CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- jfrog artifactoryServer-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repository6.5 Medium
- jfrog artifactoryPotential privilege escalation to JFrog administrator privileges8.8 High
- jfrog artifactoryJFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.7.2 High
- jfrog artifactoryImproper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability6.5 Medium
- jfrog artifactoryJFrog Artifactory build environment properties exposure6.5 Medium
- ocaml utcpAn issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment...7.5 High
- jfrog artifactoryPotential authentication bypass leading to privilege escalation in Artifactory8.8 High
- jfrog artifactoryPotential path traversal leading to unauthorized file writes8.8 High
- cribl streamAuthenticated RCE via Symlink Following in Cribl Stream Pack Git Import8.7 High
- jfrog artifactoryPrivilege escalation via JFrog Worker event token exposure8.8 High
- cribl streamCode Injection in JSON Pointer Processing Component in Cribl Stream8.7 High
- jfrog artifactoryIncorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation8.1 High
- google mcp toolbox for databases (googleapis/mcp-toolbox), mcp toolbox for databases +1 moreServer-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool6.0 Medium
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9, ansible automation platform 2.6 for rhel 9 +1 more +3 moreEda-server: externaleventstreamviewset trusts subject header without validation and leaks expected dn7.5 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images7.1 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images5.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images7.8 High
- ocaml mirage-crypto-ecAn issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA...6.2 Medium
- ocaml mirage-cryptoAn issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM...6.2 Medium
- honeywell s35 series 3m/5m/8m/pinhole camerasAudit Log Exposure through Unauthorized Access6.9 Medium
- zephyrproject zephyrDesignWare I2C target driver can be wedged into a permanent stuck state by an on-bus master (DoS)2.4 Low
- zephyrproject zephyrOut-of-bounds write in Zephyr `log_filter_set` syscall verifier reachable from userspace6.6 Medium
- creativeitem ekushey project manager crmEkushey Project Manager CRM 5.0 Stored XSS via Reply Ticket Field5.1 Medium
- creativeitem ekushey project manager crmEkushey Project Manager CRM 5.0 Stored XSS via Ticket Title Field5.1 Medium
- rrwo plack::app::prerenderPlack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in call9.1 Critical
- creativeitem ekushey project manager crmEkushey Project Manager CRM 5.0 Stored XSS via Client Name Field5.1 Medium
- creativeitem ekushey project manager crmEkushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Email7.1 High
- papra-hq papraPapra: Cross-organization tag deletion and modification via authenticated cross-tenant request5.4 Medium
- roskus prospero flow crmStored XSS in Prospero Flow CRM email body allows administrator account takeover8.6 High
- devolutions serverImproper access control in the PAM password history endpoints in Devolutions Server allows an...4.3 Medium
- devolutions serverImproper access control in the NetBox synchronizer in Devolutions Server allows an authenticated...4.3 Medium
- devolutions serverImproper access control in the role membership management endpoint in Devolutions Server allows...8.8 High
- beaugunderson ip-addressip-address: Misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks6.9 Medium
org.xwiki.contrib:discussions-serverMavenorg.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages6.5 Medium- boazsegev facil.iofacil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoS8.7 High
- boazsegev facil.iofacil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parser8.7 High
- boazsegev facil.iofacil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parser8.7 High
- apache wicketApache Wicket: leaked and missing CSP headers6.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was...9.8 Critical
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection....7.8 High
- arista networks velocloud orchestrator on-premVeloCloud Orchestrator Flow Metrics API SQL Injection8.5 High
- apache wicketApache Wicket: crafted Link URL strings can break out of the JavaScript sequence6.1 Medium
- arista networks velocloud orchestrator on-premVeloCloud Orchestrator Missing Input Validation SSRF6.3 Medium
rsc.io/pdfGoUncatchable stack-overflow denial of service in rsc.io/pdfNo scoregithub.com/cloudsoda/go-smb2Go,github.com/hirochachacha/go-smb2Go +1 moreOut-of-bounds read and panic in ReadDir in github.com/cloudsoda/go-smb2 and github.com/hirochachacha/go-smb2No score- klauspost compressInteger Overflow or Wraparound and Out-of-bounds Write in compress7.5 High
- unitedbyai droidclawunitedbyai droidclaw Unsigned Scheduled Callback goals.ts authorization2.3 Low
- arista velocloud orchestrator, arista networks velocloud orchestrator on-prem +1 moreVeloCloud Orchestrator OS Command Injection10.0 Critical
- astrbotdevs astrbotAstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization5.3 Medium
- thorsten phpmyfaqphpMyFAQ before 4.1.6 Privilege Escalation via Group Membership8.5 High
- Show moreLoading…