CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- itflow-org itflowITFlow Vulnerable to Authenticated Cross-Tenant Credential Disclosure via Unprotected Credential Modal6.5 Medium
- svc-develop-team so-vits-svcSoftVC VITS Singing Voice Conversion Path Traversal via /wav2wav Flask Route9.3 Critical
- h2oai h2ogpth2oGPT 0.2.1 Path Traversal via OpenAI-compatible Files API9.3 Critical
- phoca.cz phoca guestbook extension for joomlaJoomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 5.0.0-6.1.05.1 Medium
- reworkd agentgptAgentGPT 1.0.0 Authorization Bypass via Agent Task Creation2.3 Low
- quenary tugtainerTugtainer has Server-Side Template Injection in notification templates that leads to Remote Code Execution9.9 Critical
- phoca.cz phoca maps extension for joomlaJoomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.45.1 Medium
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.18.7 High
- gnome gdk-pixbuf, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGdk-pixbuf: out-of-bounds read in ico parser5.3 Medium
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.19.3 Critical
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.19.2 Critical
- voideditor voidVoid 1.3.4 Path Traversal via AI Agent File-Reading Tools6.0 Medium
- fathomFathom Lite 1.3.1 Stored XSS via /collect Endpoint5.1 Medium
- facebook proxygenProxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. A...7.5 High
- sct overseerrOverseerr 1.35.0 Authorization Bypass via pushSubscriptions API5.3 Medium
- gongrzhe office-word-mcp-serverOffice-Word-MCP-Server 1.1.11 Path Traversal via document tools7.6 High
- cyberpanelCyberPanel IncBackups IDOR via Sequential Backup ID8.7 High
- cyberpanelCyberPanel Missing Authorization in cancelBackupCreation Handler7.2 High
- logtoUnverified email-based SSO account linking9.1 Critical
- logtoLOIDC nonce validation bypass9.1 Critical
- logtoIdP-initiated SAML sessions not reliably invalidated (replay)7.5 High
- logtoSAML <Conditions> element not validated7.5 High
- logtoLocal MFA not enforced during SSO sign-in9.1 Critical
- logtoPrincipal/domain lookup without case normalization9.1 Critical
- aws aws-api-mcp-serverAWS API MCP Server Security Policy Bypass via Startup Failure7.3 High
- gfi software archiverGFI Archiver < 15.14 Stored XSS via MailInsights.aspx5.1 Medium
- gfi software archiverGFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashx5.1 Medium
- gfi software archiverGFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx5.1 Medium
- gfi software archiverGFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspx5.1 Medium
- gfi software archiverGFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx5.1 Medium
- gfi software archiverGFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspx5.1 Medium
- gfi software archiverGFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspx5.1 Medium
- gfi software archiverGFI Archiver < 15.13 Stored XSS via RetentionPolicyWizard.aspx5.1 Medium
- gfi software archiverGFI Archiver < 15.14 Stored XSS via CategorizationPolicyWizard.aspx5.1 Medium
- tridium niagara enterprise security, niagara framework +1 moreProgram Module Vulnerability5.2 Medium
- postcssPostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments7.5 High
- phpoffice phpspreadsheetPhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion7.5 High
- phpoffice phpspreadsheetPhpSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion7.5 High
- phpoffice phpspreadsheetPhpSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist7.7 High
- nextauthjs next-authNextAuth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)9.1 Critical
- @auth core, nextauthjs next-auth +1 moreNextAuth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers7.5 High
- @auth core, nextauthjs next-auth +1 moreNextAuth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass9.1 Critical
- apple swift-cryptoRed Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update7.5 High
- apple swift-nio-ssl, swiftnio ssl +1 moreNIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1_STRING, but not all SANs are backed by…7.7 High
- @auth core, nextauthjs next-auth +1 moreNextAuth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them6.8 Medium
multipath-toolsSUSESecurity update for multipath-toolsNo score- bizimhesap information systems industry and trade inc. online pre-accounting softwareUnrestricted File Upload in BizimHesap Information Systems' Online Pre-Accounting Software4.3 Medium
- conventional-changelogrelease-it conventional-changelog Changelog File index.js writeChangelog os command injection4.8 Medium
- bold reports (by syncfusion) standalone report designerBold Reports Standalone Report Designer < 14.1.12 Path Traversal RCE via File Upload8.7 High
- bahmutov find-cypress-specsbahmutov find-cypress-specs Branch index.js shell.exec os command injection4.8 Medium
- Show moreLoading…