CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- railsAction Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing9.5 Critical
- ibm engineering requirements management doors and doors web access, engineering requirements management doors web access +1 moreIBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities7.5 High
- amazon amplify codegen uiIncomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react6.4 Medium
- ibm operations analytics - log analysisIBM Operations Analytics - Log Analysis is affected by a TOCTOU weakness allowing active sessions to persist beyond a password change6.3 Medium
- lmsys sglangCVE-2026-159699.8 Critical
- lmsys sglangCVE-2026-159787.5 High
- lmsys sglangCVE-2026-159777.5 High
- lmsys sglangCVE-2026-159769.8 Critical
- lmsys sglangCVE-2026-159746.5 Medium
- lmsys sglangCVE-2026-159719.8 Critical
- ibm planning analytics localIBM Planning Analytics Local is affected by Open Redirect7.5 High
- ibm hardware management console, hmc v10.3.1050.0, hmc v11.1.1110.0 +2 moreThis Power Hardware Management Console update is being released to address9.8 Critical
- ibm datapower gateway, datapower gateway 10.5.0, datapower gateway 10.6.0 +2 more +4 moreIBM DataPower Gateway affected by denial of service7.5 High
- ibm datapower gateway 10.5.0, datapower gateway 10.6.0, datapower gateway 10.6cd +2 moreIBM DataPower Gateway affected by XML external entity injection5.5 Medium
- mikrotik routerosInsufficient session expiration in MikroTik RouterOS6.9 Medium
- aio-libs aiohttpAIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate6.9 Medium
- activepiecesActivepieces: Cross-tenant data exposure and code injection via the Code piece sandbox cache9.3 Critical
- 1panel-dev maxkbMaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validation5.3 Medium
- ibm webmethods integration (on prem), webmethods integration +1 moreIBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data9.8 Critical
- leantimeLeantime CSRF Protection Globally Disabled by Omission of Laravel VerifyCsrfToken Middleware8.6 High
- ibm engineering requirements management doors and doors web access, engineering requirements management doors web access +1 moreIBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities6.1 Medium
- ibm db2IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell8.4 High
- ibm db2IBM® Db2® is vulnerable to a denial of service when running non fenced federated queries6.2 Medium
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access5.3 Medium
- ibm langflow oss, langflow +1 moreBroken Access Control Vulnerabilities in Langflow 1.0.0 - 1.8.4 File Handling API Allowed Unauthorized Access to User Files6.5 Medium
- masci banksBanks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE7.5 High
- leantimeLeantime Server-Side Request Forgery and Local File Inclusion in Blueprints::import()8.4 High
- ibm langflow oss, langflow +1 morePython Interpreter Sandbox Bypass Leading to Sensitive Data Exposure9.9 Critical
- ibm langflow oss, langflow +1 moreLangflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpoints7.5 High
- ibm langflow oss, langflow +1 moreLangflow is affected by exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints7.1 High
- ibm langflow oss, langflow +1 moreLangflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpoints9.8 Critical
- ibm powervm hypervisor, power system e1050 \(9043-mrx\) firmware, power system e1080 \(9080-hex\) firmware +28 more +30 morePower System update in Buffer Copy8.4 High
- leantimeLeantime Open Redirect in Login Controller via redirectUrl Parameter5.1 Medium
- msgpack messagepack, msgpack-ruby +1 moreMessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure2.1 Low
- openvpnThe Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to...5.1 Medium
- hackingrepo dssrf-jsdssrf: there a critical security bug with remove_at_symbol_in_string8.7 High
- masci banksBanks: Arbitrary File Read via Path Traversal in Media Filters (image/audio/video/document)7.5 High
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities7.5 High
- apache supersetApache Superset: Regular Expression Denial of Service (ReDoS) in SQL Parser5.3 Medium
- apache supersetApache Superset: Improper Authorization in Chart Update allowing Dashboard Modification5.3 Medium
- apache kyuubiApache Kyuubi: REST batch multipart upload path traversal allows controlled file write9.8 Critical
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a security bypass vulnerability7.5 High
- apache jspwikiApache JSPWiki: Markdown parser allows XSS injection in Markdown error processing6.5 Medium
- solarwinds web help deskSolarWinds Web Help Desk SAML Authentication Bypass Vulnerability9.8 Critical
- apache jspwikiApache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering7.5 High
- apache jspwikiApache JSPWiki: JSPWiki vulnerable to JSON hijacking8.8 High
- apache jspwikiApache JSPWiki: UserManager does not sanity-check user database at startup9.8 Critical
- apache jspwikiApache JSPWiki: Error Handling - Reveals Error Details7.5 High
- kanboardKanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation8.4 High
- foreupforeUP customer REST API allows authenticated users to read cleartext payment-processor merchant credentials6.5 Medium
- Show moreLoading…