CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- glpi-project glpiglpi-project glpi Document document.send.php canViewFile authorization6.3 Medium
- 78 xiaozhi-esp3278 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronization2.3 Low
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview7.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System archive.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview6.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview.php sql injection6.9 Medium
qemuAlpaquita,qemu-hweUbuntu +1 morehw/uefi: fix parse_hexstrNo scoreqemuAlpaquita,qemu-hweUbuntu +1 morelibvhost-user: fix buffer overflow in virtqueue_read_indirect_desc()No scoreqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 moreui/vnc: fix OOB read updating VNC update frequency statsNo scoreqemuAlpaquita,qemu-hweUbuntu +1 moreui/vnc OOB writesNo scoreqemuAlpaquita,qemu-hweUbuntu,qemu-linux-useropenSUSE +2 moreUpdated qemu packages fix many security vulnerabilities8.8 High- lfprojects mlflowMLflow Experiment-scoped Label Schema CRUD API authorization2.3 Low
- arc53 docsgptarc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authenticity2.3 Low
- skypilot-org skypilotskypilot-org skypilot User ID server.py username.encode weak hash6.3 Medium
- zephyrproject zephyrRemotely triggerable NULL-pointer dereference in Bluetooth LE Audio BAP unicast client QoS-state handling6.5 Medium
- zephyrproject zephyrUse-after-return in `zsock_getaddrinfo()` when a timed-out DNS query is retried without cancellation7.4 High
- zephyrproject zephyrOut-of-bounds write in Microchip SERCOM-G1 (PIC32CM-JH) async UART RX with 1-byte buffer4.2 Medium
- nmapNmap - Integer Underflow in IPv6 Extension Header Parsing6.9 Medium
- flowiseFlowise - Custom MCP Environment Variable Denylist Bypass via Case Sensitivity2.3 Low
- rustdeskRustDesk - FileTransfer Session Authorization Scope Bypass7.2 High
- nghttp2nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length6.3 Medium
- gitea act runnerGitea act_runner - Container Hardening Bypass via Workflow Container Options9.4 Critical
- 7-zip7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision4.8 Medium
- libssh2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibssh2 - Free of Uninitialized Pointer in publickey List Cleanup8.3 High
- libssh2libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation8.3 High
- ffmpeg, red hat ai inference server, enterprise linux ai (rhel ai) 3 +6 more +8 moreFFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()8.8 High
binutilsOSS-FuzzIndex-out-of-bounds in print_insn_tic6xNo score- nmedia frontend file manager pluginFrontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File Deletion8.1 High
- zephyrproject zephyrOut-of-bounds heap write in Zephyr `recvmsg()` ancillary-data path (`insert_pktinfo` undersizes the control-buffer capacity check)8.7 High
- strukturag libde265libde265: SAO sequential filter heap buffer overflow via signed integer overflow7.4 High
- strukturag libde265libde265: Pixel accessor signed integer overflow causes heap OOB read/write7.4 High
- strukturag libde265libde265 has a heap buffer overflow (OOB read) in decode_slice_unit_WPP() via out-of-bounds CtbAddrRStoTS access — libde265 <= v1.0.186.9 Medium
- strukturag libde265libde265 has a heap-buffer-overflow READ in decode_slice_unit_tiles via unvalidated PPS tile geometry6.9 Medium
- freebsdInteger overflow in vt(4) CONS_HISTORY ioctl7.8 High
- freebsdASLR bypass for setuid executables via procctl(2)7.8 High
- freebsdFlaw in Linuxulator execution of setugid binaries7.1 High
- freebsdUse-after-free bug in the IPV6_MSFILTER socket option handler7.8 High
- freebsdsigqueue(2) missing capability mode restriction6.5 Medium
- freebsdMultiple vulnerabilities in the sound(4) mmap path7.8 High
- freebsdMultiple vulnerabilities in the sound(4) mmap path7.0 High
- frisbii pay, reepaydenmark frisbii pay +1 moreFrisbii Pay <= 1.8.9 - Missing Authorization to Authenticated (Subscriber+) Payment Token Modification6.5 Medium
- themeisle stripe payment forms by wp full pay – accept credit card payments, donations & subscriptionsStripe Payment Forms by WP Full Pay <= 8.4.3 - Missing Authorization to Unauthenticated Payment Record Manipulation via 'paymentIntentId' Parameter5.3 Medium
- jegstudio gutenverse – wordpress blocks, page builder & site editorGutenverse <= 3.8.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' Parameter4.4 Medium
- gpriday page builder by siteoriginPage Builder by SiteOrigin <= 2.34.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via panels_data Parameter6.4 Medium
- surbma | infusionsoft shortcodeSurbma | Infusionsoft Shortcode <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes6.4 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey makerQuiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action4.3 Medium
- templatescoderthemes spexoSpexo <= 2.0.11 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation4.3 Medium
- masteriyo lms – lms course builder, quizzes & certificatesMasteriyo LMS <= 2.2.1 - Missing Authorization to Authenticated (Student+) Arbitrary Course Announcement Modification4.3 Medium
- metagauss registrationmagic – custom registration forms, user registration, payment, and user loginRegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request5.3 Medium
- Show moreLoading…