Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: June 2026

367 records · 26 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 3 of 4

  • CVE-2026-12295
    38Monitor

    Sandbox escape in the DOM: Navigation component

    CriticalCVSS 9.6Proof of conceptEPSS 0%

    mozilla · firefoxJun 16, 2026

  • CVE-2026-42089
    34Monitor

    yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation

    HighCVSS 8.6Proof of conceptEPSS 0%

    yeoman · environmentJun 16, 2026

  • CVE-2026-50656
    31Monitor

    Microsoft Defender Elevation of Privilege Vulnerability

    HighCVSS 7.0Proof of conceptEPSS 11%

    microsoft · malware protection engineJun 16, 2026

  • CVE-2026-12360
    30Monitor

    JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint

    HighCVSS 7.5No exploitEPSS 0%

    crocoblock · jetengineJun 17, 2026

  • CVE-2026-28576
    40Plan

    In Contacts Provider, there is a possible way to access the contacts database due to SQL injection.

    CriticalCVSS 10.0Proof of conceptEPSS 0%

    google · androidJun 17, 2026

  • CVE-2026-8089
    28Monitor

    weMail < 2.1.3 - Reflected Cross-Site Scripting

    HighCVSS 7.1Proof of conceptEPSS 0%

    unknown · wemail: email marketing, email automation, newsletters, subscribers & email optins for woocommerceJun 17, 2026

  • CVE-2026-8383
    23Monitor

    LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API

    MediumCVSS 5.3Proof of conceptEPSS 7%

    unknown · learnpressJun 17, 2026

  • CVE-2026-35301
    40Plan

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).

    CriticalCVSS 10.0No exploitEPSS 0%

    oracle · weblogic serverJun 17, 2026

  • CVE-2026-46838
    39Monitor

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).

    CriticalCVSS 9.9No exploitEPSS 0%

    oracle · webcenter portalJun 17, 2026

  • CVE-2026-46858
    36Monitor

    Vulnerability in the APM - Application Performance Management product of Oracle Enterprise Manager (component: JADM, JVM Diagnostics).

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    oracle · application performance managementJun 17, 2026

  • CVE-2026-42055
    38Monitor

    NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

    CriticalCVSS 9.2Proof of conceptEPSS 6%

    f5 · dosJun 17, 2026

  • CVE-2025-48617
    31Monitor

    In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass.

    HighCVSS 7.8Proof of conceptEPSS 0%

    google · androidJun 17, 2026

  • CVE-2026-0092
    40Plan

    In Package Manager, there is a possible device lock controller bypass due to a missing permission check.

    CriticalCVSS 10.0Proof of conceptEPSS 0%

    google · androidJun 17, 2026

  • CVE-2026-49079
    37Monitor

    WordPress JetSearch plugin <= 3.5.17 - SQL Injection vulnerability

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    jetimpex inc. · jetsearchJun 17, 2026

  • CVE-2026-54806
    39Monitor

    WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    melapress · wp activity logJun 17, 2026

  • CVE-2026-54807
    39Monitor

    WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    themegrill · registration form for woocommerceJun 17, 2026

  • CVE-2025-66391
    35Monitor

    In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write operations, e.g., the

    HighCVSS 8.8Proof of conceptEPSS 0%

    Jun 17, 2026

  • CVE-2026-49268
    35Monitor

    Apache Shiro: LDAP DN Injection in DefaultLdapRealm

    HighCVSS 8.8Proof of conceptEPSS 0%

    apache · shiroJun 17, 2026

  • CVE-2026-42530
    38Monitor

    NGINX Open-Source ngx_http_v3_module vulnerability

    CriticalCVSS 9.2Proof of conceptEPSS 6%

    f5 · nginx gateway fabricJun 17, 2026

  • CVE-2026-47103
    37Monitor

    Python StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() Injection

    CriticalCVSS 9.3Proof of conceptEPSS 1%

    fgmacedo · python statemachineJun 17, 2026

  • CVE-2026-54415
    34Monitor

    Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover

    HighCVSS 8.6Proof of conceptEPSS 0%

    azuriom · azuriom cmsJun 17, 2026

  • CVE-2025-26240
    33Monitor

    In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of the server applicatio

    HighCVSS 8.4Proof of conceptEPSS 0%

    Jun 17, 2026

  • CVE-2026-53805
    37Monitor

    NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    nv-tlabs · gen3cJun 17, 2026

