CVEs published in July 2026
10,021 vulnerabilities, 1,309 critical, 23 exploited.
- adobe premiere, premiere pro +1 more Premiere Pro | Out-of-bounds Write (CWE-787) 7.8 High
-
guard-livereloadRubyGems guard-livereload has a directory traversal vulnerability 6.9 Medium - elyin gemini-bridge gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode 6.2 Medium
- wp-graphql WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + profile (defeats explicit anti-enumeration design) 6.9 Medium
- tp-link systems inc. axe75 v1, tp-link archer axe75 firmware +1 more Command Injection Vulnerability in OpenVPN of TP-Link Archer AXE75 8.5 High
- geonetwork core-geonetwork core-geonetwork has an Open Redirect Bypass 4.8 Medium
- pion stun Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute 5.3 Medium
- sigstore sigstore-go sigstore-go fails to check signature timestamps against a signing key's validity period 3.1 Low
- comfy-org comfyui ComfyUI 0.23.0 Unauthenticated RCE via LoadTrainingDataset Pickle Deserialization 9.3 Critical
- coturn Coturn: MOBILITY-TICKET session-resume authorization bypass allows cross-user TURN allocation takeover 7.1 High
- hugging face sentence-transformers sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=False 9.3 Critical
- free5gc ausf, free5gc +1 more free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure 6.9 Medium
-
openssl-3SUSE Security update for openssl-3 No score - coturn Coturn: Pre-authentication heap memory disclosure in ACME redirect (`try_acme_redirect`) 8.2 High
-
zaino-statecrates.io zaino-state has a Non-Finalized State Reorg — No Cycle Detection or Depth Limit 6.9 Medium - opnsense core Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers 7.5 High
- copier-org copier Copier: Percent-encoded dot segments in template URLs can allow trusted-prefix escape (Incomplete fix for trust-prefix bypass) 7.5 High
- savonrb savon Savon::Model evaluates WSDL operation names as Ruby source 8.1 High
- aws strands agents tools Incorrect authorization in Strands Agents Tools http_request proxy credential exfiltration 6.9 Medium
- xdan jodit Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization 5.3 Medium
- xdan jodit Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS 5.4 Medium
- contao Contao: Possible path traversal in job download URIs 3.1 Low
- contao Contao crawler leaks auth credentials to external hosts 2.6 Low
- thumbor Thumbor has path traversal via post-validation URL decoding bypass in file_loader 8.7 High
- thumbor Thumbor proportion filter allows unbounded post-transform resize leading to remote DoS 7.5 High
- thumbor Thumbor has Regex Denial of Service (ReDoS) in `convolution` filter 7.5 High
- thumbor Thumbor convolution filter allows divide-by-zero in C extension leading to remote DoS 7.5 High
- thumbor Thumbor has HMAC validation bypass via multiple .replace() calls when removing URL signature 8.2 High
- thumbor Thumbor treats ALLOWED_SOURCES string patterns as unescaped regex, allowing hostname bypass via wildcard dot 8.2 High
- contao Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module 3.1 Low
- tryghost ghost-cli Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header 6.3 Medium
- aws ops wheel Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft 6.2 Medium
- ntpsec Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in ntpsec 4.7 Medium
- hackerone defaults-deep @phun-ky/defaults-deep Has a Prototype Pollution issue via Unsafe Recursive Property Merging 7.3 High
- bank-vaults vault-secrets-webhook vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API 9.6 Critical
- johnson controls fm systems employee, johnsoncontrols fms employee +1 more FMS Employee Vulnerable to HTML Injection 4.8 Medium
- johnson controls fm systems employee, johnsoncontrols fms employee +1 more FMS Employee vulnerable to XSS 4.8 Medium
- johnson controls fm systems employee, johnsoncontrols fms employee +1 more FMS Employee Allows Upload of Unrestricted Files 4.8 Medium
- johnson controls xaap application, johnsoncontrols xaap +1 more XAAP Android Data Stored in Unencrypted Database 4.8 Medium
- kyndryl-open-source hashi-vault-js hashi-vault-js has a path traversal and query parameter injection 8.7 High
- hackingrepo dssrf-js dssrf: any users using 1.1.1.1 DNS is impacted by SSRF 8.7 High
-
nltkPyPI Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode 8.6 High -
nltkDebian Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex 7.5 High -
nltkDebian,python-nltkopenSUSE +1 more Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) 7.5 High -
nltkDebian Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) 7.5 High - webpros cpanel, wp squared +1 more Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in... 9.4 Critical
- webpros cpanel, wp squared +1 more HTTP Smuggling in cPanel allows potential leak of credentials. 5.6 Medium
- pterodactyl wings Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service 7.5 High
- pterodactyl wings Wings exposes node configuration secrets through egg configuration-file templating 9.9 Critical
- pterodactyl wings Wings: Maliciously or erroneously created parsed config files can cause wings process to OOM 5.5 Medium
- Show olderLoading…