CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- linux, linux kernel +1 moreACPI: driver: Check ACPI_COMPANION() against NULL during probe5.5 Medium
- linux, linux kernel +1 moresched_ext: Avoid UAF in scx_root_enable_workfn() init failure path7.8 High
- linux, linux kernel +1 moreocteontx2-af: CGX: add bounds check to cgx_speed_mbps index7.8 High
- linux, linux kernel +1 moreocteontx2-pf: fix double free in rvu_rep_rsrc_init()7.8 High
- linux, linux kernel +1 morewifi: mac80211: consume only present negotiated TTLM maps8.1 High
- linux, linux kernel +1 moreocteontx2-pf: avoid double free of pool->stack on AQ init failure7.0 High
- linux, linux kernel +1 morespi: ti-qspi: fix use-after-free after DMA setup failure7.8 High
- linux, linux kernel +1 moredevice property: set fwnode->secondary to NULL in fwnode_init()5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async7.0 High
- linux, linux kernel +1 morebatman-adv: bla: fix report_work leak on backbone_gw purge7.8 High
- linux, linux kernel +1 morenetfs: Fix overrun check in netfs_extract_user_iter()7.8 High
- linux, linux kernel +1 morenetfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()9.8 Critical
- linux, linux kernel +1 moredrm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table5.5 Medium
- linux, linux kernel +1 morepowerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()5.5 Medium
- linux, linux kernel +1 morehwmon: (lm90) Add lock protection to lm90_alert5.5 Medium
- linux, linux kernel +1 morewifi: iwlwifi: mld: don't dereference a pointer before NULL checking it5.5 Medium
- linux, linux kernel +1 moresrcu: Don't queue workqueue handlers to never-online CPUs5.5 Medium
- linux, linux kernel +1 morenet/mlx5e: xsk: Fix unlocked writing to ICOSQ7.5 High
- linux, linux kernel +1 morephy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config7.1 High
- linux, linux kernel +1 morecrypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks7.5 High
- red hat certificate system 10, certificate system 11, certificate system 9 +5 more +7 morePki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path3.1 Low
- zapad image::webpImage::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp9.8 Critical
- huggingface datasetsDatasets Path Traversal via Unsanitized file_name Metadata6.9 Medium
- lakefslakeFS Unauthenticated Operator Metadata Overwrite via setup_comm_prefs6.9 Medium
- janhq janJan Local API Server CORS Origin Reflection via 0.0.0.0 Binding5.3 Medium
- apache hbaseApache HBase: Missing scanner instance owner check in thrift delegation service6.5 Medium
- devolutions powershell universalCleartext storage of sensitive information in the variables feature in Devolutions PowerShell...6.5 Medium
- devolutions powershell universalImproper control of generation of code ('Code Injection') in the variables feature in Devolutions...8.8 High
- devolutions powershell universalImproper control of generation of code ('Code Injection') in the schedule feature in Devolutions...8.8 High
- devolutions powershell universalImproper access control in the automation tests and workflows features in Devolutions PowerShell...5.0 Medium
- devolutions powershell universalInsertion of sensitive information into sent data in the automation jobs API in Devolutions...6.5 Medium
- ahujasid blender-mcpBlenderMCP Path Traversal via download_polyhaven_asset API6.0 Medium
- microsoft azure kubernetes serviceMicrosoft Azure Kubernetes Service Elevation of Privilege Vulnerability10.0 Critical
- microsoft azure app service for linuxAzure App Service on Azure Stack Hub Elevation of Privilege Vulnerability10.0 Critical
- microsoft purview data governanceData Quality Elevation of Privilege Vulnerability10.0 Critical
- easyappointments easy appointmentsEasy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Arbitrary Connection Deletion8.1 High
Magick.NET-Q16-AnyCPUNuGet,Magick.NET-Q16-arm64NuGet,Magick.NET-Q16-HDRI-AnyCPUNuGet +14 more +16 moreImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-257975.7 MediumMagick.NET-Q16-AnyCPUNuGet,Magick.NET-Q16-arm64NuGet,Magick.NET-Q16-HDRI-AnyCPUNuGet +14 more +16 moreImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-492194.7 Medium- ekol informatics website templateReflected XSS Polen Media's Website Template6.1 Medium
- @tanstack react-routerReact Router: Unauthenticated Denial of Service via Inefficient Route Matching8.7 High
- red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 moreKeycloak-services: keycloak-services: information disclosure via role-users endpoint bypasses per-user view filter6.5 Medium
- loytec l-dali, l-gate, l-inx +5 more +7 moreLoytec LINX firmware: Out-of-bounds Read in BACnet packet parsing (bacdt_datetime_to_tod)8.7 High
- loytec l-dali, l-gate, l-inx +5 more +7 moreLoytec LINX firmware: Unchecked input for loop condition in the SNMP agent6.6 Medium
- loytec lweb-802Loytec LWEB802: Reflected Cross-Site Scripting in LWEB8028.7 High
- loytec lweb-802Loytec LWEB802: Exposure of Sensitive Information in browser localStorage7.7 High
- loytec l-dali, l-gate, l-inx +5 more +7 moreLoytec LINX firmware: Stack-based Buffer Overflow in cmd_ipaddr_conflict3.8 Low
- loytec l-dali, l-gate, l-inx +5 more +7 moreLoytec LINX firmware: Improper Authentication in PAM configuration8.4 High
- loytec l-dali, l-gate, l-inx +5 more +7 moreLoytec LINX firmware: Improper Link Resolution in /usr/bin/larm_starter9.2 Critical
- loytec l-dali, l-gate, l-inx +5 more +7 moreLoytec LINX firmware: Improper Privilege Management in /usr/bin/ltsudo8.4 High
- loytec l-dali, l-gate, l-inx +5 more +7 moreLoytec LINX firmware: Unauthenticated stored XSS in OPC XML-DA server8.7 High
- Show moreLoading…