  • CVE-2026-55200
    37Monitor

    libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

    CriticalCVSS 9.2Proof of conceptEPSS 3%

    libssh2 · libssh2Jun 17, 2026

  • CVE-2026-12569
    81Now

    Remote Code Execution (RCE) vulnerability in Windchill PDMlink

    CriticalCVSS 9.3KEVWeaponizedEPSS 46%

    ptc · flexplmJun 17, 2026

  • CVE-2026-11784
    17Monitor

    Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX Acti

    MediumCVSS 4.3Proof of conceptEPSS 0%

    optimole · optimole – optimize images | convert webp & avif | cdn & lazy load | image optimizationJun 18, 2026

  • CVE-2026-8461
    35Monitor

    Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

    HighCVSS 8.8Proof of conceptEPSS 1%

    ffmpeg · ffmpegJun 18, 2026

  • CVE-2026-56021
    27Monitor

    Webmin information disclosure via regex pattern

    MediumCVSS 6.9No exploitEPSS 0%

    webmin · webminJun 18, 2026

  • CVE-2026-46580
    33Monitor

    In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically loaded and

    HighCVSS 8.4No exploitEPSS 0%

    eclipse · theiaJun 18, 2026

  • CVE-2026-54390
    37Monitor

    JTL Shop < 5.7.2 Server-Side Template Injection via Smarty Renderer

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    jtl software · jtl shopJun 18, 2026

  • CVE-2026-11989
    26Monitor

    Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping

    MediumCVSS 6.5Proof of conceptEPSS 0%

    bitpressadmin · bit integrations – form integration, webhook, spreadsheets, crm, lms & email automationJun 19, 2026

  • CVE-2026-7515
    39Monitor

    BetterDocs Pro <= 3.8.0 - Unauthenticated Local File Inclusion via doc_style

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    betterdocs · betterdocs proJun 19, 2026

  • CVE-2026-8713
    37Monitor

    Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry Value

    CriticalCVSS 9.1Proof of conceptEPSS 3%

    themefusion · avada (fusion) builderJun 19, 2026

  • CVE-2026-56132
    27Monitor

    In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mis

    MediumCVSS 6.9No exploitEPSS 0%

    libexpat project · libexpatJun 19, 2026

  • CVE-2025-62821
    36Monitor

    Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving t

    CriticalCVSS 9.1Proof of conceptEPSS 1%

    microsoft · heif image extensionJun 19, 2026

  • CVE-2026-49230
    25Monitor

    Apache APISIX: Authentication bypass in jwe-decrypt

    MediumCVSS 6.3Proof of conceptEPSS 0%

    apache · apisixJun 19, 2026

  • CVE-2026-52910
    31Monitor

    bpf: Free reuseport cBPF prog after RCU grace period.

    HighCVSS 7.8Proof of conceptEPSS 0%

    linux · linux kernelJun 19, 2026

  • CVE-2026-11551
    39Monitor

    Branda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    wpmudev · branda – white label & branding, free login page customizerJun 19, 2026

  • CVE-2026-56073
    37Monitor

    Cap-go - OTP Bypass via Response Manipulation in Email Verification

    CriticalCVSS 9.3No exploitEPSS 0%

    cap-go · capgoJun 19, 2026

  • CVE-2026-11912
    30Monitor

    Simple File List <= 6.3.7 - Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX Action

