CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()6.5 Medium
- hiyouga llama-factory, llamafactory +1 moreLLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path9.3 Critical
- citrix netscaler gateway, netscaler adc, gateway +1 more +3 moreArbitrary File Read (Unauthenticated)7.1 High
- @fastify/express, fastify fastify\/express +1 more@fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed plugins9.1 Critical
- citrix netscaler gateway, netscaler adc, gateway +1 more +3 moreMultiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service8.8 High
- citrix netscaler adc and netscaler gateway, netscaler gateway, netscaler adc +2 more +4 moreMemory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service8.8 High
- jouni malinen hostapdIn hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link...6.5 Medium
- citrix netscaler gateway, netscaler adc, gateway +1 more +3 moreInsufficient input validation leading to memory overread8.8 High
- suse rancherSAML Authentication Replay in Rancher9.5 Critical
- fzfDenial of Service in fzf5.7 Medium
- fzfInteger Overflow in fzf5.6 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6.5 +1 more +3 moreKeycloak: keycloak: privilege escalation through hardcoded role mapper injection6.5 Medium
- red hat build of keycloak 26.6, build of keycloak 26.6.8, redhat build of keycloak +2 moreKeycloak-broker: keycloak: privilege escalation to realm administrator via improper authorization in identity provider mapper6.5 Medium
- rust-ammonia ammoniaammonia: mXSS in ammonia via MathML `annotation-xml` encoding strip6.3 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +3 more +5 moreKeycloak-admin-ui: keycloak-admin-ui:admin ui extension brute-force-user endpoint bypasses fgapv2 user view restrictions4.3 Medium
- eksagate electronic engineering and computer industry trade inc. sysguard 6001Stored XSS in Exagate's SYSGUARD 60016.1 Medium
- suse rancherOver-inclusive team membership expansion in GitHub App authentication provider for Rancher8.8 High
- eksagate electronic engineering and computer industry trade inc. sysguard 6001SQLi in Exagate's SYSGUARD 60019.8 Critical
- exodist dbix::quickormDBIx::QuickORM versions before 0.000026 for Perl allow SQL injection via unquoted SQL identifiers9.8 Critical
- redeight cmsWeak hashing algorithm in Redeight CMS5.9 Medium
- redeight cmsRemote Code Execution in Redeight CMS8.6 High
- redeight cmsSQL Injection in Redeight CMS9.3 Critical
- sanko net::bittorrentNet::BitTorrent versions before 2.1.0 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRNG5.9 Medium
- sanko net::bittorrentNet::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input7.5 High
- sanko net::bittorrentNet::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via an uncapped peer-wire message-length prefix7.5 High
- sanko net::bittorrentNet::BitTorrent versions before 2.1.0 for Perl write files outside the download directory via path traversal in peer-supplied metadata5.3 Medium
- advantech hospital quering managementAdvantech｜Hospital Quering Management - Missing Authentication9.3 Critical
- advantech hospital queuing managementAdvantech｜Hospital Queuing Management - Sensitive Data Exposure8.7 High
- apache activemq, activemq broker, apache software foundation activemq all +2 moreApache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a remote-properties broker7.5 High
- apache activemq, apache software foundation activemq all, activemq stomp +2 moreApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of service7.5 High
- apache activemqApache ActiveMQ: Authenticated web users retain admin access by default in the Web Console8.1 High
- apache activemq, apache software foundation activemq all, activemq client +2 moreApache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire memory-allocation DoS during wire format negotiation7.5 High
- theforeman foreman, red hat satellite 6, redhat satellite +2 moreForeman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config4.4 Medium
- apache activemq, activemq broker, apache software foundation activemq all +2 moreApache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire DoS following fix for CVE-2026-492707.5 High
- apache activemq, activemq web, apache software foundation activemq web console +2 moreApache ActiveMQ, Apache ActiveMQ Web Console: Stored XSS via Unescaped values in ActiveMQ Web Console6.1 Medium
- apache activemq, apache software foundation activemq all, activemq stomp +2 moreApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec7.5 High
- apache activemq, activemq broker, apache software foundation activemq all +1 more +3 moreApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling7.5 High
- apache activemq, activemq broker, apache software foundation activemq all +2 moreApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover7.5 High
- hitachi energy promod vPROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due to the...7.0 High
- connekt media ajax load more - filtersAjax Load More - Filters <= 3.4.1 - Unauthenticated Stored Cross-Site Scripting via 'taxonomy_include_children' Field7.2 High
- eventon (pro) - wordpress virtual event calendar pluginEventON - WordPress Virtual Event Calendar Plugin <= 5.0.11 - Unauthenticated Blind SQL Injection via Search Parameter9.8 Critical
- raythaSQL Injection in Raytha CMS9.3 Critical
- nokia mantaray nmA Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM7.8 High
- nokia mantaray nmAn Improper Access Control vulnerability in Nokia MantaRay NM6.5 Medium
- nokia mantaray nmAn unrestricted file upload vulnerability in Nokia MantaRay NM7.8 High
- intermark it webcontrol cmsMultiple vulnerabilities in Intermark IT's WebControl CMS5.1 Medium
- intermark it webcontrol cmsMultiple vulnerabilities in Intermark IT's WebControl CMS5.1 Medium
sg3_utilsSUSESecurity update for sg3_utilsNo score- Show moreLoading…