CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- flytohub flyto-coreFlyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)8.5 High
- flytohub flyto-coreFlyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted8.6 High
- flytohub flyto-coreFlyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration9.3 Critical
- hashicorp toolingconsul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode10.0 Critical
- flytohub flyto-coreFlyto2 Core: LLM/API keys leak to an attacker-controlled base_url8.6 High
- pip maintainers pippip absolute path traversal during download from malicious package indexes5.6 Medium
- hashicorp toolingconsul-mcp-server vulnerable to server side request forgery leading to token exposure8.6 High
- flytohub flyto-coreFlyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation8.5 High
- authlib joserfcjoserfc accepts JWT with padding, leading to JWT malleability2.3 Low
- tp-link system inc. tl-wr940n v6Unauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack Feature8.7 High
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a cross-site request forgery3.1 Low
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery9.4 Critical
- vlang vV 0.5.2 SSRF Bypass via Parser Differential in net.urllib and net.http7.7 High
- zephyrproject zephyrOut-of-bounds read in coredump shell when printing stored-dump target code3.0 Low
- blackberry ltd qnx software development platformVulnerability in the QNX libtraceparser Impacts QNX Software Development Platform7.0 High
- care everywhere llc everywhere gatewayCare Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly9.3 Critical
- google google-adkGoogle-ADK Continuation Forgery9.3 Critical
- develar app-builderDevelar's electron-builder allows arbitrary file overwrite6.5 Medium
- devolutions password managerImproper certificate validation in the Devolutions Server connection handling in Devolutions...7.4 High
- arnog mathlivemathlive's Lack of Escaping of HTML allows for XSS6.3 Medium
- drupal disable login pageDisable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-1105.7 Medium
- drupal token content accessToken Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-0907.5 High
activerecord-tenantedRubyGemsActiveRecord::Tenanted::Storage::DiskService#path_for has a possible path traversal2.3 Lowgithub.com/tinfoil-factory/netfoilGonetfoil: Incorrect block responses could lead to localhost traffic7.4 High- kube-logging logging-operatorLogging operator has Fluentd configuration injection that allows remote code execution9.9 Critical
- zitadelZITADEL Users Can Self-Verify Email/Phone via API8.2 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreposix-cpu-timers: Prevent UAF caused by non-leader exec() race7.8 High
- nodejs undiciundici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields4.8 Medium
- termux proot-distroproot-distro has a Container Isolation Bypass via Crafted Restore Archive8.2 High
- svarshavchik courier imap, courier mail server +1 moreCourier IMAP < 6.0.1 Mail Server < 2.0.2 Stack Overflow DoS via Nested SEARCH Queries7.1 High
- black duck coverity connectAuthentication and Authorization Bypass in Coverity Connect9.2 Critical
- red hat quay 3.10, quay 3.12, quay 3.14 +5 more +7 moreQuay: quay: global read-only superuser can view robot account tokens7.2 High
- systerel s2opcImproper Certificate Validation in S2OPC5.6 Medium
- nodejs undiciundici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives7.4 High
- termux proot-distro`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive8.2 High
- black duck coverity connectSQL Injection in Coverity Connect SOAP API8.7 High
- linux, linux kernel +1 mores390/pkey: Check length in PKEY_VERIFYPROTK ioctl7.8 High
- linux, linux kernel +1 mores390/pkey: Check length in pkey_pckmo handler implementation7.8 High
- cisco secure firewall management center (fmc), secure firewall management center +1 moreCisco Secure Firewall Management Center Software Static Credential Vulnerability5.3 Medium
- containers fuse-overlayfsfuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)2.0 Low
matrix-commanderPyPIolm dependency deprecation: CVE-2022-39255 and CVE-2024-45193No score- @fastify/rate-limit, fastify fastify\/rate-limit +1 more@fastify/rate-limit vulnerable to rate-limit bypass via IPv6 address rotation7.3 High
- prebid prebid-server, server +1 moreprebid-server's request forgery vulnerability allows for possible host environment data extraction10.0 Critical
- xlight ftp server, xlightftpd xlight ftp server +1 moreXlight FTP Server < 3.9.5 Information Disclosure via USER Command6.9 Medium
- xlight ftp server, xlightftpd xlight ftp server +1 moreXlight FTP Server < 3.9.5 Pre-Auth Stack Buffer Overflow via SSH GCM Cipher9.2 Critical
- xlight ftp server, xlightftpd xlight ftp server +1 moreXlight FTP Server < 3.9.5 Pre-Auth Heap Buffer Overflow via SSH Parser9.3 Critical
libpng16SUSESecurity update for libpng16No scorelibpng16openSUSESecurity update for libpng16No score- nasa-ammos ait-dsn, nasa ait dsn +1 moreAIT-DSN < 2.2.2 Missing Authentication via SLE API Routes9.3 Critical
- dynatrace-oss dynatrace-mcpDynatrace MCP Server: create_dynatrace_notebook missing the human-approval gate3.7 Low
- Show moreLoading…