    HighCVSS 7.5Proof of conceptEPSS 0%

    eemitch · simple file listJun 20, 2026

  • CVE-2026-48908
    97Now

    Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

    CriticalCVSS 10.0KEVWeaponizedEPSS 88%

    ollyo · sp page builderJun 20, 2026

  • CVE-2026-48909
    39Monitor

    Joomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.4

    CriticalCVSS 9.5Proof of conceptEPSS 4%

    joomshaper.net · sp lms extension for joomlaJun 20, 2026

  • CVE-2026-48939
    76This week

    Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15

    CriticalCVSS 10.0KEVWeaponizedEPSS 20%

    joomlic · icagendaJun 20, 2026

  • CVE-2026-5366
    39Monitor

    Git Argument Injection in prefecthq/prefect

    CriticalCVSS 9.9Proof of conceptEPSS 1%

    prefect · prefectJun 20, 2026

  • CVE-2026-12771
    5Monitor

    BerriAI litellm M2M JWT user_api_key_auth.py improper authorization

    LowCVSS 1.3No exploitEPSS 0%

    litellm · litellmJun 21, 2026

  • CVE-2026-56265
    38Monitor

    Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key

    CriticalCVSS 9.3Proof of conceptEPSS 2%

    kidocode · crawl4aiJun 21, 2026

  • CVE-2026-56423
    37Monitor

    MISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpoints

    CriticalCVSS 9.4Proof of conceptEPSS 0%

    misp-project · mispJun 22, 2026

  • CVE-2026-56446
    34Monitor

    Authenticated Remote Code Execution via Arbitrary NDJSON Error Log Path in MISP

    HighCVSS 8.7No exploitEPSS 0%

    misp-project · mispJun 22, 2026

  • CVE-2026-50178
    34Monitor

    Angular: Remote Code Execution via JSDoc Hover Command Injection in VS Code Angular Language Service Extension

    HighCVSS 8.7No exploitEPSS 0%

    angular · angular language serviceJun 22, 2026

  • CVE-2026-54266
    35Monitor

    Angular: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning

    HighCVSS 8.8No exploitEPSS 0%

    angular · angularJun 22, 2026

  • CVE-2026-11834
    34Monitor

    Unauthenticated Command Injection via DHCP Option Handling in Multiple TP-Link Routers

    HighCVSS 8.7Proof of conceptEPSS 0%

    tp-link systems inc. · archer mr200 v07Jun 22, 2026

  • CVE-2026-53571
    32Monitor

    Vite: `server.fs.deny` bypass on Windows alternate paths

    HighCVSS 8.2Proof of conceptEPSS 0%

    vitejs · viteJun 22, 2026

  • CVE-2026-56348
    21Monitor

    n8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters Endpoint

    MediumCVSS 5.3No exploitEPSS 0%

    n8n · n8nJun 22, 2026

  • CVE-2026-45034
    36Monitor

    PhpSpreadsheet: File::prohibitWrappers bypass

    CriticalCVSS 9.2Proof of conceptEPSS 0%

    phpoffice · phpspreadsheetJun 22, 2026

  • CVE-2026-49468
    39Monitor

    LiteLLM: Authentication Bypass via Host Header Injection

    CriticalCVSS 9.5Proof of conceptEPSS 3%

    litellm · litellmJun 22, 2026

  • CVE-2026-48500
    26Monitor

    Filament: Unauthenticated temporary file upload on auth pages

    MediumCVSS 6.5Proof of conceptEPSS 0%

    filamentphp · filamentJun 22, 2026

  • CVE-2026-54236
    21Monitor

    vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router

    MediumCVSS 5.3Proof of conceptEPSS 0%

    vllm · vllmJun 22, 2026

  • CVE-2026-11374
    37Monitor

    Account Takeover via Predictable SSO Ticket Generation

    CriticalCVSS 9.0Proof of conceptEPSS 2%

    zohocorp · manageengine_adselfservice_plusJun 23, 2026

  • CVE-2026-56274
    40Plan

    Flowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccess

    HighCVSS 8.7WeaponizedEPSS 7%

    flowiseai · flowiseJun 23, 2026

  • CVE-2026-56301
    27Monitor

    Nuxt - Arbitrary File Read via World-Connectable vite-node IPC Socket on Linux

    MediumCVSS 6.8No exploitEPSS 0%

    nuxt · nuxtJun 23, 2026

  • CVE-2026-27604
    40Plan

    FOSSBilling: Improper API Role Validation (system) Enables Unauthenticated Access to Privileged Admin Functions

