CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- ibm sterling b2b integrator, sterling file gateway +1 moreImproper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway4.3 Medium
- adobe bridgeBridge | Out-of-bounds Write (CWE-787)7.8 High
- adobe bridgeBridge | Untrusted Search Path (CWE-426)8.2 High
- adobe bridgeBridge | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)7.8 High
- ibm sterling b2b integrator, sterling file gateway +1 moreSQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway8.1 High
- adobe bridgeBridge | Out-of-bounds Write (CWE-787)7.8 High
- adobe bridgeBridge | Incorrect Authorization (CWE-863)8.2 High
- adobe bridgeBridge | Untrusted Search Path (CWE-426)8.6 High
- adobe bridgeBridge | Out-of-bounds Write (CWE-787)7.8 High
- adobe bridgeBridge | Incorrect Authorization (CWE-863)8.6 High
- hashicorp toolingterraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode10.0 Critical
- hashicorp toolingterraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user8.9 High
- enterprisedb pglogicalA use-after-free condition exists in pglogical's worker signaling code, where a worker structure...7.7 High
- enterprisedb pglogicalWhen applying replicated changes for a row that is missing one or more columns, pglogical...9.0 Critical
- enterprisedb pglogicalThe pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a...9.0 Critical
- enterprisedb pglogical, axiomthemes spock +1 morepglogical's apply worker does not sufficiently validate the length of certain fields in incoming...6.1 Medium
- hashicorp toolingterraform-mcp-server vulnerable to server side request forgery leading to token exposure8.6 High
- adobe format pluginsFormat Plugins | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe photoshop installerPhotoshop Installer | CWE-427: Uncontrolled Search Path Element8.6 High
- nessshon tonapipytonapi has a Webhook Custom Path Authentication Bypass7.5 High
- sipsorcery-org sipsorcerySIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export7.6 High
- quiet-terminal-interactive qtineonQTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding8.6 High
- generalsandman tinywebTinyWeb 0.0.8 Path Traversal via URL Path Component8.7 High
- ruby-oauth oauth2OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host8.6 High
- generalsandman tinywebTinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP Request8.7 High
- cordea oauthOAuth: Cross-origin token-request redirects can expose signed request metadata7.2 High
- generalsandman tinywebTinyWeb 0.0.8 Memory Leak DoS via HTTP Request Handling8.7 High
- sparklemotion sqlite3-rubysqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks2.0 Low
- blackberry uem, unified endpoint manager +1 moreCross-Site Scripting (XSS) in Management Console of BlackBerry UEM8.6 High
- blackberry uem, unified endpoint manager +1 moreImproper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM5.9 Medium
- sparklemotion sqlite3-rubysqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity2.0 Low
- tomaka rouilleRouille 0.3.3 - 3.6.2 HTTP Request Smuggling via proxy Header Injection6.9 Medium
- gopacketGoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS6.9 Medium
- gopacketGoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS)6.9 Medium
- tomaka rouilleRouille 0.3.3 - 3.6.2 HTTP Request Smuggling via proxy Transfer-Encoding Header6.3 Medium
- tomaka rouilleRouille 0.4.0 - 3.6.2 HTTP Response Splitting via Header Injection5.3 Medium
- tomaka rouilleRouille 0.1.6 - 3.6.2 Reachable Assertion DoS via remove_prefix percent-encoding8.2 High
- ibm sterling b2b integrator, sterling file gateway +1 moreCross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway5.5 Medium
- ibm openbmc, power system e1050 \(9043-mrx\) firmware, power system e1150 \(9043-mru\) firmware +13 more +15 moreThis Power System update is being released to address incorrect authorization6.5 Medium
- ibm openbmc, power system e1050 \(9043-mrx\) firmware, power system e1150 \(9043-mru\) firmware +13 more +15 moreThis Power System update is being released to address a sensitive information disclosure4.5 Medium
- nvidia dcgm, dcgm exporter +1 moreNVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints,...8.2 High
nono-clicrates.ionono-cli'scregistry pack verification can fail open when provenance metadata is absent6.6 Medium- tiny-httptiny-http 0.12.0 HTTP Response Splitting via Header Injection6.3 Medium
- tiny-httptiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling6.3 Medium
- convoypanel panelPterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions8.1 High
- sdelements lets-chatLet's Chat 0.3.0 - 0.4.8 Improper Authorization via DELETE /rooms/:room5.3 Medium
- sdelements lets-chatLet's Chat 0.3.0 - 0.4.8 Broken Access Control File Disclosure via GET /files route5.3 Medium
- sdelements lets-chatLet's Chat 0.4.0 - 0.4.8 Denial of Service via Null Dereference in Room Lookup7.1 High
- owen2345 camaleon-cmsCamaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field8.7 High
- Show moreLoading…