CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- microsoft edge, edge for android +1 moreMicrosoft Edge for Android (Chromium-based) Tampering Vulnerability5.4 Medium
- @novu application-generic, novuhq novu +1 moreNovu: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition6.8 Medium
- convoypanel panelPterodactyl's shared global rate-limit key on login and 2FA checkpoint enables unauthenticated panel-wide authentication lockout (DoS)7.5 High
- pionxzh wakaru@wakaru/cli arbitrary file write during bundle unpack7.1 High
- github mcp server, github-mcp-server +1 moreGitHub MCP Server: Nil Pointer Dereference DoS in completion/complete Handler7.5 High
- mispOpen Redirect in MISP Installer-Generated Apache Configuration7.8 High
- apache tomcatApache Tomcat: DoS via WebSocket chat example5.3 Medium
- wordpress wordpress-coding-standardsWordPress Coding Standards (WordPressCS) contains an arbitrary code execution vulnerability8.6 High
- appium java-clientAppium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor8.2 High
- anchore enterpriseAnchore Enterprise Privilege Escalation via User Management API8.7 High
github.com/pocket-id/pocket-id/backendGoPocket ID has a reauthentication bypass via one-time access token login — passkey step-up requirement defeated by JWT freshness check that accepts any login method6.0 Medium- arksigner software and hardware industry and trade inc. desktop clientSearch Order Hijacking in ArkSigner's ArkSigner Desktop Client7.3 High
- mattermost, mattermost server +1 moreSAML certificate deletion allows path traversal to delete arbitrary files outside the config directory5.5 Medium
ReseauJuliaWindows IOCP poller races unsynchronized registration tablesNo scoreReseauJuliaSlow DNS lookups can stall garbage collection process-wideNo scoreReseauJuliaTLS 1.3 KeyUpdate handling can race concurrent writesNo scoreReseauJuliaWindows IOCP lifetime bugs can corrupt memory during cancellation or shutdownNo scoreReseauJuliaUnauthenticated TLS records can exhaust memory or CPU during a handshakeNo scoreReseauJuliaTLS 1.2 session resumption can renew one master secret indefinitelyNo scoreReseauJuliaNative TLS accepts undersized or malformed RSA certificate public keysNo score- pivotickDOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick9.2 Critical
- python software foundation cpythonQuadratic Behavior in xml.etree.ElementPath Index Predicates2.0 Low
- apache software foundation axis2/java, apache axis2\/java +1 moreApache Axis2/Java: deserialization of untrusted Data9.8 Critical
- apache activemq, activemq all, activemq amqp +2 moreApache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS7.5 High
- apache activemq, activemq all, activemq broker +2 moreApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations6.5 Medium
- pivotickPivotick Unvalidated Node Image URLs Allow Unintended Client-Side Requests5.1 Medium
- pivotickPivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service5.1 Medium
- pivotickPivotick - Stored DOM-Based Cross-Site Scripting via Unescaped Markdown Node References6.3 Medium
- pivotickPivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data8.2 High
- pivotickStored DOM-Based Cross-Site Scripting in Node Modal Headers6.9 Medium
- nextlevelbuilder goclawnextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure5.3 Medium
- red hat certificate system 10, certificate system 11, certificate system 9 +5 more +7 moreDogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash6.5 Medium
- pivotickDOM-Based Cross-Site Scripting via Unsanitized SVG Node Icons8.2 High
- joomdle.com joomdle component for joomlaJoomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle < 3.1.17.5 High
- cozythemes cozy blocks – page builder for gutenberg editor & fse with 600+ patterns, 58 blocks & templatesCozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postMeta.font.size' Block Attribute6.4 Medium
- strangerstudios paid memberships pro – content restriction, user registration, & paid subscriptionsPaid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions <= 3.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- joomdle.com joomdle component for joomlaJoomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle < 3.1.16.1 Medium
- xenPoD: Don't try to reclaim special pages5.3 Medium
- xencorrect buffer checks for DM_OP hypercalls7.3 High
- xenevtchn: Race between FIFO expand and reset7.3 High
- xenViridian STIMER division by zero7.5 High
- xenx86: Out-of-bounds read in vRTC emulation7.5 High
- xenvNUMA domain cleanup may race other operations6.5 Medium
- xengrant-table: version change racing with other operations6.5 Medium
- xengrant-table: version change racing with other operations6.5 Medium
- xengrant-table: type confusion in grant-copy7.8 High
- xensysctl and platform-op locks open to abuse8.8 High
- xensysctl and platform-op locks open to abuse8.8 High
- xenbuffer overruns in libfsimage iso9660 handling5.5 Medium
- xenbuffer overruns in libfsimage iso9660 handling5.5 Medium
- Show moreLoading…