    CriticalCVSS 10.0Proof of conceptEPSS 1%

    fossbilling · fossbillingJun 23, 2026

  • CVE-2026-28496
    38Monitor

    FOSSBilling: Server-side template injection in Twig template rendering enables information disclosure and RCE

    CriticalCVSS 9.4Proof of conceptEPSS 1%

    fossbilling · fossbillingJun 23, 2026

  • CVE-2026-50023
    38Monitor

    yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)

    CriticalCVSS 9.6No exploitEPSS 0%

    yt-dlp project · yt-dlpJun 23, 2026

  • CVE-2026-54157
    37Monitor

    LobeHub: Unauthenticated SSRF in `/webapi/proxy`

    CriticalCVSS 9.0Proof of conceptEPSS 1%

    lobehub · lobehubJun 23, 2026

  • CVE-2026-57062
    11Monitor

    CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supp

    LowCVSS 2.9Proof of conceptEPSS 0%

    gnupg · gnupgJun 23, 2026

  • CVE-2026-48020
    31Monitor

    Traefik StripPrefix Route-Level Auth Bypass via Path Normalization

    HighCVSS 7.8Proof of conceptEPSS 0%

    traefik · traefikJun 23, 2026

  • CVE-2026-54761
    24Monitor

    Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services

    MediumCVSS 6.0Proof of conceptEPSS 0%

    traefik · traefikJun 23, 2026

  • CVE-2026-46552
    23Monitor

    NocoDB: Shared-base link access can invite arbitrary users as persistent base members

    MediumCVSS 5.8Proof of conceptEPSS 0%

    nocodb · nocodbJun 23, 2026

  • CVE-2026-44789
    37Monitor

    n8n: HTTP Request Node Pagination Prototype Pollution to RCE

    CriticalCVSS 9.4Proof of conceptEPSS 0%

    n8n · n8nJun 23, 2026

  • CVE-2026-48519
    38Monitor

    Langflow: Unauthenticated RCE in Shareable Playgrounds

    CriticalCVSS 9.6Proof of conceptEPSS 0%

    langflow · langflowJun 23, 2026

  • CVE-2026-55255
    63This week

    Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

    HighCVSS 8.4KEVWeaponizedEPSS 0%

    langflow · langflowJun 23, 2026

  • CVE-2026-55450
    37Monitor

    Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak

    CriticalCVSS 9.3Proof of conceptEPSS 1%

    langflow · langflowJun 23, 2026

  • CVE-2026-54316
    24Monitor

    Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

    MediumCVSS 6.0Proof of conceptEPSS 0%

    anthropic · claude codeJun 23, 2026

  • CVE-2026-53753
    41Plan

    Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

    CriticalCVSS 10.0Proof of conceptEPSS 2%

    kidocode · crawl4aiJun 23, 2026

  • CVE-2026-53755
    30Monitor

    Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check

    HighCVSS 7.5Proof of conceptEPSS 1%

    kidocode · crawl4aiJun 23, 2026

  • CVE-2026-39253
    32Monitor

    An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivotal.Core.Common.dll and Pivotal.Engine.Cl

    HighCVSS 8.1Proof of conceptEPSS 0%

    Jun 23, 2026

  • CVE-2026-54512
    32Monitor

    jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation

    HighCVSS 8.1Proof of conceptEPSS 0%

    fasterxml · jackson-databindJun 23, 2026

  • CVE-2026-54515
    21Monitor

    jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties

    MediumCVSS 5.3Proof of conceptEPSS 0%

    fasterxml · jackson-databindJun 23, 2026

  • CVE-2026-7574
    34Monitor

    Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use

    HighCVSS 8.7Proof of conceptEPSS 0%

    anthropic · claude desktop coworkJun 24, 2026

  • CVE-2026-12416
    39Monitor

    Invoice Generator <= 1.0.0 - Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    pravel · invoice generatorJun 24, 2026

