CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- traefikTraefik before v2.11.52 Authentication Bypass via ReplacePathRegex7.8 High
- n8nn8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header5.1 Medium
- n8n-io n8nn8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution8.9 High
- n8nn8n before 1.123.64 Remote Code Execution via Git Clone8.9 High
- n8nn8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe8.2 High
- n8nn8n before 1.123.64 Credential Exfiltration via GraphQL Node5.1 Medium
- n8nn8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange8.9 High
- n8nn8n before 2.30.1 Missing OAuth Authorization Check5.1 Medium
- n8nn8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters6.3 Medium
- n8nn8n before 1.123.64 Stored DOM XSS via cachedResultUrl8.4 High
- n8nn8n before 1.123.64 Sanitizer Bypass Remote Code Execution8.9 High
- n8nn8n before 2.30.1 Shell Sandbox Bypass on Linux Windows5.5 Medium
- n8nn8n before 1.123.64 Credential Exposure via LLM Node Execution Data5.1 Medium
- n8nn8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role7.7 High
- n8nn8n before 2.30.1 Privilege Escalation via run_node_tool7.2 High
- n8nn8n before 2.28.0 Authentication Bypass via test-webhook6.3 Medium
kernel-livepatch-MICRO-6-0_Update_27SUSESecurity update for kernel-livepatch-MICRO-6-0_Update_27No scorekernel-livepatch-MICRO-6-0_Update_27SUSESecurity update for kernel-livepatch-MICRO-6-0_Update_27No scorekernel-livepatch-MICRO-6-0-RT_Update_27SUSESecurity update for kernel-livepatch-MICRO-6-0-RT_Update_27No scorekernel-livepatch-MICRO-6-0-RT_Update_27SUSESecurity update for kernel-livepatch-MICRO-6-0-RT_Update_27No score- red hat ansible automation platform 2Awx: websocket eventconsumer missing authorization for inventory_update_events, project_update_events, and system_job_events allows cross-organization stdout disclosure6.5 Medium
- hikvision ds-2cd series, ds-2de series +1 moreThere is a information disclosure vulnerability in some Hikvision cameras, allowing...5.3 Medium
- hikvision ds-2cd series, ds-2de series +1 moreThere is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow...7.2 High
- hikvision ds-2cd series, ds-2de series +1 moreThere is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow...7.7 High
- hikvision ds-2cd series, ds-2de series, ds-2dp series +1 more +3 moreInsufficient validation of input parameters in the firmware of some Hikvision cameras allows...7.5 High
- hikvision ds-2cd seriesThere is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect...6.6 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreSbc: sbc: heap out-of-bounds read via crafted sbc audio frame4.3 Medium
- servereye gmbh windows agent (sensorhub)Local Privilege Escalation in servereye client (sensorhub)8.8 High
- universe software computer marketing trade and industry inc. online registration and workflow management systemIDOR in Universe Software's Online Registration and Workflow Management System6.5 Medium
- brainstorm force ultimate addons for elementorUltimate Addons for Elementor <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes6.4 Medium
- joomshopping.com joomshopping extension for joomlaJoomla Extension - joomshopping.com - Reflective XSS in JoomShopping < 5.9.35.3 Medium
python3-sqlparseSUSESecurity update for python3-sqlparseNo scorepython-sqlparseSUSESecurity update for python-sqlparseNo scorepython-sqlparseSUSESecurity update for python-sqlparseNo score- joomlack.fr page builder ck extension for joomlaJoomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.29.4 Critical
- joomdonation.com events booking extension for joomlaJoomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.17.5 High
- 101arrowz fflatefflate unzipSync can enter an infinite loop when parsing malformed ZIP64 archives6.6 Medium
- smci x14dbg-dap,x14dbiSupermicro SMASH service contain an Arbitrary code execution issue8.8 High
- arraytics timeticsTimetics < 1.0.57 - Unauthenticated Booking Auto-Approval via Arbitrary payment_method5.3 Medium
- pixelite events managerEvents Manager < 7.3.7 - Unauthenticated SQL Injection via PHP Object Injection in Booking Registration7.5 High
- unknown product addons and product options with custom fieldsProduct Addons – WowAddons < 1.6.15 - Unauthenticated Stored XSS via Arbitrary SVG Upload8.8 High
- chimpstudio wp foodbakeryWP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX Action8.1 High
- umijs umiumijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection5.1 Medium
- veeam backup and replicationA vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a...8.4 High
- itsourcecode hospital management systemitsourcecode Hospital Management System prescription.php sql injection5.3 Medium
- No product listedAn issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate...7.8 High
- No product listedAn issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate...7.8 High
- No product listedAn issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a...5.5 Medium
- No product listedAn issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal.7.8 High
- No product listedAn issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote attacker to escalate...8.8 High
- Show moreLoading…