause denial of service7.5 High
- miguelgrinberg python-engineiopython-engineio has unbound thread allocation that can cause denial of service7.5 High
semantic-routerPyPIsemantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pinNo score- kestraKestra BasicAuth Password Stored as SHA-512 Enables Offline Brute-Force Attack8.7 High
- miguelgrinberg python-engineiopython-engineio has possible denial of service due to maximum payload size sometimes not being enforced7.5 High
- markdown-it linkify-itlinkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop8.7 High
- tursodatabase turso-cliturso-cli persists Turso platform JWT with world-readable (0o644) file permissions5.5 Medium
nono-pyPyPInono-py's policy JSON accepts unknown security fields5.2 Medium- hcl software traveler for microsoft outlookHCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerability6.7 Medium
nono-pyPyPInono-py vulnerable to authorization bypass / policy confusion5.2 Mediumnono-pyPyPInono-py has proxy-only network fallback bypass on older Linux kernels6.4 Medium- fleetdm fleetFleet: Cross-Team Policy Data Exposure via Global Policy Read Endpoint4.3 Medium
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash5.0 Medium
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++: Arbitrary Code Execution via config.xml commandLineInterpreter7.8 High
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ TOCTOU: HMAC Checks Disk, Executes from Memory7.5 High
github.com/apernet/hysteriaGoHysteria: http large header with sniff cause server DoS7.5 High- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Path7.5 High
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++: Arbitrary Code Execution via shortcuts.xml UserCommand Injection7.8 High
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++: CVE-2026-48800 Bypass7.8 High
- golang tiff, golang.org/x/image golang.org/x/image/tiff +1 morePanic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image7.5 High
- rustfsRustFS: ListRemoteTargetHandler authorization bypass leaks replication target credentials8.2 High
- rustfsRustFS Snowball Auto-Extract: Path Traversal allows cross-bucket object injection8.6 High
- rustfsRustFS: FTP frontend skips IAM authorization on object reads7.7 High
github.com/apernet/hysteriaGoHysteria vulnerable to server crash when max_datagram_frame_size very small7.5 High- rustfsRustFS: Missing admin authorization on /rustfs/admin/v3/metrics allows any authenticated user to read server metrics4.3 Medium
- shenzhen cudy technology co., ltd. lt300 3.0Cudy LT300 3.0 OS Command Injection via NTP Configuration8.7 High
github.com/apernet/hysteria/coreGo,github.com/apernet/hysteria/core/v2Go +1 moreHysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF7.4 High@cyclonedx/cdxgennpm@cyclonedx/cdxgen: Maven project scanning may allow shell command injection through repository-controlled module paths6.9 Medium- opf openprojectOpenProject: Business Logic Error on OpenProject through PATCH request to /api/v3/users/me permits to bypass password requirements5.9 Medium
- opf openprojectOpenProject: Improper Access Control on OpenProject through /projects/[projectName]/meetings via "invited_user_id" in GET parameter "filters" leads to user names disclosure4.3 Medium
- linux, linux kernel +1 morenet: mana: Use pci_name() for debugfs directory naming5.5 Medium
- linux, linux kernel +1 morenet: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morevfio/pci: Clean up DMABUFs before disabling function8.8 High
- linux, linux kernel +1 moreio_uring/napi: cap busy_poll_to 10 msec5.5 Medium
- linux, linux kernel +1 morenilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()5.5 Medium
- linux, linux kernel +1 moreblk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default()5.5 Medium
- linux, linux kernel +1 morewifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr()5.5 Medium
- linux, linux kernel +1 morewifi: mt76: mt7921: Place upper limit on station AID5.5 Medium
- linux, linux kernel +1 moredrm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected()5.5 Medium
- linux, linux kernel +1 moredrm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp()5.5 Medium
- linux, linux kernel +1 morepadata: Put CPU offline callback in ONLINE section to allow failure5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths5.5 Medium
- linux, linux kernel +1 moreiommu/riscv: Remove overflows on the invalidation path5.5 Medium
- linux, linux kernel +1 morefuse: fix uninit-value in fuse_dentry_revalidate()5.5 Medium
- linux, linux kernel +1 moresoc/tegra: cbb: Fix cross-fabric target timeout lookup5.5 Medium
- Show moreLoading…