  • CVE-2026-12485
    40Plan

    GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD_IP_SET command

    CriticalCVSS 10.0Proof of conceptEPSS 0%

    geovision inc. · gv-i/o box 4eJun 24, 2026

  • CVE-2026-9539
    26Monitor

    libslirp TCP URG OOB Read Information Leak

    MediumCVSS 6.5Proof of conceptEPSS 0%

    freedesktop.org · libslirpJun 24, 2026

  • CVE-2026-52923
    31Monitor

    ipc: limit next_id allocation to the valid ID range

    HighCVSS 7.8Proof of conceptEPSS 0%

    linux · linux kernelJun 24, 2026

  • CVE-2026-52924
    39Monitor

    sctp: purge outqueue on stale COOKIE-ECHO handling

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    linux · linux kernelJun 24, 2026

  • CVE-2026-56270
    35Monitor

    Flowise - Unauthenticated OAuth Secrets Disclosure via /api/v1/loginmethod Endpoint

    HighCVSS 8.7Proof of conceptEPSS 2%

    flowiseai · flowiseJun 24, 2026

  • CVE-2026-52943
    31Monitor

    net: skbuff: fix missing zerocopy reference in pskb_carve helpers

    HighCVSS 7.8Proof of conceptEPSS 0%

    linux · linux kernelJun 24, 2026

  • CVE-2026-56111
    33Monitor

    Marlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler

    HighCVSS 8.3Proof of conceptEPSS 0%

    marlinfirmware · marlinJun 24, 2026

  • CVE-2026-56121
    37Monitor

    Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization

    CriticalCVSS 9.3Proof of conceptEPSS 1%

    feast-dev · feastJun 24, 2026

  • CVE-2026-52806
    41Plan

    Gogs: RCE via git rebase --exec argument injection in pull request merge

    CriticalCVSS 9.9WeaponizedEPSS 7%

    gogs · gogsJun 24, 2026

  • CVE-2026-52810
    28Monitor

    Gogs: Write to readonly repositories using receive-pack + service=git-upload-pack confusion

    HighCVSS 7.1Proof of conceptEPSS 0%

    gogs · gogsJun 24, 2026

  • CVE-2026-52813
    40Plan

    Gogs: Path Traversal in organization name results in RCE through Git hooks

    CriticalCVSS 10.0Proof of conceptEPSS 1%

    gogs · gogsJun 24, 2026

  • CVE-2026-52815
    22Monitor

    Gogs: Unauthenticated Organization Teams Information Disclosure via API

    MediumCVSS 5.5Proof of conceptEPSS 1%

    gogs · gogsJun 24, 2026

  • CVE-2026-52993
    39Monitor

    tipc: fix double-free in tipc_buf_append()

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    linux · linux kernelJun 24, 2026

  • CVE-2026-53075
    35Monitor

    ppp: require CAP_NET_ADMIN in target netns for unattached ioctls

    HighCVSS 8.8Proof of conceptEPSS 0%

    linux · linux kernelJun 24, 2026

  • CVE-2026-48732
    35Monitor

    Warp: Remote SSH cwd can lead to unauthorized remote command execution

    HighCVSS 8.8Proof of conceptEPSS 1%

    warpdotdev · warpJun 24, 2026

  • CVE-2026-54686
    17Monitor

    Warp: DCS lifecycle hook spoofing can alter terminal session metadata

    MediumCVSS 4.3Proof of conceptEPSS 0%

    warpdotdev · warpJun 24, 2026

  • CVE-2026-39938
    39Monitor

    Cacti: Unauthenticated RCE on Graph Image

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    cacti · cactiJun 24, 2026

  • CVE-2026-52794
    30Monitor

    Sentry: Inefficient Regular Expression Complexity in sentry

    HighCVSS 7.5No exploitEPSS 0%

    sentry · sentryJun 24, 2026

  • CVE-2026-54066
    31Monitor

    SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)

    HighCVSS 7.5Proof of conceptEPSS 2%

    siyuan-note · siyuanJun 24, 2026

  • CVE-2026-54069
    38Monitor

    SiYuan: Unauthenticated Admin API Access via Blanket chrome-extension:// Origin Allowlist

    CriticalCVSS 9.2Proof of conceptEPSS 7%

    siyuan-note · siyuanJun 24, 2026